Privacy Policy

Last updated: July 17, 2026

1. Overview

Recall People ("we", "our", or "the app") is a privacy-first personal CRM that helps you remember the people you meet. We are committed to protecting your privacy and being transparent about how we handle your data.

Key principle: Your relationship data is synced through your account so the app can work across devices. Sensitive content, including notes, memories, and relationship context, is encrypted in our database. We do not sell your personal data or use it to train AI models.

2. Data We Collect

2.1 Relationship Data Synced Through Your Account

The following app content is associated with your account and synced so you can access it across your devices:

  • Contact information (names, phone numbers, emails, birthdays)
  • Notes and memories about your contacts
  • Transcriptions of voice recordings (the audio itself is not stored by Recall People after transcription)
  • AI-generated summaries and conversation starters
  • Groups, tags, and events you create
  • Custom avatars generated for contacts

2.2 Account Data

We store the minimum data needed to provide authentication, secure sync, preferences, and paid features:

  • Email address
  • Name (if provided)
  • Authentication tokens for secure login
  • Preferred language, subscription status, and usage counters for plan limits
  • Operational security logs such as IP address, user agent, action type, and success or failure status

2.3 Sensitive Data and AI Processing

Sensitive relationship content is encrypted in our database. AI features remain disabled until you give explicit permission in the app. If you consent and request an AI feature, only the relevant content is sent to the provider needed to deliver it:

  • Voice recordings: Sent to Groq for transcription using Whisper. We do not store those recordings on our servers.
  • Text for AI analysis: Sent to Cerebras to extract contacts, generate summaries, run semantic search, and answer your questions via the Assistant.
  • Avatar generation: Text descriptions such as gender, age range, and style are sent to OpenAI GPT Image 2 to generate illustrated contact avatars. No real photos are required for this feature.
  • Quality evaluation: If server-side quality evaluation is enabled, a sampled subset of AI inputs and responses may be sent to xAI Grok to assess result quality.

2.4 Product Analytics, Reliability, and AI Observability

Recall People uses PostHog Cloud EU on the public website, in the mobile app, and on the backend to understand feature usage, diagnose errors, secure the service, and monitor AI cost and reliability. Depending on the surface, PostHog receives an internal user identifier, authentication provider type, product-interaction events, counters and booleans, device or technical context, and error diagnostics.

We do not send contact names, note text, transcriptions, search queries, or relationship content in product analytics events. Click/touch autocapture, session replay, and IP-derived location enrichment are disabled on both the website and mobile app. AI prompts and outputs are redacted from automated AI observability; manual transcription and avatar telemetry contains operational metadata such as model, latency, duration, byte count, or output length, not content. We do not use PostHog for advertising or cross-app tracking.

3. How We Use Your Data

  • Transcribe your voice recordings into text
  • Extract contact information and events from your notes
  • Generate AI summaries and conversation starters
  • Create custom avatars for your contacts
  • Answer your questions about your contacts via the Assistant
  • Send you notifications about upcoming events (if enabled)
  • Sync relationship data through your account
  • Manage your account and subscription
  • Protect the service, prevent abuse, and debug reliability issues

4. Third-Party Services

We use the following third-party services to provide app functionality:

  • Groq: Speech-to-text transcription using Whisper
  • Cerebras: AI analysis, contact extraction, summaries, and AI assistant
  • OpenAI GPT Image 2: AI avatar generation from text descriptions
  • xAI Grok: Sampled AI response quality evaluation when enabled
  • RevenueCat: Subscription and payment management via App Store / Google Play
  • Google Sign-In / Apple Sign-In: Optional authentication methods
  • PostHog Cloud EU: Product analytics, error diagnostics, service reliability, and redacted AI operational telemetry

These services process data only as needed to provide their functionality and are bound by their own privacy policies and data processing terms.

5. Data Storage and Security

  • Relationship data is synced through your account
  • Sensitive content, including notes, memories, and relationship context, is encrypted in our database
  • Authentication tokens are stored securely using your device's keychain (iOS) or keystore (Android)
  • All communications with our servers use HTTPS encryption
  • We limit internal access to personal data to what is needed to operate, secure, and support the service
  • We do not sell your personal data

6. AI and Your Data

Your data is never used to train AI models.

Before any AI feature shares personal data with Groq, Cerebras, OpenAI, or xAI, the app explains what is processed, names the providers, and asks for your permission. You can decline and continue using non-AI features. If you later request an AI feature, the app asks again. Once enabled, your data is sent only when you request AI processing. We configure these services so your inputs and outputs are not used for model training, except where you separately choose to share data with a provider outside Recall People.

Providers may retain limited operational, safety, abuse-prevention, billing, or usage metrics under their own terms. Cerebras states that it does not retain inference inputs and outputs. Groq does not retain inference content by default, but may keep it temporarily for reliability or abuse review. xAI states that API requests and responses are retained for up to 30 days unless Zero Data Retention applies. OpenAI may retain API inputs and outputs for a limited period for safety, abuse prevention, and service operation according to its API data controls.

7. Your Rights

You have full control over your data:

  • Access: View all your data directly in the app
  • Export: Export your data anytime in JSON or CSV format
  • Delete: Delete individual contacts, notes, or your entire account
  • AI choice: Decline third-party AI processing, continue using non-AI features, or change your choice under Profile → Data → AI data processing
  • Portability: Your exported data can be used elsewhere
  • Correction: Edit your contact and note data directly in the app

8. Data Retention

  • Relationship data remains associated with your account until you delete it or request account deletion
  • Deleting the app from one device does not automatically delete synced account data
  • Account data is retained until you request deletion or as otherwise required for legal, billing, security, or abuse-prevention reasons
  • Operational logs are retained only as long as needed for security, debugging, abuse prevention, and legal obligations
  • Analytics and reliability events are retained according to our PostHog configuration and deleted or anonymized when no longer needed for those purposes
  • Voice recordings sent for transcription are not stored by Recall People after processing

You can delete your account inside the app. For accounts linked to Sign in with Apple, Recall People asks you to reauthenticate and revokes the Apple authorization before deleting the account. Deleting your Recall People account does not cancel an App Store or Google Play subscription; subscriptions must be managed through the relevant store.

9. International Transfers

Our service providers may process data in countries outside your country of residence, including the United States. When this happens, processing is governed by the provider's contractual and legal safeguards.

10. Legal Basis

Where applicable privacy laws require a legal basis, we process data to provide the app and your account, with your consent for AI processing, to comply with legal obligations, and for our legitimate interests in security, abuse prevention, debugging, and improving service reliability.

11. Children's Privacy

Recall People is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy, our data practices, or a request to access, correct, export, or delete account data, please contact us at:

privacy@recallpeople.com