HERAZUR LLC / RECALLO

Recallo privacy policy

Effective October 20, 2026

This policy explains how Herazur LLC (“we”, “us”) handles information in Recallo, our flashcard app with CSV import, spaced repetition, and optional AI features. Recallo is published on Google Play (package com.recallo.flashcards).

Summary

• You can study without an account. Your decks, cards, study progress, and XP are stored on your device and are not synced to our servers.
• An account is needed only for the AI features. Text and photos you send to an AI feature go to our server and Google’s Gemini API to produce the result; we do not store them.
• Free users see ads from Google AdMob. Premium removes them.
• Usage analytics are off unless you turn them on in your profile.
• We do not sell your personal information.

Information we collect

Account information (optional)

If you create an account, Firebase Authentication stores your email address and password (in hashed form) and a random user ID. If you sign in with Google, we receive your Google account identifier and the name, email address, and profile photo that Google shares. You can change the display name in your profile; it is stored with your account. You do not need an account to create decks, import CSV files, or study.

Decks, cards, and study progress

Deck names, descriptions, courses, exam dates, card questions and answers, imported CSV content, review ratings and schedules, study history, daily goal, XP, and app settings are stored only on your device. Guest data and the data of each signed-in account are kept in separate areas on the device. Recallo does not upload them to our servers or sync them to a cloud.

AI features

AI features require an account. When you use one, the following is sent to our server (Firebase Cloud Functions) together with your user ID, and passed to Google’s Gemini API to produce the result:

• AI explanation: the question and answer of the card you tap, and the language you want the explanation in.
• AI deck from a topic: the topic you type, the number of cards, and your language.
• AI deck from notes: up to five photos or screenshots you choose, resized and converted to JPEG on your device, their file names, an optional topic hint, the number of cards, and your language. Only the images are passed to Gemini.

We do not store your photos, card text, topics, or the AI’s answers on our servers. The generated cards are returned to the app and saved on your device only after you review them. To enforce the free AI allowance, we store a counter of how many free AI decks your account has generated, with the time of the last one, in Cloud Firestore.

Purchases

If you buy Premium, Google Play processes the payment. We never see your card details. RevenueCat tells the app and our server whether your subscription is active. If you are signed in, the purchase is linked to your user ID; otherwise it is linked to a random ID that RevenueCat creates. Our server checks your subscription status with RevenueCat before running a Premium AI request.

Advertising

If you do not have Premium, the app shows a banner ad on the decks screen and a video ad before you import a CSV file. Ads are provided by Google AdMob. See Advertising below for what AdMob receives.

Usage analytics (off by default)

If you turn on Share usage data in your profile, Firebase Analytics receives events such as a study session being started or completed, a card being rated, an import or AI generation starting, succeeding, or failing, and the paywall being viewed or a purchase being started. Events carry only limited details, such as the import type, the number of cards, the session length, and an error code. Card text, deck names, file names, and images are never included. Firebase Analytics also records an app instance identifier, device and app information, and, unless you have deleted or limited it in Android settings, the advertising ID. You can turn this off again at any time.

Notifications

Study reminders are scheduled locally on your device at the time you choose. We do not send them from a server and do not collect a push token.

Information that stays on your phone

CSV files and backup files you import are read on your device. When you export a deck as CSV, export a library backup, or share a card, the file goes to the app or place you pick in the Android share sheet; we do not receive a copy. A deck you delete can be restored once from your profile until you delete another deck.

Permissions

Notifications: study reminders you turn on. Run at startup: so that scheduled reminders survive a restart. Advertising ID: used by Google AdMob, and by Firebase Analytics if you turn analytics on. Billing: Premium purchases through Google Play. Files and photos are chosen with the Android file and photo picker, so the app does not request access to your storage, photo library, or camera. You can change permissions in your device settings.

How we use information

We use information to create and secure your account; generate the AI explanations and decks you request and limit free AI use; provide and restore Premium; show ads to free users; send the reminders you choose; understand which features are used, if you turn on analytics; respond to support requests; and meet legal obligations.

Advertising

Free users see ads served by Google AdMob. To show, measure, and protect ads, the Google Mobile Ads SDK collects your device’s advertising ID, IP address, and information about your device, the app, and your interactions with ads. Google may use this information to show personalized ads, depending on your device settings. You can reset or delete your advertising ID or opt out of ad personalization in your Android settings. Google’s use of this information is described in How Google uses information from sites or apps that use its services↗ (opens in a new tab). Premium removes ads.

Service providers

We share information only with providers that process it on our behalf to run the app:

• Google Firebase (Authentication, Cloud Functions, Cloud Firestore, Analytics): accounts, server functions for AI requests, the free AI usage counter, and, if you turn it on, usage analytics.
• Google Gemini API: the card text, topics, and note photos you submit to an AI feature.
• Google AdMob: ads for free users, as described above.
• RevenueCat: subscription status and purchase history.
• Google: Google Sign-In, if you use it, and Google Play for app distribution and in-app purchases.

We may also disclose information if required by law or to protect the rights, safety, or security of our users or others. We do not sell personal information.

Where data is processed

Our server functions run in the United States. Our service providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the providers’ standard contractual clauses.

Retention

• Decks, cards, study progress, and settings stay on your device until you delete them, clear the app’s storage, or uninstall the app. Signing out does not remove them from the device.
• Your account and your free AI usage counter are kept while your account exists.
• Photos, text, and AI answers sent for an AI feature are not stored on our servers after the request is completed.
• Analytics data is kept for Firebase Analytics’ retention period. Purchase records held by Google Play or RevenueCat may be retained as the law requires.

Deleting your account

To delete your account, email support@herazur.us with the subject “Recallo account deletion”, from the email address you use to sign in to Recallo (or the address of the Google account you sign in with). We will delete your account and your free AI usage counter, and confirm by email when it is done. It cannot be undone.

Your decks and study progress are stored on your device, not with your account. To remove them, delete the decks in the app, or open Android Settings → Apps → Recallo → Storage → Clear storage, or uninstall the app. If you use Recallo without an account, this is all the data there is to delete.

Deleting your account does not cancel a Premium subscription: cancel it in Google Play under Payments & subscriptions → Subscriptions.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can view and edit most of your information in the app. For other requests, contact us at the address below. We aim to respond within 30 days and will not discriminate against you for exercising your rights. You may also complain to your local data protection authority.

Security

Data is encrypted in transit. Our server functions accept AI requests only from signed-in users and check Premium status on the server. No method of transmission or storage is completely secure.

Children

Recallo is a study tool for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.

AI output may be wrong

AI-generated cards and explanations can contain mistakes. Review them before you rely on them.

Changes to this policy

If we change how we handle information, we will update this page and its effective date and, for significant changes, tell you in the app.

Contact

Questions or requests about this policy: furkan@herazur.us. Support and account deletion: support@herazur.us.