Your thoughts remain yours.

1. What Recall is

Recall Home ("Recall", "we", "us") is a local-first iPhone app that turns a thought you choose to submit into tasks, reminders, notes, people links, and saved Notebook references. You can use the app without creating an account.

2. Information handled on your iPhone

Recall locally stores organised memories and reminder state; People records, aliases, corrections, pronunciation hints, and links; optional Contacts-derived name vocabulary; Notebook links and files; settings and notification state; pending source needed to finish processing; short-lived Undo data; and a random installation identifier in the iOS Keychain.

The People store and Contacts list are not uploaded. A person's name is processed only when it is part of capture words you submit. Recall does not fetch Notebook websites in the background or send Notebook links and files to AI providers.

3. Information submitted for processing

Recall first attempts Apple Speech and Apple's Foundation Model on your iPhone. When that path is unavailable or cannot safely complete the request, and Cloud fallback is enabled, Recall may send the capture words, a short recording only when on-device transcription is unavailable, the capture date and time, time zone and language, and a random installation identifier.

The identifier is not your name, email, Contacts identifier, advertising identifier, or hardware serial number. Recall's relay hashes it for rate limiting and provider safety metadata. It is replaced when you use Erase all Recall data.

Existing Library entries, local identifiers, People records, Contacts, aliases, relationship labels, and Notebook content are not uploaded to resolve edits. Provider suggestions are validated and applied on your iPhone.

4. Why information is processed

Submitted content is processed to transcribe and organise the capture you requested. The random identifier is processed to secure the service, enforce rate limits, and control abuse. Optional Contacts access improves name recognition.

Where required, processing relies on performance of the requested service, your consent for optional permissions and fallback, and our legitimate interest in securing a deliberately minimised service. Recall makes suggestions for your personal records, not decisions with legal or similarly significant effects. You can review, correct, reschedule, or delete them.

5. Service providers

• Apple operating-system services provide on-device speech and Foundation Model processing, notifications, permitted Contacts access, storage, and device backup according to your settings.
• Cloudflare operates Recall's stateless relay and request-level security controls.
• OpenAI provides optional cloud fallback transcription or organisation.

This public website contains no analytics, advertising, or contact form. Cloudflare delivers and protects it and may process connection information, such as an IP address and request metadata, and set strictly necessary security cookies as part of that service.

The relay is configured not to persist request bodies, transcripts, audio, or model results in a database, object store, or persistent Workers log. OpenAI API content is not used to train models by default. Unless the production Recall project has verified Zero Data Retention, submitted text may remain in provider abuse-monitoring logs for up to 30 days.

Providers may process information in countries other than your own, using available contractual and transfer safeguards where required. Recall does not sell personal information or share it for cross-context behavioural advertising.

6. Retention and deletion

• Organised records remain locally until you delete them or erase Recall.
• Verbatim words are discarded after successful organisation by default. If you opt to keep them, they remain locally until disabled or deleted.
• Pending typed captures retain only the source needed to finish or review them.
• Untranscribed audio is file-protected, excluded from backups, removed after successful transcription, and expires within 24 hours.
• Visible Undo snapshots are removed when their Undo window expires.
• The random installation identifier remains until you erase all Recall data or it is otherwise removed from the device.

Erase removes Recall-owned local records, Notebook files, queued audio, vocabulary, preferences, notifications, installation identity, and Recall's private Spotlight index. It cannot remove an export or backup saved elsewhere, data already included in an iPhone backup, or an original item in another app.

7. Your choices and rights

Recall Settings lets you pause understanding, disable cloud fallback, revoke optional access, discard retained words, hide Siri and Spotlight content, export or back up data, correct or forget People, delete individual records, and erase all Recall data.

Depending on where you live, you may have rights to access, correct, delete, restrict or object, receive a portable copy, withdraw consent, and complain to a data-protection authority. Email saad.lambe@gmail.com. With no user account or uploaded Library, the in-app controls are normally the fastest way to exercise these rights.

8. Children, security, and changes

Recall is a general-audience productivity app and is not directed to children. We do not knowingly solicit children's personal information.

Recall uses iOS data protection, Keychain protection, authenticated backup encryption, bounded requests, and a relay that keeps provider credentials out of the app. No security measure guarantees absolute protection; keep your iPhone passcode and backup password private.

We update the effective date when this policy changes. If a change materially expands collection, use, or sharing, we will give in-app notice and obtain consent where required rather than relying only on a silent policy edit.