Privacy Policy

1. Who we are

Exact Recall is operated by the entity that hosts and administers this Service (the “Operator”). For privacy requests, contact the Operator using the support or contact method published with your deployment of Exact Recall, or the email address you use for account-related communications.

2. Information we collect

• Account information. When you sign in (for example via Clerk or another authentication provider), we receive identifiers such as your user ID, email address, and profile information as made available by that provider.
• Content you provide. Event titles, dates, locations, summaries, transcripts, attachments metadata, tags, and other information you add to your memories.
• Phone number. If you choose to add a mobile number, we store it in international (E.164) format. We use it to send a one-time verification code and, if you enable reminders, short SMS messages about follow-ups on events you created. Providing a number is voluntary except where needed for those features.
• Technical data. IP address, device/browser type, and similar data may be processed by our hosting and infrastructure providers for security and reliability.
• AI processing. To power chat, search, summaries, and SMS wording, parts of your content may be sent to third-party AI providers (for example Anthropic, OpenAI) according to your settings and our infrastructure configuration.

3. SMS text messages and Twilio (messaging disclosure)

We may send SMS messages to the mobile number you provide and verify through the Service. Messaging is delivered using Twilio or similar telecommunications infrastructure. Twilio and mobile carriers may process message content and routing data under their own policies.

Consent. We obtain consent consistent with applicable law and industry expectations for application-to-person (A2P) messaging, including Twilio’s requirements. By entering your mobile number in Exact Recall, completing verification where required, and enabling optional SMS reminders in Settings, you consent to receive the specific categories of messages described below from Exact Recall at the number you provide. Consent is not a condition of purchasing any separate good or service except to the extent you choose to use SMS-based features. You may withdraw consent as described in the “Your choices” section.

Message types. (a) Verification codes — one-time codes to confirm that your phone number belongs to you. (b) Informational / transactional — short reminders related to events you logged and optional follow-up prompts (not marketing newsletters unless we separately obtain consent for promotional SMS).

Sender identification. Messages identify Exact Recall as the sender or clearly relate to your Exact Recall account so you know who is contacting you.

Opt-out (STOP) and Twilio-aligned language. In line with Twilio’s Messaging Policy and carrier expectations, our SMS program supports standard opt-out keywords. Unless a specific message type is exempt under applicable rules, initial or recurring messages may include language such as: “Reply STOP to unsubscribe” (or equivalent standard keywords such as STOPALL, UNSUBSCRIBE, OPTOUT, CANCEL, END, REVOKE, or QUIT). When you reply with such a keyword, we will process your opt-out and may send a single confirmation message. After that, we will not send further SMS to that number for that program unless you opt in again. You can also turn off SMS reminders or remove your number in Exact Recall Settings.

Proof of consent. We retain records of consent (for example, account settings, verification timestamps, and message logs) as needed to operate the Service and meet legal and carrier requirements, including responding to reasonable requests from Twilio.

Carrier costs. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

4. How we use information

• Provide, maintain, and improve the Service.
• Authenticate you and secure accounts.
• Send verification and optional reminder SMS as you configure.
• Generate summaries, search, and conversational features using AI where enabled.
• Comply with law, enforce our terms, and respond to lawful requests.

5. How we share information

We share information with service providers who process it on our behalf, including:

• Authentication (e.g., Clerk)
• SMS delivery (e.g., Twilio)
• Hosting and database (e.g., cloud providers)
• AI providers (e.g., Anthropic, OpenAI) as configured

We may disclose information if required by law or to protect rights, safety, and integrity of users and the Service. We do not sell your personal information for money as that term is commonly understood in U.S. state privacy laws; we do not use SMS consent for unrelated third-party marketing.

6. Retention

We keep information for as long as your account is active or as needed to provide the Service, comply with legal obligations (including consent records for messaging), resolve disputes, and enforce our agreements.

7. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is 100% secure.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You may exercise SMS opt-out via STOP (and related keywords) and through Settings. Contact the Operator for other privacy requests.

9. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

10. International transfers

If you access the Service from outside the country where servers are located, your information may be transferred and processed across borders. We take steps consistent with applicable law.

11. Changes

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date. Material changes may require additional notice where required by law.