Legal

Privacy Policy

Effective date: June 2026

Recall is a personal AI assistant desktop application. This policy describes what data we collect, how we use it, and your rights.

1. What we collect

• Gmail data: We read Gmail metadata and content via the Google Gmail API on your behalf. Recall may store a bounded preview of recent sent-email samples to personalize draft tone, and proactive job payloads may include email snippets that were surfaced to your app.
• Google Calendar data: We read calendar events via the Google Calendar API and can create calendar events when you ask Recall to do so. Proactive job payloads may include event details that were surfaced to your app.
• Google OAuth tokens: We store Google access and refresh tokens so Recall can provide Gmail and Calendar features while you are signed in.
• Voice audio: When you use voice input, your audio is recorded locally in the Tauri desktop app, sent to our transcription provider (Cartesia) to convert speech to text, and then discarded. Voice recordings are processed in-memory only and are never stored.
• Recall items: Tasks, reminders, and notes you create are stored in our database (Supabase) associated with your account.
• Proactive job results: Summaries, email cards, calendar cards, and brief metadata generated by scheduled jobs are stored in our database to enable delivery to your device.
• Personal memories: If you use the optional Memory feature, facts and preferences you ask Recall to remember are stored with our memory provider (Supermemory) to personalize responses. You can disable this feature.

2. How we use your data

We use your data solely to provide Recall's features:

• Generating your daily morning brief (email summaries, calendar events, open tasks)
• Creating Gmail drafts and Calendar events when you ask for them
• Enabling voice-based task and reminder creation
• Delivering smart reminders and follow-up nudges
• Personalizing draft style from recent sent-email samples
• Learning your usage patterns to improve relevance over time
• Remembering personal facts you ask Recall to save, to personalize responses (optional Memory feature)

Your data is never sold, rented, or shared with third parties for advertising. It is never used to train AI models.

Recall's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Third-party services

• Google APIs (Gmail, Calendar): Recall reads Gmail and Calendar data, saves Gmail drafts, and creates Calendar events on your behalf when requested. Subject to Google's Privacy Policy.
• Anthropic API: Text is sent to Claude (Anthropic) for processing and generating responses. Subject to Anthropic's Privacy Policy.
• OpenAI API: Text from Recall items is sent to OpenAI to generate embeddings for semantic search. Subject to OpenAI's Privacy Policy.
• Supabase: Your account data, Google OAuth tokens, Recall items, session data, email style profile, learned usage patterns, goals, suggestions, and proactive job results are stored in Supabase. Subject to Supabase's Privacy Policy.
• Cartesia: When you use voice, audio is sent to Cartesia for transcription (speech-to-text) and response text is sent to Cartesia for voice synthesis (text-to-speech). Subject to Cartesia's Privacy Policy.
• Supermemory: If the optional Memory feature is enabled, personal memories and profile data you save are stored with Supermemory to personalize Recall. Subject to Supermemory's Privacy Policy.

4. Data retention

• Google OAuth tokens: Retained while your Google account remains connected to Recall.
• Email style profile: A bounded encrypted cache of recent sent-email samples is retained while Google is connected and personalization is enabled. It is refreshed by overwriting the existing profile rather than accumulating historical versions.
• Proactive job results: Stored in our database to deliver morning briefs, email cards, calendar cards, and other proactive summaries to your device.
• Chat and session history: Stored so your conversations and context can continue across app sessions.
• Voice audio: Processed in-memory only. Discarded immediately after transcription. Not stored anywhere.
• Recall items (tasks, reminders, notes): Retained until you delete them or request account deletion.
• Personal memories: Retained with Supermemory until you delete them or disable the Memory feature.

5. Security

Your Google OAuth tokens and stored email style samples are encrypted at rest and are used only to provide Recall's features on your behalf. We use HTTPS for all data transmission. Access is restricted to authenticated users only, enforced by per-user row-level security.

6. Your rights

You may request deletion of your account and all associated data at any time. To do so, email shivohamangal@gmail.comwith the subject line "Delete my account".

You can revoke Recall's access to your Google account at any time by visiting Google Account Permissions.

7. Changes to this policy

We may update this policy as the app evolves. Material changes will be announced via the GitHub repository. The effective date at the top of this page reflects the most recent revision.

8. Contact

Questions or concerns? Contact Shivoham Angal at shivohamangal@gmail.com.