Privacy policy

The short version. Recall Note runs inside your browser. Your collection (the documents you import, the notes you take, the cards you write, your review history) lives on your machine and never reaches us: there is no server copy of it. An account exists to sign you in, and the only things it holds are the few facts listed in section 3. We sell nothing to anyone, we show no advertising, we run no analytics, and no part of your documents is ever sent to an AI model.

1. Who is responsible

The controller of your personal data is [À COMPLÉTER : éditeur : nom et forme juridique], [À COMPLÉTER : adresse]. For anything concerning your data, write to recallnote@proton.me.

This policy covers the Recall Note website and the Recall Note application. It does not cover the sites of the companies listed in section 6, each of which has its own policy.

2. Your collection never leaves your device

This is not a promise about our intentions; it is how the application is built. Everything the product does with your course happens on your own machine:

• opening a PDF and displaying its pages;
• extracting its text, so a highlight can be anchored to the exact passage;
• highlighting, and turning a passage into a card;
• reading the labels drawn inside a captured figure: the character recognition runs in your browser, from files this site serves itself. No pixel of your figures is sent anywhere;
• scheduling your reviews;
• exporting everything to a standard .apkg file.

Your collection lives in your browser's own storage, and your preferences (theme, language, chosen accent) in a handful of local keys. What each one holds is listed in the cookie and storage policy.

The application opens no connection to us for any of it, account or not. It works with the network switched off. The only requests it ever makes concern the account itself (signing in, keeping your session alive) and the feedback you choose to send us.

3. What an account is, and the little it holds

An account signs you in. It does not copy anything. Synchronisation was removed from the product on 31 August 2026: there is no code path by which your documents, notes, cards or review history could reach our servers. What follows is the complete list of what we hold about you, and it fits in four lines.

What we hold about you

• Your email address, which identifies the account.
• Your password, never in clear. It is held as an irreversible hash by our authentication provider; we cannot read it, and neither can anyone who obtains the database.
• A session token, stored by your browser so that you stay signed in.
• The date the account was created.

What is never copied

Everything else. Your collection (documents, folders, notes, cards, decks, review journal, scheduling state) lives in your browser's storage and nowhere else. The way to carry it to another device is the .apkg export, which stays in your hands from start to finish.

4. What we never do

• We never sell, rent or hand over your data to anyone for their own purposes.
• There is no advertising on this site or in the application, and no advertising identifier of any kind.
• There is no analytics and no tracker. No audience measurement script, no third-party pixel, no session recording: not on the marketing pages, not in the application.
• We do not profile you, and no decision about you is taken automatically.
• Nothing you write or import is sent to an AI model. The generation feature was removed from the product on 24 August 2026, and with it every relay to a model provider: there is no longer any code path by which a passage of your course could reach one.
• We do not read your documents. Access is restricted by the technical measures described in section 9, and we open a collection only if you ask us to in writing, for support.
• We never train anything on your data.

5. Why we hold it, and on what legal basis

• Running the service: the account that signs you in, under the contract between you and us (GDPR art. 6.1.b).
• Keeping the service standing: preventing abuse, and the technical logs that make a failure diagnosable. Our legitimate interest in a service that works, weighed against the small amount of data involved (art. 6.1.f).
• The feedback you send us from the application: your consent, given by the act of writing to us (art. 6.1.a).

6. Who else touches your data

We use two companies to run the service. They act on our instructions, under a contract, and may not use your data for their own purposes.

• Vercel: hosting of the site and of the application. The server functions run in the Dublin region, in Ireland. [À COMPLÉTER : entité contractante et adresse]
• Supabase: accounts. The email address, the password hash and the session described in section 3, and nothing of your collection. The project is hosted in the European Union, in Ireland. [À COMPLÉTER : entité contractante et adresse]

Where it is stored. Your account stays in the European Union: the servers are in Ireland, and nothing described in section 3 is held anywhere else.

7. How long we keep it

• Your account: for as long as it exists.
• After you delete your account: it is removed with everything attached to it. Backups roll off after [À COMPLÉTER : délai de rotation des sauvegardes].
• Feedback you send us: [À COMPLÉTER : durée].
• Anything held only in your browser: until you clear your browser's data for this site. We cannot delete it for you, because we cannot see it.

8. Deleting everything

You can delete your account from the application's settings. It is a real deletion and not a flag: the account and the profile attached to it are removed, and nothing of yours remains on our side, because your collection was never there. Nothing is kept in a shadow copy.

Your local collection is a separate matter: it stays on your machine, which is the point of it. Clearing your browser's data for this site removes it.

9. How it is protected

• The strongest protection here is architectural: what is never sent cannot leak. Your collection does not exist on our side, so there is nothing of it to steal from us.
• Everything that does travel (the account requests) goes over an encrypted connection.
• Your password is held as an irreversible hash, never in clear.

No system is beyond reach. If you believe you have found a security flaw, write to recallnote@proton.me and we will answer.

10. The feedback button

When you send us feedback from inside the application, we receive your message, the name of the screen you were on, your email address if you chose to give one, and the identifier of your account if you were signed in. Nothing else travels with it: not your cards, not your documents.

11. Your rights

You may ask us for access to your data, for its correction, for its erasure, for a portable copy, for a restriction of a processing, or object to one carried out on the basis of our legitimate interest. Where a processing rests on your consent, you may withdraw it at any time, and that does not call into question what was done before.

Write to recallnote@proton.me. We answer within one month; if the request is complex we will tell you so within that month and take up to two more. Access to your own data costs nothing.

You may also lodge a complaint with a supervisory authority: in France, the CNIL, 3 place de Fontenoy, 75007 Paris.

Two of these rights are already in your hands without writing to anyone: portability, because you can export your whole collection to a standard .apkg file at any time, review history included; and erasure, through the deletion described in section 8.

12. Cookies

This site sets no cookie and loads nothing from a third party. The application stores what it needs to work offline and to keep you signed in, and none of it tracks you. What is stored, why, and for how long is set out in the cookie and storage policy.

13. Age

Recall Note is meant for students of 15 and over, which is the age from which French law lets someone consent on their own to the processing of their data. If you are under 15, a parent or guardian must agree on your behalf before you create an account. We do not knowingly hold data about younger children; if you believe we do, write to recallnote@proton.me and we will erase it.

14. Changes to this policy

If we change what we do with your data, we change this page and move the effective date at the top. A change that materially affects you will be announced in the application before it takes effect, not slipped in.

15. Getting in touch

For any question about this policy, or to exercise any of the rights in section 11: recallnote@proton.me.