ExceptionalRecallPrivacy policy
This policy explains what information the ExceptionalRecall app and this website handle, why, where it is kept and what you can do about it. In short: what you write in the app stays on your iPhone. Only what is needed for your account — and, if you choose to join, for PeopleHub — is kept on a server in the European Union. Nothing is sold, and there is no advertising or tracking.
Who is responsible
The data controller is Bruno Vaz, an individual developer based in Portugal. For anything about your data, write to privacy@exceptionalrecall.com.
What stays on your iPhone
Your check-ins, journal entries, questionnaire answers, plans, reminders and settings are stored only on your device, kept separate for each account. They are not sent to our server. You can erase them at any time in Settings.
Apple Health. If you allow it, the app reads sleep, steps, heart rate, heart rate variability and workouts, and can read and save State of Mind entries. This happens on your iPhone through Apple's HealthKit. Health data is never sent to our server, never shared and never used for advertising. You can change these permissions at any time in the Health app. If you switch on Apple Health in R.AI's daily notes, R.AI also reads exercise and mindful minutes and uses these values on your iPhone only, to write your notes; they are never sent to the secure cloud writer.
Your account
To create an account we keep your email address and a password, which our provider stores only in a scrambled (hashed) form. If you sign in with Apple, Google or Facebook, we receive your email address and an account identifier from them. Sign-in tokens are stored in the iPhone Keychain.
We use this only to sign you in and to keep your records separate. Legal basis: performing our agreement with you (GDPR Art. 6(1)(b)).
PeopleHub (optional, 18+)
PeopleHub lets you connect with people you invite. Nothing is stored for it unless you join and accept. When you join, we keep:
- the name you choose to show, and your birth date — to confirm you are 18 or over; others only see your age;
- your gender, only if you choose to give it;
- invitation codes (valid for 7 days), your connections and anyone you block;
- signals you send and receive, chosen from a fixed list — there is no free text;
- activity invitations: the activity, a public place and its address, the time and the answer;
- only if you separately choose to share it: your mood level for each day (1 to 5).
Only people you are connected with see your name, age, gender (if given), the signals you send them and your invitations. Your daily mood is never shown on its own: connections only see how many people in their circle felt each way.
Because a mood level can say something about your health, we rely on your explicit consent (GDPR Art. 6(1)(a) and 9(2)(a)). You can withdraw it at any time: choosing Nothing more under what you share deletes the moods you shared, and Leave PeopleHub deletes everything you have there straight away, except blocks: they are kept so that leaving and rejoining can't undo a block (deleting your account removes them).
When you look for places for an activity, the city you type is sent to Apple Maps to find public places. We do not store it.
Near you (optional, 18+)
Inside PeopleHub you can choose to meet new people nearby in small groups (3 to 6 people) at public places. It only starts if you turn it on, confirm with Apple that you are 18 or over (the app learns only "18 or over") and accept. Then we keep:
- an approximate point for your area (rounded to about 1 km, inside Portugal) and the distance you choose;
- when you are usually free, the activities you are open to, what you are hoping for (from the app's fixed list) and how often you'd like a small step outside your comfort zone;
- the activities you start or join (activity, public place, time, who is going), short fixed notes, "I'm OK" check-ins, who you chose to keep in touch with, and any reports.
Nobody sees your area, distance or preferences. Before a group is confirmed, others only see how many people are going. Once at least 3 are going, the people going see each other's first name and age range. Place searches are sent to Apple Maps with your approximate area. Legal basis: your explicit consent (GDPR Art. 6(1)(a) and 9(2)(a)). Turn off Near you deletes your area and preferences straight away. Reports are kept for safety review, without the reporter's identity once they leave. If you allow notifications, we also keep your iPhone's notification token, to tell you when you're invited or an activity is confirmed. The message never includes names or places; Apple delivers it.
R.AI notes and anonymous insights (optional)
R.AI writes a short weekly note and small next steps from your own entries, only if you turn it on. On iPhones with Apple Intelligence, it is written on your iPhone with Apple's on-device AI and nothing leaves the phone. On other iPhones, and only if you allow secure cloud writing, the app sends a short list of facts it has already worked out (for example "Worry came up on 3 days" or a questionnaire band) and the interests you tapped to our server, which asks an AI model provider, Anthropic, to write the note. Your journal, what you typed, your name, email and location are never sent. Nothing is stored by us or used to train AI models, and you can turn it off and erase the notes at any time. Because these facts relate to your wellbeing, this is based on your explicit consent.
Anonymous insights (Settings → Sharing, off by default): once a week the app sends an anonymous summary — age band, gender if you gave it, country from your iPhone's region, app language, how many days you used the app, which parts you used, questionnaire score ranges and whether R.AI notes were helpful. It has no name, email, account or what you wrote, and it is stored without any link to you; we only look at groups of 10 people or more. You can switch it off at any time.
Where data is kept and who helps us
- Supabase — database and sign-in, on servers in Ireland (EU), under a data processing agreement.
- Apple — Sign in with Apple, HealthKit (on your device), Apple Maps place search and the App Store.
- Google and Meta (Facebook) — only if you choose to sign in with them.
- Cloudflare — hosts this website. The website uses no cookies and no analytics.
Account emails (confirming your address, resetting your password) are sent through Resend, from servers in Ireland (EU). Some of these companies are based in the United States. Where data could be reached from outside the EU, they rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
What we never do
We do not sell your data, show advertising, track you across other apps or websites, or make automated decisions about you. Usage statistics are collected only if you switch on anonymous insights, and never include anything that identifies you.
How long we keep it
Account data is kept until you delete your account. PeopleHub data is kept until you stop sharing or leave. Data on your iPhone stays until you erase it or delete the app. Deleted data may remain in our provider's encrypted backups for a short period before it is overwritten.
Your rights
You can ask to see, correct, delete or receive a copy of your data, to restrict or object to its use, and to withdraw consent at any time (this does not affect what happened before). Write to privacy@exceptionalrecall.com — we answer within one month. You can delete your account at any time in the app: Settings → Account details → Delete account.
You can also complain to the Portuguese data protection authority, the CNPD, or to the authority in your own country.
Age
ExceptionalRecall is for people aged 16 and over, and PeopleHub is for people aged 18 and over. We do not knowingly keep data about anyone younger. If we learn that we have, we delete it.
Security
All connections are encrypted. Sign-in tokens stay in the iPhone Keychain. Our database rules mean each person can only reach their own data and what others have chosen to share with them.
Changes
If this policy changes, we will update the date above. For important changes we will also tell you in the app before they apply.