Privacy Policy

1. Information We Collect

Information you provide

• Account information — when you sign in with Apple or Google, we receive your name and email address from your identity provider. We use these to create and manage your account.
• Memories — the notes, keywords, and images you create within the App. These are your content and are stored to provide the service.
• Email address — when you sign up for the waitlist on the Site, or when you sign in to the App.

Information collected automatically

• Usage analytics — we collect events such as app launches, feature usage (e.g. creating or recalling memories, search queries, onboarding steps), screen views, and interaction patterns. These events are associated with your account when you are signed in. We use analytics to understand how the App is used and to improve the experience.
• Device information — app version, build number, and platform (iOS or macOS) are sent with analytics events.
• Device identifiers — a device-level install identifier is generated by our analytics provider and used to associate pre-sign-in activity with your account after you sign in.
• IP address — collected by our service providers with API requests and analytics events.
• Diagnostic logs — when enabled for your account, the App may send diagnostic logs to our servers to help us identify and fix issues. These logs include your device model, platform, app version, and technical event data. Diagnostic logging is not enabled by default and does not include the content of your memories.
• Website session identifiers — on the Site, we use technical properties of your device (such as screen size, timezone, and browser type) to generate a session-level identifier for A/B testing. This identifier is stored only in your browser’s session storage and is cleared when you close your browser. We do not use traditional tracking cookies for this purpose.

2. How Your Data Is Stored

Offline-first architecture

The App is designed to work offline first. Your memories are stored locally on your device in an encrypted database and are available even without an internet connection.

Cloud sync

When you are signed in and connected to the internet, your memories are synced to our cloud infrastructure so they are backed up and accessible across your devices. Sync is handled through PowerSync, which maintains a real-time connection between your local database and our cloud database.

Authentication credentials

Your authentication tokens are stored securely in your device’s Keychain, protected by the operating system’s built-in security.

3. How We Use Your Information

• Providing the service — to store, sync, and display your memories across your devices.
• Account management — to authenticate you, manage your session, and link your data across devices.
• Analytics and improvement — to understand how the App and Site are used, measure feature adoption, run A/B tests, and improve the user experience.
• Attribution — to connect your pre-sign-up activity (such as waitlist signups) with your account after you sign in, so we can measure the effectiveness of our outreach.
• Communications — to send you confirmation emails and product updates you opted into.
• Security — to detect abuse, prevent fraud, and maintain the integrity of our services.

4. Service Providers

We share your information only with trusted service providers that help us operate the App and Site. They process data on our behalf and are bound by contractual obligations to keep it secure:

• Supabase — authentication, database hosting, and cloud data storage.
• PowerSync — real-time data synchronization between your device and our cloud database.
• PostHog (EU instance) — product analytics and feature flags.
• Cloudflare — content delivery, security, and object storage for image assets.
• Amazon Web Services (SES) — email delivery for confirmations and updates.

We do not sell, rent, or share your personal information with third parties for their own marketing or advertising purposes.

5. Cookies and Tracking Technologies

The App

The App does not use cookies. Analytics are provided by PostHog using a device-level identifier. We do not use advertising trackers or share analytics data with ad networks.

The Site

The Site uses minimal cookie-based tracking. We use a single cookie to remember UI preferences. We do not use third-party advertising cookies. For A/B testing, we use session-level browser identifiers stored in your browser’s session storage (not cookies). These identifiers are automatically cleared when you close your browser and cannot be used to track you across different websites.

6. Data Retention

• Memories and account data — retained for as long as your account is active. If you delete your account, your data is removed from our servers.
• Local data — memories stored on your device persist until you delete them or uninstall the App.
• Analytics data — retained for up to 24 months, then deleted.
• Email addresses (waitlist) — retained until you unsubscribe, plus 30 days for processing.
• Website session identifiers — stored only for the duration of your browser session and automatically cleared when you close your browser.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted connections (HTTPS/TLS) for all data in transit.
• Authentication tokens stored in your device’s Keychain, protected by the operating system.
• Row-level security on our cloud database, ensuring you can only access your own data.
• Secure database access controls and password-protected administrative interfaces.

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

All users

• Access — request a copy of the personal data we hold about you.
• Deletion — request that we delete your account and personal data.
• Correction — request that we correct inaccurate data.
• Data export — your memories are always accessible on your device. You can share individual memories from within the App.
• Unsubscribe — opt out of marketing emails at any time via the unsubscribe link in each email.

European Economic Area, UK, and Switzerland (GDPR)

If you are in the EEA, UK, or Switzerland, our legal bases for processing your data are:

• Contract performance — processing necessary to provide the Memory service (storing and syncing your memories).
• Consent — when you voluntarily provide your email address for the waitlist or sign in to the App.
• Legitimate interest — for analytics and product improvement, balanced against your privacy rights.

You also have the right to data portability, restrict processing, and lodge a complaint with your local data protection authority.

California (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale or sharing of personal information — we do not sell your data.
• Non-discrimination for exercising your privacy rights.

Canada (PIPEDA)

Canadian users may access, correct, or request deletion of their personal information by contacting us.

9. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. Our analytics provider (PostHog) operates from the EU. When we transfer data outside your region, we ensure appropriate safeguards are in place, including standard contractual clauses where required.

10. Children’s Privacy

The App and Site are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, through the App or by email. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

Recall Innovations Inc.
Email: admin@usememory.com