Privacy Policy

The extension is deliberately minimal. When you actively save a page, it sends only the URL of that page to Recallio, together with your sign-in credential.

If you save a selected passage, it also sends the text you selected and, optionally, a private note you type. Nothing else on the page is read or transmitted.

The extension does not track your browsing. It has no access to pages until you explicitly act — by clicking its toolbar button, using its keyboard shortcut, or choosing “Save to Recallio” from the right-click menu. It requests no broad site permissions and runs no background page monitoring.

The mobile apps are for saving. When you share a link to Recallio, or add one inside the app, they send the URL of that page to Recallio together with your sign-in credential. On Android you may also add a private note and your own tags before saving, which are sent with it. Nothing else about your device, your other apps, or your activity is collected.

Signing in uses your Google account, which gives us your email address. The app stores a narrowly scoped, revocable credential that can save content and nothing more. On Android it is held in the system keystore; it is never your website session.

On your device, the app saves where you were last looking so it can restore it — the account identifier, the tag you had selected, and the identifier of the card you had scrolled to. This stays on your device and is discarded after seven days.

If you send feedback, the app sends what you typed, the kind of feedback it is, and any images you chose to attach.

The apps request no location, contacts, calendar, photos library, microphone, or camera access, and contain no advertising or crash-reporting software.

You can save a reel or post by sharing it in a direct message to @recallio.app. Instagram, which is run by Meta, delivers those messages to Recallio. We only see messages sent to @recallio.app, never your other conversations, and we never receive your Instagram password.

Connecting. Before anything is saved, you connect Instagram from Settings in Recallio. We then store the identifier Instagram gives us for your account in conversations with Recallio (a number, not your username), linked to your Recallio account. One Instagram account can be connected to only one Recallio account at a time.

What we use. We act only on reels and posts you share with us, and on text you send together with a share. The shared link is saved to your library like any other save, and that text becomes your private note. We may reply in the chat to confirm the save or say that it could not be opened. Any other message, photo, voice note or reply is ignored and not stored. If your Instagram account is not connected, nothing you send is saved; we may reply once with a link to connect.

What we keep.The connection, and each message’s identifier for a short time so the same share is never saved twice. Saves made this way follow the same retention rules as every other save.

Removing it. Disconnect Instagram in Settings to delete the connection straight away; saves already made stay until you delete them. Deleting your Recallio account also removes the connection. To ask us to delete the Instagram data we hold without using the app, email us (below) from the address you use for Recallio. The messages themselves also exist in Instagram, where you can delete the chat; Meta handles them under its own privacy policy.

Your email address, used solely to sign you in and to send email you have asked for.

The content you save — the link, and information extracted from it such as a title, summary, transcript text, tags, and a preview image.

Limited product events — that a save, search, question, or item view happened, so we can tell whether the product is useful. We do not store the text of your searches or questions, or the titles and URLs involved, in analytics. These events are linked to your account through a scrambled identifier rather than your email address. That is pseudonymous, not anonymous: we can still connect those events to your account, so we describe them here as data we collect.

Your saved content is used to build your own library and to power your search, tags, and questions. Your library is private to your account.

When you ask a question, the notes and highlighted passages on the saves that match it help answer it, alongside those saves' content. This only happens when AI processing is turned on.

We do not sell your data, share it with advertisers, or use it to build advertising profiles. We do not use your private notes or highlighted passages to train models.

Recallio relies on a small number of processors to function: hosting and database providers to run the service and store your library, an extraction provider to read the content of a link you save, Meta to deliver and send Instagram messages if you save by message, and AI providers to generate summaries, tags, and answers from your saved content. These providers process data only to deliver the feature you requested.

Saved items are kept until you delete them. You can delete an individual save at any time from your library, and deleting your account removes your saved items, tags, notes, passages, and any Instagram connection.

When you delete your account you are signed out straight away, the account is locked, and every connected tool (AI assistants and the browser extension) loses access. Your data is then kept for 30 days so you can change your mind: signing back in within that time lets you restore the account and your saved items. After 30 days your saved items, tags, notes, passages, reminders and sign-in identity are permanently removed, usually within minutes. Public page extractions shared with other users and feedback reports (with the link to you removed) are kept. Usage events already recorded in our analytics tool (that a save, search or question happened) are also kept, under a scrambled identifier. They never include your name, email, the links you saved or what you searched for.

You can delete your account from Settings in the app or on the website. If you have already uninstalled the app, you can request deletion at recallio.app/delete-account.

The extension never receives your website session. It holds only a narrowly scoped, revocable capture credential that can save content and nothing more, and it is stored locally in your browser. All traffic to Recallio uses HTTPS.

Recallio is not directed at children under 13, and we do not knowingly collect their personal information.

If this policy changes materially, we will update the date above and, where appropriate, notify you in the app.

Questions about this policy or your data are answered by email.

Email us