Privacy policy

Last updated 8 September 2026

Recall is a study application: it keeps your notes and cards, and it remembers how your reviews went so it can decide when to show you a card again. This page says what that means for your data in plain terms — what is stored, why, how long it stays, and who else can see it.

Recall is run by Froilan Sulit . Questions about anything here, and any request to see or delete your data, go to support@fsulit.net .

What is stored

Your account

Your name, your email address, and your password — the password only ever as a hash, which cannot be turned back into what you typed. Alongside it: your settings (theme, whether questions are timed, whether reminders are on, how lists are laid out), your progress (XP, level, current and longest streak, sessions completed), and the time you last signed in.

What you write

Your notes, folders, tags, card sets, cards, and any pictures you attach. This is your material. It is private to your account unless you deliberately share it — see Sharing below.

How your reviews went

Every answer you give in a study session is recorded: the card, the grade, whether it was right, what you typed, and how the schedule changed as a result. If a card had an explanation, we also record how long that explanation was on screen before you moved on. This is the record the spaced-repetition schedule is built from, and it is what makes the app work at all.

The same is kept for games and for challenges you play: the round, the word or question, and how it went.

How you use the app

A log of events — signing in, starting a session, reviewing a card, creating a note, opening a shared link. Each entry is an event name, a timestamp, and a small amount of detail about the thing acted on. It is used to keep the app working and to understand which parts of it are actually used.

If you turn on reminders

A subscription for the browser you enabled them in, so a notification can reach that browser. Delivering it means handing the message to the push service your browser vendor operates — Google, Mozilla or Apple, depending on the browser. Turning reminders off removes the subscription.

If you send feedback

Your rating or message, the page you were on, and a screenshot if you chose to attach one.

What is not stored

There is no advertising in Recall, no third-party analytics or tracking scripts, and nothing here is sold or handed to anyone for marketing. Your notes and cards are not read by us except where you have asked for help with a specific problem, or where the law requires it.

Your IP address is not kept against your scores. Where an address is needed to stop one person filling a leaderboard, it is stored as a one-way hash that cannot be turned back into the address.

Sharing, and who can see what

Nothing you write is public unless you make it so. Three things can make it visible:

• A share link for a note or a card set. Anyone holding the link can read that one thing, without an account. You can revoke a link at any time, which stops it opening.
• A challenge. The questions are copied out when you create it, and anyone with the link can play and appear on its board under a name they type. That board shows the names, scores and times of everyone who played.
• A duel. The first signed-in person to open the link becomes your opponent. They see your score once they have played, and you see theirs.

If you play someone else's challenge as a guest, what is stored is the name you typed, your score and time, the answers you chose, and a hash of your address. No account is created.

How long things are kept

• Your notes, cards and pictures: until you delete them. A deleted note waits 30 days in the trash before it goes for good.
• Your review history: kept for as long as your account exists. It is what the schedule and your learning profile are built from. Deleting a card keeps the record that you reviewed it, but the record can no longer be tied to that card.
• Usage events: the detailed rows are kept for 90 days, then reduced to daily totals and deleted.
• Pictures nothing points at: swept automatically.
• Screenshots on resolved feedback: deleted after 30 days. The words you wrote are kept.
• Everything else: removed when your account is removed.

Your data, and getting it back or removing it

You can export your notes and your card sets from inside the app at any time, as files meant to be readable without Recall.

To have your account and everything in it deleted, write to support@fsulit.net and it will be done. Deleting the account removes your notes, cards, pictures, review history, scores and settings.

Cookies

Recall sets a session cookie so that you stay signed in, and a cookie that protects forms against being submitted from other sites. Both are necessary for the application to function; there are no advertising or tracking cookies. Some preferences — which folders you have open, for instance — are kept in your own browser and never sent anywhere.

Where your data is

Recall runs on rented hosting, and the database and uploaded pictures live there. Two style and icon libraries are loaded from a public CDN (jsDelivr) when a page opens, which means that CDN sees the request — your address and browser — as it would for any website using one.

Learners under 13

Recall is a study tool and some of the people using it will be at school. An account for anyone under 13 should be created and supervised by a parent, guardian or teacher. If you believe a child has an account without that, write to support@fsulit.net and it will be removed.

Security

Passwords are hashed. Share links use long random tokens that cannot be guessed from one another. Sign-in, registration and password resets are rate limited. No system is perfect, and Recall is a small application rather than a bank — please do not store anything in it that would harm you if it were exposed.

Changes

If this policy changes in a way that affects what is collected or who can see it, the date at the top changes and you will be told inside the app.

Terms of use · Back to Recall