Privacy Policy
Effective April 28, 2026
Claude Recall is a local-first memory tool for Claude Code. Your sessions, your code, and your conversations stay on your machine. We built the product around that promise, and this policy reflects it. We are genuinely proud of how little we collect.
What we collect (and what we do not)
Free tier: nothing
If you use Claude Recall on the free tier, we collect zero personal information. No account, no email, no signup. You install it, you run it, and we never know you exist.
Pro tier: purchase and activation only
When you purchase Claude Recall Pro ($29.69, one-time), we collect only what is necessary to process your payment and activate your license:
- Email and name, provided during checkout. Used for purchase receipts and refund communications.
- Payment information, processed entirely by Stripe. We never see, store, or have access to your card number.
- License key, generated at purchase and sent to your email.
- Machine identifier, a hash sent during activation to enforce the three-device limit. We store only the hash, not your hostname or hardware details.
- Activation timestamp, recorded once per device when you activate.
After activation, Claude Recall works offline forever. There are no recurring check-ins, no heartbeat pings, no silent phone-home calls.
What we never collect
This list is not aspirational. It is how the software is engineered.
- Your Claude Code session content (conversations, prompts, responses)
- Your code or repository contents
- File system paths beyond
~/.recall/and~/.claude/projects/ - Browsing behavior on the website (no analytics scripts are loaded)
- IP addresses (not logged on our server)
- Product telemetry, usage analytics, or feature tracking of any kind
The daemon binds to 127.0.0.1 only. It cannot accept connections from the network. Your original session files at ~/.claude/projects/ are strictly read-only; Claude Recall never modifies them.
How we use your information
For Pro users, we use the information described above for three purposes:
- Processing your purchase and sending your license key
- Validating your license activation (one outbound call, then offline)
- Sending transactional emails: purchase receipts and refund confirmations
For users in the European Economic Area (EEA) and United Kingdom, we process your personal information under the following legal bases: (a) contract performance, to process your purchase, generate your license key, and validate activation, as these are necessary to deliver the product you bought; (b) legitimate interest, to protect our website from abuse using Cloudflare Turnstile.
We do not sell, rent, or share your personal information with third parties. Not for advertising, not for analytics, not for any reason. Ever.
We may disclose personal information if required by law, subpoena, or court order. Because Claude Recall is local-first, we have no access to your session data, code, or conversations. We could not produce them even if compelled. For Pro users, the only information we could disclose is your email, license key, and activation records.
Third-party services
We use a small number of third-party services to operate. Each has its own privacy policy, and we encourage you to review them:
- Stripe processes payments. Claude Recall never handles or stores your card information. See Stripe's privacy policy.
- Resend delivers transactional emails (purchase receipts, refund confirmations). See Resend's privacy policy.
- Cloudflare Turnstile provides bot protection on the website. It may set cookies to distinguish humans from bots. See Cloudflare's privacy policy.
- Cloudflare Tunnel proxies the website as standard web infrastructure. No additional data is collected through this service beyond normal HTTPS request handling.
If you are located in the EEA or United Kingdom, your personal information may be transferred to and processed in the United States by our third-party service providers (Stripe and Resend). These providers maintain appropriate safeguards for international data transfers, including Standard Contractual Clauses approved by the European Commission.
Our website may link to third-party websites. We are not responsible for the privacy practices or content of those sites.
Cookies
The Claude Recall website does not use analytics cookies, advertising cookies, or tracking pixels. The only cookies that may be set come from Cloudflare Turnstile for bot protection. These are functional cookies required for the website to operate securely; they do not track you across sites.
The Claude Recall desktop application (the daemon and CLI) does not set or read any cookies.
Our website does not track users across third-party websites and does not respond to Do Not Track browser signals because we do not engage in tracking. No analytics scripts, advertising pixels, or cross-site trackers are loaded on clauderecall.com.
Optional embedding model download
Claude Recall Pro offers an optional semantic search feature that requires downloading an embedding model (approximately 100 MB). This is a one-time download from a public model registry. No tracking, no authentication, and no personal data is sent during the download. The model runs entirely on your machine after that.
Data retention
Your session data, notes, tags, threads, and collections are stored locally in ~/.recall/ across three durability layers: a SQLite database, a history column, and a plain-text mirror on disk. We never have access to this data, and we cannot delete it. You own it completely.
For Pro users, we retain your email, license key, and activation records for as long as your license is valid. If you request deletion, we will remove your information from our systems within 30 days.
Data breach notification
In the unlikely event of a data breach affecting your personal information, we will notify affected users by email without unreasonable delay and no later than 60 days after discovering the breach. If the breach affects 500 or more consumers, we will also notify the Nevada Attorney General as required by NRS 603A.220.
Your rights
Depending on where you live, you may have specific rights under privacy laws such as the GDPR (EU/EEA), UK GDPR, or CCPA (California). Regardless of your jurisdiction, we extend the following rights to all Claude Recall users:
- Access: You can request a copy of any personal information we hold about you.
- Deletion: You can request that we delete your personal information from our systems.
- Export: You can request your data in a portable format.
- Opt-out of sale: We do not sell personal information, so there is nothing to opt out of. We state this explicitly for CCPA compliance.
- Correction: You can request that we correct any inaccurate personal information we hold.
For your local data (everything in ~/.recall/), you already have full control. You can read, export, modify, or delete it at any time without contacting us.
To exercise any of these rights for data we hold (Pro purchase and activation records), email us at [email protected]. We will respond within 30 days.
Nevada residents: Under Nevada Revised Statutes Chapter 603A, you have the right to direct us not to sell your covered information. We do not sell your personal information. To submit a verified opt-out request under Nevada law, email [email protected].
EEA and UK residents: You also have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal information violates applicable law.
We do not use your personal information for automated decision-making or profiling.
Children's privacy
Claude Recall is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it promptly.
Changes to this policy
If we update this privacy policy, we will post the revised version on this page and update the effective date at the top. For material changes that affect how we handle your personal information, we will notify Pro users by email before the changes take effect. The core commitment will not change: Claude Recall is local-first, and your session data stays on your machine.
Business transfers
If Claude Recall HQ is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify affected Pro users by email before your personal information becomes subject to a different privacy policy.
Related policies
Contact
Claude Recall HQ is the data controller for the personal information described in this policy. We are registered in Nevada, United States. Our mailing address is 732 S 6th St, Ste N, Las Vegas, NV 89101.
For privacy inquiries, data subject requests, or questions about this policy, contact us at [email protected].