Who we are
RecallOrbit, based in New York, New York, United States, operates the RecallOrbit language-learning website and app. The service uses flashcards and spaced repetition. In this policy, “we” and “us” mean RecallOrbit, the company responsible for the personal information described here. For privacy questions or requests, email rj@recallorbit.com.
Information we collect
- Account information. When you sign in with Google, we receive your Google account identifier, email address and verification status, and basic profile information Google provides, such as your name and profile picture. Supabase manages the authentication records and sessions that connect this identity to your RecallOrbit account.
- Learning information. We store your card collection, learning progress, review ratings, review dates and time spent on reviews, scheduling information, and study preferences. We also store content you add to the service, such as card text and media references.
- Messages you send us. If you contact us, we receive your contact details and the information you include in your message.
- Technical information. Our hosting and authentication providers process information such as IP addresses, browser and device information, request times, and error or security logs to deliver and protect the service.
The handwriting scratchpad runs in your browser. We do not upload its strokes or drawings. The app does not record your microphone or camera.
How we use information
We use information to:
- Create and authenticate your account and keep you signed in.
- Save your progress, synchronize your learning across devices, and show your study history.
- Schedule reviews and determine which card groups are ready for you to study.
- Apply your settings, answer support requests, and send necessary account or service messages.
- Diagnose problems, prevent abuse, secure the service, and meet legal obligations.
Review scheduling uses your learning history to estimate when a card needs another review. It does not assess your eligibility for employment, education, credit, or other services outside RecallOrbit.
Where applicable law requires a legal basis, we process information to provide the service you request, pursue our legitimate interests in operating and securing it and responding to you, comply with legal obligations, or obtain your consent where required.
Google sign-in
Google sign-in is used to identify you and secure your account. We do not request access to your Gmail inbox, messages, contacts, Google Drive files, or calendar. Your Google password is entered with Google; we do not receive it.
You can review or remove RecallOrbit’s connection in your Google Account connections. Removing the connection may prevent future sign-ins, but does not delete information already stored in RecallOrbit. Contact us to request account deletion.
Service providers and sharing
We use other services to operate RecallOrbit:
- Supabase provides authentication, database storage, and storage for card media. It processes account information and learning data to provide these services. See Supabase’s data processing terms.
- Google provides sign-in. We also use Google’s text-to-speech and generative AI services to prepare card pronunciation audio, readings, and other learning content. These content tools receive card text and related context; we do not send them your Google sign-in profile or review history. See the Google Privacy Policy.
- Hosting and communication providers deliver the website, process technical requests and logs, and deliver account messages or support email.
If a card includes media hosted on another website, loading that media sends a request to that website, which can receive your IP address and browser information.
We may disclose information when required by law, to respond to valid legal requests, or when necessary to protect the rights, safety, and security of users and the service. We do not sell personal information or share it for targeted advertising.
Cookies and storage on your device
We use authentication cookies to manage your session. We also use browser local storage and session storage to remember interface preferences, coordinate open tabs, resume study sessions, and keep pending reviews until they can be saved to your account. Pending review data can include your account identifier, card content, and review state.
Some browser data may remain after you sign out. You can remove it using your browser’s site-data controls. Clearing site data before pending reviews are saved can permanently remove those unsaved reviews. Blocking cookies or storage may prevent sign-in or reliable progress saving.
The app does not use advertising cookies or third-party advertising trackers. We do not track your activity across unrelated websites, and our practices do not change in response to a browser’s Do Not Track signal.
How long information is kept
We keep account and learning information while it is needed to maintain your account and learning history. You can request deletion at any time. Support and technical records are kept for the purposes described above, taking into account the need to resolve requests, investigate errors or abuse, meet legal obligations, and manage backups. Retention depends on the type of record and whether it is still needed for those purposes.
Deletion from active systems may not immediately remove copies from backups or records that must be retained for legal or security reasons. Any retained information remains subject to this policy. Browser copies are separate from account data and can be removed through your browser.
Security and where information is processed
We use authentication and access controls to protect account and learning data. No online service or storage system can guarantee absolute security.
Our service providers may process information in countries other than where you live. Privacy laws may differ between countries. Contact us for information about where your data is processed and the protections that apply.
Your choices and privacy requests
You can change available study preferences in Settings. To request a copy of your information, correct information, or delete your account and associated learning data, email rj@recallorbit.com from the address associated with your account, if you can still access it. Otherwise, tell us so we can discuss another way to verify your identity. We may need to verify your identity before acting on a request. Account deletion is handled by contacting us; it is not currently a self-service setting.
Depending on where you live and the law that applies, you may have rights to access, correct, delete, or obtain a portable copy of your information; restrict its processing; withdraw consent where processing relies on consent; or complain to a data protection authority. These rights can be subject to exceptions. We respond to applicable requests within the time required by law.
Right to object: where applicable law provides it, you may object to processing based on legitimate interests. Contact us using the email above to exercise this right.
Children
RecallOrbit is not intended for children under 13 or anyone below the age required in their country to consent independently to online data processing. We do not knowingly collect personal information from children below that age. If you believe a child has provided personal information, contact us so we can investigate and address it.
Changes to this policy
We will post updates on this page and change the date above. For material changes, we will provide additional notice through the service or by email where required, and obtain consent when the law requires it.