Your privacy matters to us. Your content stays private, is stored encrypted, and you can permanently delete it at any time. This policy explains what we store, why, how we use your information, and your rights regarding your personal data.
Your Content: What We Store and Why
Recitare saves your documents so your library, reading positions, and instant audio replay work across sessions. Specifically:
- Documents you upload or paste are stored in our encrypted database so they appear in your Library and reopen where you left off. Encrypted in transit (TLS 1.2+) and at rest.
- Original PDF and image files are stored in cloud object storage (non-discoverable, randomized URLs) so the original-page view works when you reopen a document.
- Generated audio is cached so replays are instant and your listening allowance isn't wasted re-synthesizing the same text.
- Delete a document and it moves to Recently Deleted for 30 days (restorable), then is permanently erased \u2014 text, original file, and cached audio. Delete your account (Account → Security) and it is deactivated immediately and fully erased within 30 days \u2014 all documents, original files, cached audio, summaries, chat history, bookmarks, API tokens, and account details \u2014 and your subscription is canceled at once. Signing back in within 30 days cancels the deletion. Payment records are held by our processor, Stripe, for legal compliance.
- Your content is not used to train AI models (our AI providers' API terms prohibit training on submitted data) and is never sold or shared with other users. To speed up repeat questions on the same document, text may be briefly cached by the AI provider (typically up to ~30 minutes) and then discarded.
Data We Do Collect
Account Information
When you create an account, we collect your email address and password (stored as a secure hash). If you sign in with Google, we receive your name, email, and profile picture from Google.
Payment Information
Payment processing is handled by Stripe. We do not store your credit card details. Stripe may collect payment information in accordance with their privacy policy. We store your Stripe customer ID and subscription status.
Usage Analytics
We collect basic, anonymized usage analytics such as number of document conversions, features used, and session duration. This helps us improve the service and fix issues. We do not track the content of your documents.
AI-Powered Processing
When you use premium features (AI voices, summaries, or image OCR), your content may be sent to third-party AI services for real-time processing. In all cases:
- Content is transmitted securely over HTTPS
- Personal identifiers (emails, phone numbers, ID numbers) are automatically redacted before your text reaches any AI provider
- Our AI providers (Google Gemini, Anthropic Claude, Inworld) process content in real time and do not use API-submitted data to train their models
How We Use Your Information
- To provide and maintain the Recitare service
- To process your subscription payments
- To send important account notifications (billing, security, service changes)
- To improve the service based on usage patterns
- To provide customer support
How We Do NOT Use Your Information
- We do not sell your personal data to third parties
- We do not read your documents, and no human reviews your content
- We do not use your content to train AI models
- We do not share your content with other users
- We do not send marketing emails without your consent
Third-Party Services
We use the following third-party services that may process your data:
- Stripe: Payment processing
- Google (Gemini): Premium voice generation, AI study features (summaries, study guides, chat, audio overviews), and text revalidation. Document text is processed in real-time and not stored. Google's API terms prohibit using API data for model training.
- Anthropic (Claude): AI-powered image text extraction (OCR) for complex layouts. Images are processed in real-time and not stored. Anthropic does not use API data for model training.
- Inworld AI: Text-to-speech synthesis for all listening tiers (Inworld TTS-1.5). Text is processed in real time to generate audio and is not used for model training.
- Vercel: Hosting and object storage for original document files.
Data Retention
- Your content (documents, original files, cached audio) is retained while your account is active so your library keeps working, and is permanently removed when you delete a document or your account.
- Account data (email, preferences) is retained as long as your account is active.
- Your content is permanently erased within 30 days of deleting a document or your account (see above). Copies in routine backups are overwritten on our providers' normal backup cycle.
- Payment records may be retained for up to 7 years for tax and legal compliance.
Your Rights
You have the right to:
- Access your personal data at any time through your account
- Correct inaccurate information in your account settings
- Delete your account and all associated data
- Export your data by downloading your documents and audio files
- Object to certain data processing by contacting us
Security
We use industry-standard security measures including encrypted connections (HTTPS), secure password hashing, and access controls. While no system is 100% secure, we take reasonable steps to protect your data.
Children's Privacy
Recitare is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, please contact us to have it removed.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes via email at least 30 days before they take effect.
Contact
For privacy-related questions or to exercise your rights, contact us at support@recitare.app.