Privacy Policy

Last updated 26 July 2026. Signal Recall is in private beta.

What this app reads

When you sign in with Google you grant access to Google Contacts only (the contacts scope). We do not request access to Gmail, Drive, Calendar, or your Google profile beyond your name, email address and profile picture, which Google supplies as part of signing in.

What we store, and where

• A copy of your contacts, so duplicate detection can run without re-reading your whole address book on every click.
• Backup snapshots — a copy of the affected contacts before every change, which is what makes undo possible.
• Your settings — phone region, company short names, and similar.
• Your Google access and refresh tokens, encrypted at rest with a key held outside the database.
• A log of changes you applied — how many merges, how many numbers reformatted — used only to show you what the app has done.

All of it lives on a single server in a data centre operated by DigitalOcean. It is not shared with anyone, not sold, not used to train anything, and no human at Signal Recall reads your contacts.

What we never do

• We do not sell or share your data with third parties.
• We do not use your contacts for advertising or profiling.
• We do not use your contacts to train machine-learning models. The app is deliberately rule-based; no contact data is sent to any AI service.
• We do not email your contacts or contact them in any way.

Changes to your Google Contacts

The app writes to your contacts only when you explicitly apply a change — a merge, a fix, a delete. A backup snapshot is saved before every write, and merges can be undone. Nothing is changed in the background or on a schedule.

How long we keep it

Backup snapshots are kept for 180 days, and the 50 most recent are always retained so undo keeps working. Older ones are deleted automatically. Your contact cache and settings are kept until you delete your account. When you delete it, all of the above is erased immediately and permanently, including your backups — which means undo is no longer possible for changes already applied. Deleting your account does not alter your Google Contacts in any way; it only removes our copies.

Your rights

You can export a full copy of your contacts from inside the app at any time, delete your account and all associated data from Configurations, and revoke this app's access to your Google account at myaccount.google.com/permissions. Under the GDPR and Hong Kong's Personal Data (Privacy) Ordinance you may also request access to, correction of, or erasure of your personal data by contacting us.

Sub-processors

• Google LLC — the source of the contact data, via the People API.
• DigitalOcean LLC — hosting.

Limited Use disclosure

Signal Recall's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Questions about this policy, or a data request: support@actalyst.xyz.