This policy is a thorough draft written from how the Recall app actually works. Before you publish it, have a UK-qualified solicitor review it — particularly the lawful bases, international transfers and retention sections. Every highlighted item is a blank only you can fill.
01Who we are
Recall ("Recall", "we", "us", "our") is an iOS application operated by Nustream Digital Ltd, a company registered in England and Wales (company number 16079701, registered office First Floor, Swan Buildings, 20 Swan Street, Manchester M4 5JW).
For the purposes of UK data protection law, Nustream Digital Ltd is the data controller responsible for your personal data. If you have any questions about this policy or your data, contact us at support@recall-app.ai.
02The short version
Recall stores the things you save and uses AI to make them searchable and answerable. To do that, your saved content is sent to Anthropic (the makers of Claude) and a small number of other service providers.
We do not sell your data, and your library is never used to train AI models. You can export your data, delete any save, or close your account at any time. This summary is for orientation only — the sections below are the policy.
03What we collect
Account information
When you create an account we collect your email address and, where you sign in with Apple or Google, your name (if shared). We assign you an account identifier. We never receive your Apple or Google password.
Content you save — your library
This is the core of the service. When you save something, we collect and store what you save and what we derive from it: links and URLs, articles, social posts, videos, podcasts, images, screenshots, documents such as PDFs, voice or text notes, and any titles, tags or notes you add. For media, this includes extracted text, transcripts, thumbnails and metadata. You decide what goes into your library.
Usage information
We collect information about how you use Recall — saves created, searches and questions asked, chats, features used and screens viewed — to operate, debug and improve the app.
Device & technical information
We collect your device model, operating system and app version, language and region settings, and diagnostic or crash information. Your IP address is processed transiently to deliver the service and protect against abuse.
Subscription information
We collect your subscription status and purchase history. Payments are handled by Apple through the App Store — we never see or store your payment card details.
Notifications
If you enable notifications, we store a push token so we can deliver them — for example your weekly digest.
04How we use your data, and our lawful bases
Under UK GDPR we must have a lawful basis for each use of your personal data. The table below sets out what we do and why.
| What we do | Lawful basis |
|---|---|
| Provide the core service — store your library, enrich it with AI, power search, the Ask tab and Chat with Bookmark | Performance of a contract with you |
| Manage your account and provide customer support | Performance of a contract with you |
| Process subscriptions and keep billing records | Performance of a contract; legal obligation |
| Maintain, secure and improve the app, and prevent fraud and abuse | Our legitimate interests in running a reliable, safe service |
| Improve AI quality using anonymised prompts and responses — only if you turn on the optional "Share anonymised usage" setting | Your consent |
| Send service messages (e.g. important changes). Marketing messages, if any, only with your consent | Performance of a contract; consent for marketing |
| Comply with the law and respond to lawful requests | Legal obligation |
Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms. You can object to that processing — see Your rights.
05AI processing
Recall is an AI-native app, so it is important you understand this clearly.
When you save something, its content is sent to Anthropic PBC — the company behind the Claude AI models — so it can be summarised, tagged, classified and made searchable, and to power the Ask tab and Chat with Bookmark. Anthropic processes this content on our behalf, as our processor.
- Anthropic returns the AI results to Recall and retains the content in its API logs for a limited period (up to around 30 days) for safety and abuse monitoring, then deletes it.
- Your saved content is not used to train Anthropic's AI models.
- AI processing is essential to how Recall works and cannot be switched off separately. If you do not want a particular item processed this way, do not save it; if you no longer want any AI processing, you can delete your account.
- A separate, optional setting — "Share anonymised usage" — lets you consent to anonymised prompts and responses being used to improve Recall's own AI quality. It is off unless you turn it on, and you can withdraw consent at any time in the app.
You can read more about how Recall uses AI on our AI page, and about Anthropic's practices in Anthropic's privacy policy.
07International transfers
Some of our service providers — including Anthropic, Supabase and Resend — are based in, or process data in, the United States and other countries outside the United Kingdom.
Where your personal data is transferred outside the UK, we make sure it is protected by appropriate safeguards — typically the UK International Data Transfer Agreement, or the International Data Transfer Addendum to the EU Standard Contractual Clauses, or transfer to a country covered by UK adequacy regulations. You can ask us for more detail about these safeguards using the contact details below.
08How long we keep your data
- Your library and account data are kept for as long as your account is active.
- When you delete your account, your library and account data are removed from our live systems promptly, and from routine backups within 30 days.
- Content held by Anthropic in its API logs is deleted by Anthropic within approximately 30 days.
- Transaction and tax records are kept for as long as the law requires us to keep them, even after account closure.
You can delete individual saves at any time in the app, and you can export your library before deleting your account.
09Your rights
Under UK data protection law you have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct data that is inaccurate or incomplete.
- Erasure — ask us to delete your data ("right to be forgotten").
- Restriction — ask us to limit how we use your data.
- Portability — receive your data in a portable format.
- Objection — object to processing based on our legitimate interests.
- Withdraw consent — where we rely on consent, withdraw it at any time.
You can exercise many of these directly in the app: export your library, delete individual saves, or delete your whole account in Profile → Privacy & AI. For anything else, email support@recall-app.ai and we will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk. We would appreciate the chance to address your concern first.
10Children
Recall is not directed at children. You must be at least 18 years old to create an account and use Recall. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
11Security
We take the security of your data seriously. Data is encrypted in transit, access to our systems is restricted and logged, and your library is protected by per-user access controls so that one account cannot read another's data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
12Changes to this policy
We may update this policy from time to time. If we make a material change, we will let you know in the app or by email before it takes effect. The "last updated" date at the top of this page always reflects the current version.
13Contact us
For any privacy question or to exercise your rights:
Nustream Digital Ltd
First Floor, Swan Buildings, 20 Swan Street, Manchester M4 5JW
Email: support@recall-app.ai
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk.