Privacy Policy

Recalio (“we”, “us”) is a read-it-later and spaced-repetition app for people who want to remember what they read. This policy explains what we collect, why, and the controls you have. We try to keep it short and plain.

1. What we collect

• Account info. Your email address when you join the waitlist or create an account.
• Your reading data. URLs you save, article text we fetch from those URLs, your highlights, notes, tags, and recall progress.
• Usage data. Basic product analytics (pages visited, features used) to understand what’s working. We use PostHog with IP anonymisation.
• Technical logs. Server logs (IP address, user agent, timestamps) retained briefly for debugging and abuse prevention.

We do not sell your data. We do not build advertising profiles.

2. How we use it

• To run the app: save your articles, generate AI summaries and highlights, schedule recall sessions.
• To send occasional product updates related to your account (e.g. your invite when the waitlist opens).
• To improve Recalio — we look at aggregate metrics, not individual reading lists.
• To prevent fraud and abuse.

3. AI processing

When you save an article, we send its text to third-party AI providers to generate highlights, summaries, and category suggestions. These providers process the text on our behalf and are contractually prohibited from training models on your content.

4. Third parties we rely on

• Hosting & infrastructure — cloud providers that store your data in encrypted form.
• Resend — transactional and waitlist emails.
• PostHog — privacy-friendly product analytics.
• Clerk — authentication.
• AI providers — language model access for summaries, highlights, and categorisation.

5. Your choices

• Access & export. Request a copy of everything we store about you.
• Deletion. Delete your account at any time — we remove your reading data within 30 days.
• Unsubscribe. Every email has a one-click unsubscribe link.
• Cookies. We use minimal cookies for authentication and analytics; you can block non-essential ones in your browser.

Send requests to privacy@recalio.com.

6. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is limited and logged. No system is perfectly secure, but we take reasonable precautions and will notify you if something goes wrong in a way that affects you.

7. Children

Recalio isn’t intended for people under 13. We don’t knowingly collect data from children.

8. Changes

If we change this policy in a meaningful way, we’ll notify you by email or in the app before the change takes effect. Older versions stay available on request.

9. Contact

Questions, requests, or concerns? Reach us at privacy@recalio.com.