Privacy Policy

Recall is built by Growth Medium AI Limited ("Growth Medium AI", "we", "us") — a New Zealand company based in Wellington. This policy explains what personal information Recall collects from you, how we use it, who we share it with, and what choices you have.

If anything here is unclear, email us at joe@growthmediumai.com — it reaches a human directly.

1. Who we are

Growth Medium AI Limited
Wellington, New Zealand
joe@growthmediumai.com

We are the data controller for the information Recall collects.

2. What we collect

2.1 Account information

How much we receive depends on how you sign in:

• Email & password — your email address and a password (stored hashed by our authentication provider; we never see it in plain text).
• Sign in with Apple — your name as you choose to share it, your email address (or an Apple private-relay address if you choose "Hide My Email"), and a stable Apple account identifier.
• Google Sign-In — your name, your email address, and a stable Google account identifier.

In every case we also record the date you signed up.

Trying Recall before signing up. You can use Recall anonymously when you first install it. We create a random account identifier — no name or email — so your dog's profile and conversations work straight away. If you later create a full account (email, Apple, or Google), we associate your existing anonymous data with that account so everything carries through.

2.2 Your dog's profile

The information you choose to enter about your dog, including:

• Name
• Breed
• Date of birth or estimated age
• Sex
• Whether children live in the household
• Free-text background you provide about training history, household context, or health considerations

2.3 Chat content

Every message you send to Recall, and every response Recall gives. We use this to:

• Generate the next response in the conversation.
• Build a memory of your dog so Recall can give consistent, personalised advice over time.
• Improve Recall and our content library.

We do not use your chat content to train AI models.

2.4 Memory

Recall extracts structured memory from your conversations — commands your dog is learning, household routines, milestones, health considerations — and stores these against your dog's profile. You can view and edit this memory at any time inside the app.

2.5 Feedback

When you tap "Report" on an AI response, or submit feedback via Settings → App feedback & bugs, we store:

• What you wrote
• The category you selected
• The specific message you reported (for response-level feedback)
• Your app version and operating system

2.6 Subscription status

If you subscribe to Recall Plus, we receive from the app stores (via RevenueCat, our subscription-management processor):

• Which plan you're on, and whether it's active, expired, or cancelled
• Which store billed you (Apple App Store or Google Play) and the relevant renewal dates
• Purchase receipts, used only to validate your subscription

Apple and Google handle the payment itself. We — and RevenueCat — never receive your card number or bank details.

2.7 Usage and technical data

• For each conversation: which AI model produced the response, how long it took, and approximate token counts and cost (so we can monitor our own infrastructure costs).
• First-party analytics events (for example which screens and features are used), logged in our own database. We use no third-party analytics or advertising SDKs and no ad tracking.
• Anonymous error logs.
• Rate-limiting counters keyed to a pseudonymous user identifier, so no single account can overload the service.
• When you sign up, sign in, or reset your password, Cloudflare Turnstile processes connection and browser signals to distinguish humans from bots (see section 5).

3. How we use your information

• To provide and personalise Recall's coaching for your specific dog.
• To apply Recall's safety behaviour — deferring aggression cases to in-person professionals and health questions to vets.
• To send transactional email (signup confirmation, password reset). We don't send marketing email without your separate consent.
• To manage your subscription and free allowance.
• To keep the service healthy: monitoring costs, preventing abuse, and rate-limiting unusually heavy traffic.
• To improve Recall and our content library.

We do not sell your data. We do not share it with advertisers. We do not give it to other dog owners or trainers.

4. AI processing

Recall's coaching replies are generated by large language models. When you send a message:

• Your message, the relevant parts of your dog's profile and memory, and relevant content from our training library are sent to OpenRouter, a routing service, which passes them to an AI model provider (currently Anthropic, OpenAI, or Google) to generate the reply.
• More than one provider may process your content over time — Recall uses a fallback chain so a different model can answer if the first is unavailable.
• We log usage metadata about each call (model used, tokens, cost, latency) for cost monitoring. This metadata is ours; the providers don't get anything beyond the request itself.

We do not use your content to train AI models, and we prefer providers with no-training-on-user-data commitments. Provider data-retention practices vary — you should assume your chat content may be retained by the provider for up to 30 days for abuse-prevention and logging.

5. Who we share it with

Recall uses third-party services to function. These are our processors:

Apple and Google bill your subscription directly under their own terms and privacy policies; they act as independent controllers of your payment information, not as our processors.

6. Where your data lives

Your data is stored in Supabase's Tokyo, Japan region (ap-northeast-1) and may be processed in the United States by the processors listed above. This means your data is processed outside New Zealand. We rely on our processors' contractual commitments and certifications to ensure protections comparable to those under New Zealand law.

7. How long we keep it

When you delete a dog, the dog and all its data are soft-deleted — hidden from you and from any co-owners — and permanently removed within 30 days.

8. Deleting your account

Two ways, both free, no reason needed:

• In the app — Settings → Account → Delete account. This is immediate and complete: your account, dog profiles, chat history, memory, and feedback are deleted right away.
• On the web — use the form on our account deletion page, or email us. We action web requests within 30 days.

After deletion we may retain a minimal record where the law requires it (for example billing records for tax purposes) and anonymised, aggregated statistics that can no longer be linked to you. Residual copies in routine encrypted backups age out on our standard backup cycle shortly after. Deletion is permanent and can't be undone.

9. Your rights

At any time, you can:

• See your data inside the app (memory, chat history, dog profiles).
• Edit your data inside the app.
• Delete a dog (Settings → Dogs → Delete) — final removal happens within 30 days.
• Delete your account in the app (immediate) or via the web form.
• Export your data — email us and we'll send you a JSON export within 30 days.

If you are in New Zealand, you also have rights of access and correction under the Privacy Act 2020. If you are in the EU or UK, you have additional rights under GDPR. If you are in California, you have rights under the CCPA. Email us to exercise any of these rights.

10. Children

Recall is not designed for users under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

If you set "Children at home: Yes" in your dog's profile, that flag tells Recall to be careful about child-safety guidance in its responses — it is not a statement about who is using the app, and it doesn't change the under-13 rule.

11. Health and behaviour disclaimers

Recall is not a substitute for a veterinarian or a qualified in-person animal behaviourist. Specifically:

• For aggression or any safety concern, Recall will refuse to give DIY behaviour-modification advice and will refer you to an in-person behaviourist.
• For health concerns (diagnosis, treatment, medication), Recall will refer you to a vet.

You are responsible for getting your dog the right professional care.

12. Security

• All data in transit is encrypted (HTTPS).
• Authentication tokens are stored in iOS Keychain or Android Keystore on your device.
• Database access is governed by row-level security policies — your data is not readable by other users.
• We use industry-standard practices: least-privilege access, hashed passwords, signed JWTs.

No system is perfectly secure. If we experience a data breach affecting your personal data, we will notify you within 72 hours of discovery.

13. Changes

We'll update this policy as Recall evolves. The "Last updated" date at the top reflects the most recent change. For material changes, we'll email you.

14. Contact

Email: joe@growthmediumai.com
Address: Growth Medium AI Limited, Wellington, New Zealand

If you are in New Zealand and not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz.