Draft for beta testing — pending legal review.

Privacy Notice

What we collect

• Your email address and a securely hashed password (we never see or store your password in plain text).
• Your settings: display name, timezone, chosen focus areas, goals and session length.
• Your practice activity: answers you give, scores, hints used, timing, review schedules and XP.

We don't ask for medical history, and you don't need to share any to use Recall.

How we use it

Only to run the service for you: planning sessions, scheduling reviews, and showing your progress. Your data isn't visible to other users, and we don't sell it.

Who processes it

Accounts and data are stored with Supabase (database and authentication), encrypted in transit and at rest. Recall does not currently use any AI service, and none of your answers are sent to one.

Your choices

In Settings you can update your details, download everything we store about you as a JSON file, and permanently delete your account. Deleting your account removes your profile, settings and all practice history immediately.

What we keep after deletion

We keep a minimal security log entry recording that an account was deleted or data was exported (an internal account ID, the action and the time). It contains none of your practice content. Database backups held by our provider expire on their normal schedule.