ExceptionalRecallPrivacy policy
This policy explains what information the ExceptionalRecall app and this website handle, why, where it is kept and what you can do about it. In short: what you write in the app stays on your iPhone. Only what is needed for your account — and, if you choose to join, for Connectedness — is kept on a server in the European Union. Nothing is sold, and there is no advertising or tracking.
Who is responsible
The data controller is Bruno Vaz, an individual developer based in Portugal. For anything about your data, write to privacy@exceptionalrecall.com.
What stays on your iPhone
Your check-ins, journal entries, questionnaire answers, plans, reminders and settings are stored only on your device, kept separate for each account. They are not sent to our server. You can erase them at any time in Settings.
Apple Health. If you allow it, the app reads sleep, steps, heart rate, heart rate variability and workouts, and can read and save State of Mind entries. This happens on your iPhone through Apple's HealthKit. Health data is never sent to our server, never shared and never used for advertising. You can change these permissions at any time in the Health app.
Your account
To create an account we keep your email address and a password, which our provider stores only in a scrambled (hashed) form. If you sign in with Apple, Google or Facebook, we receive your email address and an account identifier from them. Sign-in tokens are stored in the iPhone Keychain.
We use this only to sign you in and to keep your records separate. Legal basis: performing our agreement with you (GDPR Art. 6(1)(b)).
Connectedness (optional, 18+)
Connectedness lets you connect with people you invite. Nothing is stored for it unless you join and accept. When you join, we keep:
- the name you choose to show, and your birth date — to confirm you are 18 or over; others only see your age;
- your gender, only if you choose to give it;
- invitation codes (valid for 7 days), your connections and anyone you block;
- signals you send and receive, chosen from a fixed list — there is no free text;
- activity invitations: the activity, a public place and its address, the time and the answer;
- only if you separately choose to share it: your mood level for each day (1 to 5).
Only people you are connected with see your name, age, gender (if given), the signals you send them and your invitations. Your daily mood is never shown on its own: connections only see how many people in their circle felt each way.
Because a mood level can say something about your health, we rely on your explicit consent (GDPR Art. 6(1)(a) and 9(2)(a)). You can withdraw it at any time: choosing Nothing more under what you share deletes the moods you shared, and Leave Connectedness deletes everything you have there straight away.
When you look for places for an activity, the city you type is sent to Apple Maps to find public places. We do not store it.
Where data is kept and who helps us
- Supabase — database and sign-in, on servers in Ireland (EU), under a data processing agreement.
- Apple — Sign in with Apple, HealthKit (on your device), Apple Maps place search and the App Store.
- Google and Meta (Facebook) — only if you choose to sign in with them.
- Cloudflare — hosts this website. The website uses no cookies and no analytics.
Account emails (confirming your address, resetting your password) are sent through Resend, from servers in Ireland (EU). Some of these companies are based in the United States. Where data could be reached from outside the EU, they rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
What we never do
We do not sell your data, show advertising, track you across other apps or websites, or make automated decisions about you. The app does not currently collect usage statistics. If we ever add anonymous statistics, we will update this policy first and ask for your permission where the law requires it.
How long we keep it
Account data is kept until you delete your account. Connectedness data is kept until you stop sharing or leave. Data on your iPhone stays until you erase it or delete the app. Deleted data may remain in our provider's encrypted backups for a short period before it is overwritten.
Your rights
You can ask to see, correct, delete or receive a copy of your data, to restrict or object to its use, and to withdraw consent at any time (this does not affect what happened before). Write to privacy@exceptionalrecall.com — we answer within one month. You can delete your account at any time in the app: Settings → Account details → Delete account.
You can also complain to the Portuguese data protection authority, the CNPD, or to the authority in your own country.
Age
ExceptionalRecall is for people aged 16 and over, and Connectedness is for people aged 18 and over. We do not knowingly keep data about anyone younger. If we learn that we have, we delete it.
Security
All connections are encrypted. Sign-in tokens stay in the iPhone Keychain. Our database rules mean each person can only reach their own data and what others have chosen to share with them.
Changes
If this policy changes, we will update the date above. For important changes we will also tell you in the app before they apply.