Privacy policy.

Information we handle

• Your account: your Sign in with Apple identifier, the email address Apple provides (which may be a private relay address), your name, and an optional profile photo. We don’t receive your Apple password.
• Your learning content: decks, cards, answers, hints, edits, AI drafts and requests, review ratings and times, scheduling information, and synchronization records. Imports can also include older learning content and recovery records.
• Your connections, publications, and safety choices: friend invitations, accepted connections, shared and Marketplace deck snapshots, publication settings, download records, progress-sharing and practice-contribution permissions, blocked accounts, and reports you submit. Reports can include your description and a snapshot of an identified deck for private review.
• Support and website forms: the email address and message you submit for support, or your email and optional learning interest when you join the availability waitlist.
• Service diagnostics: technical request and error information used to operate, secure, and troubleshoot the API, website, and app update delivery.

How information is used

We use this information to sign you in, save and synchronize your library, schedule reviews, show your learning history, generate drafts you request, provide sharing features, respond to support messages, and operate the service. Waitlist details are used for Recollect availability updates.

The current mobile app does not include an advertising or product analytics SDK. Server and hosting diagnostics are used for service operation and troubleshooting.

When you ask AI for help

AI generation is optional. The app requires your permission to share with Anthropic before sending a new generation request or retry. Permission applies to the signed-in account on that device. You can revoke it in You; requests already sent cannot be recalled.

When you request cards or an answer, Recollect sends your question, deck title, topic, or generation prompt to Anthropic through our API. When expanding an existing deck, up to 40 existing card questions may be included as context to help avoid duplicates. Generated suggestions and request details are saved so you can review or retry them.

Your profile photo and Apple sign-in credentials are not automatically included in these generation prompts. Anything you type into the prompt can be sent, so avoid including sensitive personal information or content you aren’t allowed to share.

Anthropic processes requests under its own applicable terms and privacy practices. Review Anthropic’s privacy policy for information about its handling of submitted content.

Sharing with friends

Your library stays private unless you choose to share a deck or publish it in Marketplace. Friend connections use invitations, and sharing a deck sends a snapshot to the chosen friend. A recipient who accepts gets their own copy of those cards.

Detailed progress sharing is a separate choice. When you enable it for a shared deck, the other participant can see the allowed cards’ review history and recall patterns, including earlier and future reviews covered by that permission. These are self-reported “remembered” or “not sure” ratings, not objective test scores.

You can stop progress sharing, revoke a shared deck, or remove a connection to stop future access through the sharing feature. Copies already accepted into another person’s library are separate content and are not recalled by revoking a share.

You can report a concern or block a person from their page in Friends. Reports go to a private queue for operator review and are not published to other users. Blocking removes the connection, revokes shared-deck and progress access, and prevents new invitations or shares between the accounts. Unblocking allows a new invitation; it does not restore the earlier friendship or permissions.

Keep invite links private. The invitation webpage does not accept an invite automatically, store its code in browser storage, or include the code in its social preview metadata.

Publishing and downloading decks

Marketplace publication is separate from friend sharing. Your published snapshot, including its cards, deck image, and publisher name, is available to signed-in learners. Downloads become independent copies. Private edits or deletion of your original deck do not change the published snapshot; publish an update to change it, or unpublish it to stop new downloads. Existing copies remain with the people who downloaded them.

Publishers can show or hide download counts and aggregate practice trends. Both are hidden by default. Each learner separately chooses whether reviews of a downloaded deck contribute to practice trends; contribution is off by default. Trends cover the last 30 days and appear only when at least five eligible learners contribute reviews. They show activity ranges and recall patterns, without names or individual review histories.

Change your contribution choice in You → Downloads & practice privacy. Turning it off removes your past and future contribution from subsequent results. Turning it back on starts a new permission period; earlier activity is not included. Download records remain for duplicate prevention even when counts are hidden. Information already seen or saved by someone else cannot be recalled.

On a Marketplace listing, choose Report this deck or Block followed by the publisher’s name. Reports include the reported snapshot for private operator review. Blocking prevents Marketplace access between the accounts and stops your practice contribution to that publisher. It also ends any friendship and shared progress access between you; independent downloaded copies remain in your libraries.

Services that help Recollect run

• Apple: account authentication and App Store or TestFlight distribution.
• Railway: application servers, background generation jobs, and the database used for synced accounts and content.
• Anthropic: the prompts and context needed for AI requests you make.
• Expo: app builds and over-the-air update delivery, including technical information needed to request compatible updates.
• Netlify: website hosting and the waitlist and support forms you submit.
• Google Fonts: fonts loaded by the public website. The font service receives the technical requests needed to deliver them.

These providers may process information on infrastructure outside your country. Their own policies apply to their services. We may also disclose information when required by applicable law or needed to respond to abuse and protect the service.

Storage and your choices

The app keeps a local library for offline use and sends account content to the server for synchronization. Signing out separates that library from other accounts; it does not delete the account or erase all local recovery information. Device exports and migration backups can contain learning history and should be kept private.

Service records are kept to provide the account and synced library, reconcile changes, operate generation, and handle security or support needs. Removing a card from the active library does not by itself erase synchronization history, recovery archives, backups, or copies another person already accepted.

You can edit your name and profile photo, remove the photo, control deck and progress sharing, and export your learning data from the app. For other privacy questions, contact Recollect support. Hosting backups and diagnostics may remain outside the active account database; this policy does not state a fixed retention period for every provider backup or service log.

Deleting your account

In You → Delete account, you can export your library first, type DELETE, and confirm with a fresh Apple sign-in. When the server accepts the request, account access is disabled. The app distinguishes an accepted request that is still pending from completed permanent deletion. If the connection ends before confirmation, the app keeps a recovery record so you can check or retry the same request.

After an accepted receipt, the app removes the current account’s local library, drafts, profile cache, and widget data from that device. Server erasure is processed separately and remains pending until the Apple sign-in connection is revoked and owned server records are removed. The app shows an estimated completion time only when one has been configured; otherwise it shows the pending status and any action needed.

Server erasure removes owned account and learning data, Marketplace listings, sharing access, and associated community records. Other people keep independent deck copies they already downloaded or accepted. A minimal deletion record, including request references, status, and a hashed Apple sign-in identifier, is retained to recognize retries and prevent the erased account from being restored by an older sign-in.

Exports you saved elsewhere and older native recovery files whose ownership has not been confirmed are separate from the current account’s local library. Contact support for help with those files or a pending deletion, and include your request reference if one is shown.

Changes to this policy

We may update this policy when Recollect’s features or data handling change. The date above identifies the current policy. Contact us through the support page if you need help understanding a change.