Short version: we collect as little as we can, we never sell your data, the public demo uses synthetic data, and any voice or health-related data is processed only under explicit, revocable consent in a pilot.
1. Overview
This Privacy Policy explains how Recalla. ("Recalla", "we", "us") handles information in connection with the Recalla website at recalla.app, its subdomains, and any related demos or pilots (together, the "Services"). Recalla is an early-stage, research-oriented product. Where this policy describes handling of health-related or voice data, that handling applies to pilot programs run under explicit consent — the public website and interactive demo do not collect such data.
We designed Recalla to be consent-first: we aim to collect as little as possible, to be clear about why, and to keep sensitive processing under an explicit, revocable agreement.
2. Who we are
The data controller is Recalla., a US corporation. For any privacy question, or to exercise your rights, contact hello@recalla.app
3. Information we collect
We collect the following, depending on how you interact with us:
- Information you provide — e.g. your name, email, and message when you contact us, request a demo, or apply to a role or pilot.
- Website usage data — basic analytics such as pages viewed, approximate region, device and browser type, and referring source, collected to understand and improve the site.
- Technical data — IP address and standard server logs, used for security and to operate the site.
- Pilot data (consent-based only) — if you take part in a pilot, we may process voice recordings and features derived from them, together with information you or a care partner provide. This is described and agreed separately in the pilot consent form and only happens after you opt in.
4. Voice and health-related data
Voice can carry sensitive, health-related signals. We treat any voice recordings and derived features collected in a pilot as a special category of data and apply heightened care: explicit consent, purpose limitation, access controls, and defined retention. We do not use pilot voice data to build advertising profiles, and we do not sell it.
The public interactive demo uses synthetic participants only. Its live check-in feature analyses audio in your browser to show illustrative values, and does not upload or store your recording.
5. How we use information
We use information to: respond to your enquiries; operate, secure, and improve the Services; run pilots you have consented to; evaluate role applications; comply with legal obligations; and communicate updates you have asked for. We do not sell personal information.
6. Legal bases (EEA/UK)
Where the GDPR applies, we rely on: consent (e.g. pilot participation, marketing emails); legitimate interests (e.g. operating and securing the site, responding to enquiries); contract (e.g. providing something you requested); and legal obligation. For special-category (health-related) data, we rely on your explicit consent. You can withdraw consent at any time.
7. Cookies & analytics
We use a minimal set of cookies and similar technologies for essential site function and basic, privacy-respecting analytics.You can control cookies through your browser settings.
8. Sharing & processors
We share information only with service providers who process it on our behalf under contract (for example, hosting, email, and analytics providers), and only as needed to run the Services.We may also disclose information where required by law, or to protect rights, safety, and security. We do not sell personal information or share it for cross-context behavioural advertising.
9. International transfers
We may process information in countries other than yours, including the United States. Where we transfer personal data out of the EEA/UK, we use an appropriate safeguard such as the Standard Contractual Clauses.
10. Data retention
We keep information only as long as needed for the purposes described here or as required by law. Enquiry and application data is kept for a limited period and then deleted or anonymised. Pilot data retention is defined in the applicable consent form.
11. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. Residents of California and certain other US states have rights to know, delete, correct, and opt out of "sale"/"sharing" (we do neither). To exercise any right, email hello@recalla.app. You may also complain to your local data protection authority.
12. Security
We use reasonable technical and organisational measures to protect information, including access controls, encryption in transit, and least-privilege practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
13. Children
The Services are intended for adults and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
14. Changes to this policy
We may update this policy as the product and our practices evolve. We will change the "last updated" date above and, for material changes, provide a more prominent notice.
15. Contact
Questions about this policy or your data? Email hello@recalla.app