Back to Home

Privacy Policy

Effective date: March 2025  ·  Last updated: April 2025

Recall Better is operated by OIAFF Ltd. In this policy, "we", "our", and "the app" refer to OIAFF Ltd and the Recall Better application. This policy explains what data we collect, why we collect it, and how we protect it. We believe in plain language — no legal jargon.

Data Controller

The data controller responsible for your personal data is:

What We Collect

We collect only what is necessary to provide the service:

• Email address — used to identify your account. Never shared or used for marketing.
• Password — stored as a one-way cryptographic hash (bcrypt, 12 rounds). We cannot read your password.
• Game statistics — your scores, best score, games played, and current streak. This is the core data that makes the app useful.

How We Use Your Data

• To create and authenticate your account
• To sync your progress across devices
• To display your training history within the app

We do not use your data for advertising, profiling, or any purpose beyond providing the app's functionality.

Data Storage

Your data is stored in a PostgreSQL database hosted by Neon (neon.tech), a serverless database provider. The app is served via Vercel's infrastructure. Both services are based in the United States and comply with standard data protection practices.

Your data is transmitted over HTTPS at all times.

Authentication Tokens

When you sign in, we issue a JWT (JSON Web Token) that expires after 30 days. This token is stored locally on your device (localStorage) and is used to authenticate your requests. It is never sent to third parties.

Google Sign-In

If you sign in with Google, we receive your email address and basic profile information from Google. We do not access your Google password, contacts, or any other Google data. Your use of Google Sign-In is also subject to Google's Privacy Policy.

Third Parties

We do not sell, share, or disclose your data to any third parties. The only external services involved are:

• Neon — database hosting (your stats and hashed credentials)
• Vercel — app hosting and serverless functions
• Google — authentication via Google Sign-In (if you choose to sign in with Google); typography via Google Fonts

Data Retention

Your account and statistics are retained for as long as you use the app. If you would like your data deleted, contact us at the address below and we will remove your account and all associated data within 7 days.

Children's Privacy

Recall Better is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

Your Rights

You have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all data
• Export your game statistics

To exercise any of these rights, contact us directly.

Changes to This Policy

If we make material changes to this policy, we will update the effective date above. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact