Privacy Policy

Recalio (“we”, “us”) is a read-it-later and spaced-repetition app for people who want to remember what they read. This policy explains what we collect, why, and the controls you have. We try to keep it short and plain.

1. What we collect

• Account info. Your email address when you create an account.
• Your reading data. URLs you save, article text we fetch from those URLs, your highlights, notes, tags, and recall progress.
• Usage data. Basic product analytics (pages visited, features used) to understand what’s working. We use PostHog with IP anonymisation.
• Technical logs. Server logs (IP address, user agent, timestamps) retained briefly for debugging and abuse prevention.

We do not sell your data. We do not build advertising profiles.

2. How we use it

• To run the app: save your articles, generate AI summaries and highlights, schedule recall sessions.
• To send account and service emails (e.g. sign-in links, important product changes).
• To improve Recalio — we look at aggregate metrics, not individual reading lists.
• To prevent fraud and abuse.

3. AI processing

When you save an article, we send its text to third-party AI providers to generate highlights and summaries. These providers process the text on our behalf and are contractually prohibited from training models on your content.

4. Third parties we rely on

• Hosting & infrastructure — cloud providers that store your data in encrypted form.
• Resend — transactional email.
• PostHog — privacy-friendly product analytics.
• Clerk — authentication.
• Polar — payments and subscription management for Pro plans bought on the web. We never see or store your card details.
• Apple — payments for Pro plans bought in the iOS app, through your Apple Account. We receive Apple’s signed record of the subscription (its identifiers, product, dates and renewal status), never your payment details.
• AI providers — language model access for summaries, highlights, and categorisation.

5. Your choices

• Access & export. Request a copy of everything we store about you.
• Deletion. Delete your account at any time — we remove your reading data within 30 days. If you bought Pro through the App Store, we keep that purchase’s record after deletion: your former account ID, the purchase token the app attached to it, and Apple’s subscription details (its identifiers, product, purchase and expiry dates, and renewal status). We keep it so the subscription can never be attached to someone else’s account, and use it for nothing else. Deleting your account doesn’t cancel an App Store subscription; cancel it in your Apple Account.
• Unsubscribe. Every email has a one-click unsubscribe link.
• Cookies. We use minimal cookies for authentication and analytics; you can block non-essential ones in your browser.

Send requests to privacy@recalio.com.

6. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is limited and logged. No system is perfectly secure, but we take reasonable precautions and will notify you if something goes wrong in a way that affects you.

7. Children

Recalio isn’t intended for people under 13. We don’t knowingly collect data from children.

8. Changes

If we change this policy in a meaningful way, we’ll notify you by email or in the app before the change takes effect. Older versions stay available on request.

9. Contact

Questions, requests, or concerns? Reach us at privacy@recalio.com.