What Recall stores
Recall stores your Google account identity, security and session state, documents you choose to upload, extracted text and reviewed facts, Life objects, reminders, audit records, and coarse operational events. Ask conversations stay in the current browser tab and are not saved to the database.
How processing works
Supabase provides authentication, the application database, and private object storage. Google Cloud provides malware-isolated workers, Document AI OCR, Cloud Tasks, Cloud Run, and Vertex AI extraction and grounded answers. Primary hosted resources, stored data, OCR, and document extraction are configured in Mumbai. Ask sends a masked question, limited masked conversation context, and only the minimum authorized evidence excerpts needed for an answer to Google’s global Vertex AI endpoint. Global Ask processing is not restricted to India and does not provide an India data-residency guarantee. Provider security, authentication, billing, and service-control metadata may also follow those providers’ own operational boundaries.
If you opt into email reminders, Resend receives your verified account email and a generic message telling you to sign in to Recall. Reminder emails do not include document names, people, identifiers, extracted values, or dates. You can turn email reminders off in Preferences.
Automated extraction is not an authenticity check. You review suggested facts, links, and reminders before they enter Recall. Document content is treated as untrusted data and cannot authorize actions or change system instructions.
Access and human review
Each tester has an isolated private household protected by Google sign-in, TOTP, row-level security, and private storage. Recall does not routinely inspect your documents. Limited support access may occur only to investigate an issue you report or a security incident, and administrative actions are audited.
Retention, export, and deletion
- You can request an export when that private-beta capability is enabled. Download links expire after 24 hours.
- Document deletion removes the item from normal product access immediately and schedules live originals, previews, OCR, facts, search data, links, reminders, and affected exports for purge within 24 hours.
- Deleted database records may remain in encrypted backups until the disclosed seven-day recovery window expires.
- You can request account erasure from Profile. After confirmation, Recall disables your access on every device and stops new reminders. Recall immediately records a receipt and queues an acknowledgement email. The private-beta target for ordinary live-data erasure is seven calendar days, subject to necessary legal retention. A receipt does not mean cleanup has completed. Shared-household requests require support assistance.
Analytics and sensitive data
Recall records only an allowlisted set of coarse events and operational totals. It does not put questions, answers, OCR, filenames, document identifiers, extracted values, or evidence excerpts in product analytics or application logs. Reviewed facts and their evidence are stored in Recall so Search and Ask can retrieve them. Ask conversations remain in the current browser tab and are cleared on sign-out or tab closure. Sensitive values are masked by default on screen.
Claims we do not make
Recall uses managed encryption and access controls. It is not end-to-end encrypted or zero knowledge, and this beta does not claim SOC 2, HIPAA, or formal legal, financial, medical, or tax compliance.
Contact and changes
Email lovnishb@gmail.com for privacy, account-erasure, or security questions, including after signing out. Recall targets a human response within two business days (Monday–Friday, Asia/Kolkata) and resolution of a privacy complaint within 30 calendar days. These are private-beta service targets; category-specific retention and exceptions remain subject to legal review. A material notice update creates a new version that you must accept before continuing.