Privacy Policy
Last updated: July 5, 2026
1. Information we collect
We collect information you give us directly, and information generated as you use the product.
Account information
- Name, email address, and profile picture (when you sign in with Google or create an account with email/password)
- Authentication tokens needed to keep you signed in
Content you create in mrecall
| Feature | What we store |
|---|---|
| Home inventory | Home names/addresses, item names, locations, quantities, categories, notes, and photos you upload |
| Spoke (contacts & conversations) | Contact names, phone numbers, optional email addresses, and the notes, tags, and dates you log for each conversation |
| Meeting notes | Client/contact name, company, meeting type, notes, action items, and follow-up date and time |
| Vendor memory | Vendor name, category, contact details, negotiated prices, and notes |
| Warranty, insurance & service trackers | Product/policy details, dates, amounts, and any bills or documents you upload |
| Shopping lists | Items, categories, and — for shared lists — the email addresses of people you invite |
Information collected automatically
- Basic device and browser information, used only to keep the app working correctly across devices
- Data stored locally in your browser (localStorage) so the app works offline as a Progressive Web App
2. How we use your information
We use your information solely to operate and improve mrecall for you:
- To store and sync your inventory, contacts, notes, and other content across your devices
- To generate AI-assisted summaries of your conversation history when you request one (see below)
- To create calendar events on your behalf when you set a follow-up date and time on a meeting note, if you've connected Google Calendar
- To send reminders (for example, warranty expiry or upcoming follow-ups) via browser push notifications, if you enable them
- To let you back up and restore your data to your own Google Drive, if you choose to use that feature
We do not use your personal data for advertising, and we do not sell your data to anyone.
3. Third-party services we rely on
mrecall is built on top of a small number of trusted infrastructure providers. Each only receives the data necessary to perform its function:
| Provider | Purpose | What it can access |
|---|---|---|
| Supabase | Database, authentication, and file storage | All content you store in mrecall, encrypted in transit and at rest |
| Sign-in, Calendar event creation, optional Drive backup | Your Google profile (name, email, picture), and — only with your explicit permission — access to create/update Calendar events or read/write a backup file in your Drive | |
| Anthropic (Claude) | Generating AI summaries of your conversation notes, on request | The specific conversation notes you ask to be summarized, sent at the time of your request only |
| Netlify | Website hosting and backend functions | Standard web request data needed to serve the app |
We choose providers who meet industry-standard security and privacy practices, and we only send them the minimum data needed for the specific feature you're using.
4. When we share your information
Aside from the service providers above, we share your information with other people only when you explicitly choose to:
- Sharing conversations or meeting notes: you can share a specific note with another mrecall user by entering their email address. We verify the recipient is a registered mrecall user before the share completes.
- Shared homes and shopping lists: if you invite someone to a shared home or shopping list, they can see the items and lists you've explicitly shared — nothing else in your account.
We do not share your data with advertisers, data brokers, or any other third party for their own purposes. We may disclose information if required by law, or to protect the rights, safety, or property of mrecall or our users.
5. Where your data is stored
Your data is stored in our Supabase-hosted database and file storage, protected by row-level security so that only you (and anyone you've explicitly shared content with) can access it. Some data is also cached locally in your browser to support offline use.
6. Data retention
We retain your data for as long as your account is active, so you can access your full history. You can delete individual items, contacts, notes, and other records at any time within the app. If you'd like your entire account and all associated data deleted, contact us (see below) and we'll process the request within a reasonable time.
7. Your rights and choices
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. In mrecall, you can already:
- Export your data as a backup file at any time
- Delete individual records directly in the app
- Disconnect Google Calendar or Google Drive access at any time from your Google Account settings
- Contact us to request a full account deletion or data export
8. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS) for all traffic, database-level access controls so your data is only visible to you, and secure authentication. No system is completely immune to risk, and we encourage you to use a strong, unique password and keep your devices secure.
9. Children's privacy
mrecall is not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. We'll update the "Last updated" date above, and for significant changes, we'll make a reasonable effort to notify you directly.
12. Contact us
Questions about this policy or your data? Reach us at privacy@mrecall.ai.