Privacy Policy

1. Introduction

Total Recall ("we", "our", or "us") is a desktop application that provides AI-powered video search and indexing. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website (mytotalrecall.app) and desktop application.

2. Local-First Architecture

Total Recall is designed with a local-first architecture. This means:

• All video processing and AI analysis happens entirely on your device.
• Your video files, frames, and AI-generated embeddings never leave your machine.
• Search queries are processed locally — we never see what you search for.
• No video data is uploaded to any cloud server, ever.

3. Information We Collect

3.1 Account Information

When you create an account on our website, we collect:

• Email address — used for account authentication and communication.
• Full name — provided during registration (optional via OAuth).
• OAuth profile data — if you sign in with Google, we receive your name, email, and profile picture from Google. We do not receive or store your Google password.

3.2 Payment Information

Payments are processed securely by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. Stripe may collect information necessary to process your payment in accordance with their Privacy Policy.

3.3 Usage Analytics

Our website uses Vercel Analytics and Vercel Speed Insights to collect anonymous, aggregated performance metrics (page load times, web vitals). These do not track individual users or collect personally identifiable information.

3.4 Desktop Application

The Total Recall desktop application does not collect any usage data, analytics, or telemetry. It does not phone home. The only network request it makes is to validate your license key at startup.

4. How We Use Your Information

• To create and manage your account.
• To process your purchase and provide license access.
• To send transactional emails (account confirmation, password reset, purchase receipts).
• To provide customer support when you contact us.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Third-Party Services

We use the following third-party services:

• Supabase — authentication and database hosting (stores account data).
• Stripe — payment processing.
• Vercel — website hosting and anonymous analytics.
• Google OAuth — optional sign-in method (we receive your email and name only).

Each service operates under its own privacy policy and data handling practices.

6. Cookies

Our website uses essential cookies required for authentication (session tokens). We do not use advertising cookies, tracking cookies, or third-party marketing cookies.

7. Data Security

We implement industry-standard security measures to protect your account information, including encrypted connections (HTTPS/TLS), secure password hashing, and access controls. Your video data remains on your local machine and is protected by your operating system's security measures.

8. Data Retention

We retain your account information for as long as your account is active. If you wish to delete your account, contact us at the email below and we will remove your data within 30 days. Locally stored video data and AI indexes are entirely under your control and can be deleted at any time from your device.

9. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Withdraw consent for data processing at any time.

10. Children's Privacy

Total Recall is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. Your continued use of Total Recall after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at umairejaz.ch@gmail.com.