Privacy Policy
Last updated: October 2026
Rekal is operated by Mobile Tech Media, LLC. This privacy policy explains how we handle your data when you use the Rekal mobile application.
1. Information We Collect
Account Information
Rekal has no accounts. We identify your phone solely by an anonymous device UUID that is not linked to any personal information.
Content You Provide
YouTube URLs, text extracted from PDFs (PDF text extraction happens on your device — we receive only the extracted text), and typed or pasted notes. This content is used solely to generate quizzes.
Quiz Responses
Your answers to quiz questions, including voice answers (which may be processed on-device or via a cloud speech-to-text service), typed answers, and multiple choice selections. Used to grade responses and track your progress.
Usage Analytics
Anonymous data about how you use the app — features used, session duration, and interactions. Collected via PostHog. No personal identifiers are attached.
Error Reports
Anonymous crash reports and error logs collected via Sentry to improve app stability.
Subscription Status
Your subscription tier and purchase status, managed by RevenueCat through the Apple App Store or Google Play Store.
2. Information We Do NOT Collect
We believe in minimal data collection. Here is what we never collect:
- Your location
- Your contacts, photos, or other phone data
- Browsing history outside the app
3. How We Use Your Information
- Generate quizzes from your content (via our AI providers, OpenAI and Anthropic)
- Grade your answers and summarize your study sessions using semantic AI evaluation (via OpenAI and Anthropic)
- Manage your subscription (via RevenueCat + App Store/Play Store)
- Improve the app experience (via PostHog analytics)
- Fix bugs and maintain stability (via Sentry)
- Store very long YouTube transcripts (via Cloudflare R2)
4. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Convex | Backend database & real-time sync | Quiz data, answers, anonymous device ID |
| OpenAI | Quiz generation, answer grading, study summaries | Content text, answer text |
| Anthropic (Claude AI) | Quiz generation, answer grading, study summaries | Content text, answer text |
| RevenueCat | Subscription management | Anonymous purchase ID, purchase events |
| PostHog | Product analytics | Anonymous usage events |
| Sentry | Error tracking & monitoring | Anonymous crash and error reports |
| Cloudflare R2 | File storage | Very long YouTube transcripts |
Note: Content sent to OpenAI or Anthropic for quiz generation and grading is used only to provide those features. Neither provider uses it to train its models, and each deletes it within 30 days unless it is needed to enforce their usage policies or comply with the law.
5. Data Retention
- Your data is kept for as long as you use the app.
- Delete all your data at any time with “Delete all data” at the bottom of the app’s Settings.
- Deletion is permanent. It starts as soon as you confirm and removes your study materials and their text, quizzes, answers, progress, usage records, settings and device record from our servers. Transcript files on Cloudflare R2 that only you used are removed shortly after. The app on your phone is reset and starts again with a new anonymous ID.
- Captions of public YouTube videos are cached once per video and shared by everyone who studies that video, including any copy on Cloudflare R2. They contain nothing about you and are not deleted.
- Usage analytics (PostHog) and crash reports (Sentry) recorded before deletion stay under the old anonymous ID, which is no longer connected to your phone or to any data we hold. Sentry deletes crash reports automatically within 90 days.
- Deleting your data does not cancel a subscription. Subscriptions are billed and managed by the App Store or Google Play, so cancel there. Apple or Google and RevenueCat keep your purchase records, linked to an anonymous purchase ID rather than to your data.
6. Data Security
- All data transmitted over encrypted connections (TLS/SSL).
- Backend hosted on Convex with enterprise-grade security.
- We collect only the minimum data necessary to provide the service.
7. Children’s Privacy
Rekal is not directed at children under 13. We do not knowingly collect data from children under 13.
If we learn that we have inadvertently collected data from a child under 13, we will delete it promptly.
If you believe a child under 13 has provided data, please contact us immediately.
8. Your Rights
- Delete your data: Use “Delete all data” at the bottom of the app’s Settings. Deletion starts as soon as you confirm.
- Access your data: Contact us at the email below.
- California residents (CCPA): We do not sell your personal information.
- EU residents (GDPR): You have the right to access, correct, delete, and port your data. Contact us to exercise these rights.
- You may contact us at any time regarding your data.
9. Changes to This Policy
We may update this policy from time to time.
Material changes will be communicated through the app.
Continued use of Rekal after changes constitutes acceptance.
The "Last updated" date at the top of this page indicates the most recent revision.
10. Contact
For questions about this privacy policy, contact us at: [email protected]