Privacy Policy

Effective September 13, 2026 · Applies to the Recalo app and recaloapp.com

Recalo is made by Fishteen LLC ("Fishteen," "we"), a small family-owned company in California. The short version: your library is yours. We collect only what we need to run Recalo, we never sell your data, and we show no ads.

Information we collect

• Account information. Your email address and, if you sign in with Apple or Google, the name and identifier those services share with us.
• Your content. The things you save and create in Recalo — links, text, notes, images and files you upload, voice recordings you make for dictation, the items Recalo creates from them, and the activity you log (for example, marking a recipe as made).
• Device and usage data. Device identifiers used to keep your devices in sync, push-notification tokens if you enable notifications, and standard server logs (IP address, timestamps, requested endpoints) kept for security and reliability.
• Crash and error reports. If the app crashes or hits an error, we collect a report to help us fix it: device type, OS version, app version, a stack trace, a short trail of the app activity leading up to the problem, and — if you were looking at a saved item — that item's type and ID, never its contents. Reports are tagged with your account ID and with a per-installation device identifier, so we can tell one person hitting the same crash repeatedly from many people hitting it once. These reports are processed by Sentry. We have turned off IP-address storage in Sentry, and we do not use its session-replay feature — your screen is never recorded.
• Purchase information. If you subscribe to Recalo Pro, we receive your subscription status and purchase history. Payments are handled by the App Store or, for web purchases, by Stripe — we never receive your payment-card details.
• Newsletter. If you opt in to product updates, your email address and the topics you chose. You can opt out in the app or from any email.

An email address is the only thing you must give us to have an account. To share with other people you also need a display name, so they can recognize you. Everything else is optional.

How we use your information

• To provide Recalo: storing and syncing your library, organizing what you save, search, and notifications you ask for.
• To process your content with AI: when you save or create something, relevant content is sent to our AI service providers (for example, for language understanding and voice transcription) solely to provide the feature you invoked. Our providers are bound by agreements that prohibit using your content to train their models.
• To enrich what you save: titles, links, or place names may be looked up against third-party catalogs (such as movie, book, or place databases) to fill in details like covers, hours, and ratings. Saved web links may be fetched on our behalf to extract their content.
• To suggest next steps in the app, based on what you save and do, and to count how much AI processing your account uses so we can apply the free and Pro limits.
• To operate responsibly: security, abuse prevention, debugging, and legal compliance.

We do not sell or rent your personal information, and we do not share it with advertisers or data brokers. There is no advertising in Recalo.

Why we're allowed to process your data

Privacy law asks us to say which legal basis covers each use. Here they are.

• To provide the service you signed up for (GDPR Art. 6(1)(b)): signing you in, storing and syncing your library, AI processing, enrichment, notifications you ask for, and billing.
• Our legitimate interest in running Recalo well (Art. 6(1)(f)): security logs, crash reports, abuse prevention, and in-app suggestions based on your activity.
• Your consent (Art. 6(1)(a)): the newsletter and push notifications. You can withdraw it any time in the app, and nothing else stops working.
• Legal obligations (Art. 6(1)(c)): tax and accounting records, and responding to lawful requests.

Where your data lives

Recalo runs on Google Cloud infrastructure in the United States. Your data is isolated per account, encrypted in transit and at rest, and protected by database-level access controls.

If you use Recalo from outside the United States, your data is transferred to the US. We rely on the transfer being necessary to provide the service you signed up for (GDPR Art. 49(1)(b)). Each provider is either certified under the Data Privacy Framework, has signed standard data-transfer clauses with us, or is in a country the EU recognizes as adequate.

Sharing with third parties

We share data only with the service providers needed to run Recalo, and only the minimum each needs:

• Cloud hosting in the United States (Google Cloud).
• AI language and voice-transcription providers, which receive the content you ask Recalo to process.
• Web-content fetching: when you save a link, a fetching provider retrieves the page on our behalf, so it sees that URL.
• Catalog lookups: movie, book, place, and map databases receive the title or place name you saved so we can fill in details.
• Transactional email and push delivery.
• Crash diagnostics (Sentry) and website analytics (PostHog, Cloudflare).
• Subscription management (RevenueCat, which receives a pseudonymous app user ID and your purchase and entitlement data) and payments — Apple for the App Store, Stripe for web purchases.

Each provider may use your data only to serve Recalo. Our AI providers may not use your content to train their models.

The only other time we'd share anything is if a court order or other legal process forces us to — and then only the specific information legally demanded.

Connecting AI assistants

You can connect Recalo to AI assistants such as Claude or ChatGPT. This only happens when you set it up and approve it. Once connected, the assistant can read from and write to your library on your behalf — searching, saving, and updating items when you ask it to. Whatever you ask the assistant to look up or save is sent to that assistant's provider (for example, Anthropic or OpenAI), and their privacy policy governs how they handle it, including whether it's retained or used for training. We don't control that, and the connection sends only what your requests call for — nothing is shared in the background. You can disconnect at any time from the assistant's settings or from Recalo, and disconnection takes effect immediately.

Cookies and local storage

We keep this simple: no tracking cookies, no advertising cookies, no cross-site tracking. When you're signed in, we use an essential session cookie (in the app) and secure on-device storage to keep you logged in, and we save a few preferences locally on your device — things like your recent searches and your light/dark theme choice. On this website we measure traffic with Cloudflare Web Analytics and PostHog, both configured so that no cookies are set and no visitor profile is stored. PostHog counts visitors by hashing your IP address and browser with a value that changes daily; the IP address itself is discarded and never stored. We do not record sessions. Because we rely only on essential storage and cookieless analytics, we don't need — and don't show — a cookie consent banner. We do not sell or share your personal information.

Retention and deletion

Your content, account details, and device records are kept until you delete them or your account. When you delete an item, it disappears from your library immediately and any attached files are removed within a day. Deleted data leaves our encrypted backups within 8 days.

We keep server logs for 30 days and crash reports for 90 days.

To delete your account and everything in it, use Settings → Delete Account in the app, or email hello@recaloapp.com — we complete deletion within 30 days. After deletion we keep a few records that carry no name or email: an anonymized record of AI spend, a note that a deletion happened, bookkeeping for any subscription we could not cancel, and a record that you made a data request, minus your email. Your newsletter contact is removed from our email provider. Purchase records stay with Apple, Stripe, and our subscription processor as accounting rules require.

Your rights

Wherever you live, you can: see what we hold about you; get a copy in a machine-readable format; correct it; delete it; restrict or object to how we use it; and withdraw any consent you've given.

The quickest way is in the app: Settings → Privacy & data → Export your data, or Settings → Delete Account. Or email hello@recaloapp.com. We respond within one month and may ask you to confirm the request from your account email first. Someone acting for you can email us on your behalf; we'll confirm with you before we act.

You can also complain to your data-protection authority: in the UK, the Information Commissioner's Office (ICO); in the EU, your national authority; in California, the Privacy Protection Agency or the Attorney General.

California residents. The categories of personal information we've collected in the past 12 months are the ones listed under Information we collect. We get it from you, your device, the sign-in service you chose, and the store you bought through. We do not sell personal information, and we do not "share" it for cross-context behavioral advertising, so there is no opt-out to offer. We never treat you differently for exercising your rights.

People you add

You may save information about other people — a Person card, or the email address of someone you invite to a shared page. We process it only to provide Recalo to you. We never contact those people except to deliver an invitation you send, and they can ask us to remove their details at hello@recaloapp.com.

Children

Recalo is not directed to children under 13 — or under the age of digital consent where you live, if that is higher — and we do not knowingly collect personal information from them.

Changes

We may update this policy as Recalo evolves. The effective date above reflects the latest version; material changes will be announced in the app.

Contact

Email hello@recaloapp.com or see the contact page. Recalo is made by Fishteen LLC.