Legal
Subprocessors
Last updated June 12, 2026
Recl uses a small set of infrastructure and service providers to operate. Each receives only the data needed for its function. We never share data with advertisers or data brokers.
1. Current subprocessors
| Provider | Function | Data involved | Region |
|---|---|---|---|
| DigitalOcean | Application servers and primary database hosting | All service data | India (Bangalore) |
| Cloudflare | DNS, CDN, DDoS protection, R2 object storage (backups, uploaded images) | Traffic metadata, encrypted backups, saved images | Global edge / EU-US |
| Google (Sign-In) | Authentication | Email, name, avatar, Google account ID | Global |
| Apple (Sign In with Apple) | Authentication | Email (or private relay address), name, Apple account ID | Global |
| OpenRouter | AI model gateway for summaries, quizzes, categorization, embeddings | Content text being processed (per-item, not your whole library) | United States |
| Supadata | Video transcript and metadata retrieval | Public video URLs / IDs | United States / EU |
| Dodo Payments | Web subscription billing (merchant of record) | Email, plan, payment status — card data never touches Recl | Global |
| Google Play Billing | Android subscription billing | Play account purchase tokens, plan state | Global |
| RevenueCat | Mobile subscription state management | Pseudonymous app user ID, purchase state | United States |
| Telegram | Recall nudges + Mini App (only if you connect it) | Your Telegram chat ID, message content of nudges | Global |
| Discord | Recall nudges + slash commands (only if you connect it) | Your Discord user ID, message content of nudges | United States |
| Expo | Mobile push notification delivery (only if you enable push) | Push token, notification content | United States |
2. Changes to this list
We update this page when subprocessors are added or removed. If a change materially affects how your personal data is processed, we will announce it in-app or by email. Questions: hello@recl.app.