Privacy
What happens to the things you save in Recallit, in plain words. Last updated 21 October 2026.
What Recallit keeps
Your saved pages, YouTube transcripts, notes, files and pictures, the summaries and tags made for them, your collections, and your account details (username, email, and a scrambled form of your password). Every card belongs to you, and other members cannot see it. Recallit has no advertising and does not sell your data.
Who can see your data
The person who runs this Recallit server (the administrator) can technically open the database and the stored files, so they can in principle read everything on the server. They do not browse members' cards in the app, and the admin tools show usage and costs, not content. The administrator does read the feedback you send. Please do not save anything here you would not be comfortable with the administrator being able to read.
What is sent to OpenAI
Recallit uses OpenAI to read what you save. This is what leaves Recallit:
- When you save a page or file: its text (up to about 12,000 characters) is sent to write the summary and tags.
- Meaning search and Related: each card's title, tags and summary are sent once, and again if the card changes, to make a "meaning" fingerprint.
- Ask Remy: your question, up to your last three questions and answers from the same chat (so a follow-up makes sense), and the saved cards that best match (their title, tags, summary, any picture descriptions, and up to eight short passages from the saved text that fit your question) are sent to write an answer. If you ask about Recallit itself, the few matching parts of Recallit's own guide (which is built from the public FAQ, About and Privacy pages) are sent with your question.
- Saved page text: when you save a page, video or file, the first part of its own text (about 8,000 characters) is also kept on your card, only to make Remy and the Library search find it. It is never shown in the browser or shared.
- Whole text, in passages: Recallit also keeps the whole text of what you save (every page of a PDF, the whole transcript of a video, up to about 2 million characters), cut into short passages of about 800 characters, each with its PDF page or video time. This is how Remy finds a fact deep inside a long file. Each passage is sent once to OpenAI to make its "meaning" fingerprint, and again only if its text changes. Passages are never shown to anyone else, are kept out for notes marked Keep out of AI, go to the Trash and come back with their card, and are deleted when the card is deleted for good or your account is deleted.
- Picture descriptions (off unless you turn them on in Settings, AI): each picture in your notes and files is sent once to OpenAI, which writes one short sentence about it. Notes kept out of AI are never described, and turning the setting off deletes every description.
- Continue in an external chat: only if you press one of its buttons. It shows you the text first, and your own browser then copies it and opens ChatGPT, Claude or Gemini. Recallit does not send it, and those services have their own privacy rules.
- Chats with Remy: your questions and the answers are saved in your account for 90 days so you can look back at them (read-only). You can delete one saved chat, or all of them, in Ask Remy at any time, and they are deleted with your account. A copy can remain in backups for the backup period below.
- Optional note suggestions: the text of a note you ask a title and tags for.
You stay in control. In Settings you can turn off AI title and tags for new saves, and you can mark any note Keep out of AI. A note kept out of AI is never embedded, never included in Remy's answers, and never sent for suggestions. Turning the switch on also deletes the note's existing fingerprint. Recallit sends this through OpenAI's developer service (not the ChatGPT app). OpenAI's own handling of the data is described in its terms and privacy policy, and anything already sent to OpenAI is outside Recallit's control.
What is processed on the owner's own computer
Some preparation of a library can be done on the computer of the person who runs this Recallit server (the owner), by an AI model that runs only on that computer (Ollama). It writes suggested theme names, study notes and links between cards that say the same thing in different words. You can dismiss any suggestion, and suggestions are never mixed into your own notes.
- What is sent there: the titles, tags, summaries and short passages of the cards of the people the owner has switched this on for, over an encrypted connection, using a token that can do nothing else. Cards you keep out of AI are never sent.
- Who is included: today only the owner's own account. Nobody else's cards are processed until this page has been updated and they have been told.
- What happens to it: the owner's computer keeps nothing. The answers come back to Recallit and are stored as suggestions. This step does not send anything to OpenAI or to any other company.
- It only runs while the owner's computer is on. When it is off, Recallit works the same without the suggestions.
Other services that help run Recallit
- Hosting: Recallit runs on Railway (railway.com), which stores the database and your files on its servers.
- YouTube transcripts: when you save a YouTube video, Recallit asks YouTube for the video's transcript. If YouTube refuses the request, the video's web address may be sent to a transcript service, Supadata (supadata.ai), which returns the transcript text. Nothing else about you is sent.
- Email: sign-up codes, password resets and invitations are sent through Resend (resend.com), which sees your email address and the message.
- Backups: the nightly copies are encrypted before they leave the server and stored with Backblaze (B2). Short-term database copies are kept with Cloudflare (R2). See "Deleting your data" for how long they are kept.
- Error reports: if something breaks, Recallit sends a technical error report to Sentry (sentry.io). Request contents, cookies, headers, note text, passwords and tokens are removed from the report before it is sent.
- Voice dictation: if you dictate a note with your browser's voice typing, Chrome sends the audio to Google to turn it into text. That happens in the browser, outside Recallit.
The Chrome extension
The extension sends the page you choose to save, with the text it can see in your tab, to the Recallit address you set. It does nothing in the background unless you turn on "Save the page when I open this". You can see and disconnect each browser under Settings, Connected devices.
Deleting your data
- Trash: a card you delete stays in the Trash for 30 days and can be restored. After that, or if you choose "Delete forever", it is removed.
- Delete account (Settings, Data) asks for your password and then removes your account, every card, note, tag, collection, stored file, picture and cover, your chats with Remy, your usage history and your connected devices. It cannot be undone.
- Backups: copies of the database and files are kept as a safety net. Nightly encrypted copies are kept for up to 7 days, then one a week for 4 weeks and one a month for 6 months, so data you delete can stay in older backups for up to about 6 months before it ages out. Short-term database copies are kept for about 7 days.
- Take it with you: "Export everything" (Settings, Data) makes a zip of your cards, notes, files and pictures whenever you want one.
Cookies and browser storage
Recallit uses one sign-in cookie, which lasts 30 days. You can end every session at once with "Sign out everywhere" in Settings. Recallit also remembers a few display choices (such as your theme, motion setting and which panels are open) in your browser's own storage. They stay on your device. There is no advertising and no tracking.
Questions and requests
To ask about your data, or to ask for something to be corrected or removed, use Help & Feedback inside Recallit or write to admin@recallit.co. If this page changes in a way that matters, the date at the top will change with it.
This page describes in plain language how Recallit works. It is not legal advice.