Privacy

RecallBase is local-first by default. Website auth, billing, and entitlement checks do not require raw AI conversation content, prompts, answers, local file paths, or export filenames.

What the website handles

Account, subscription, extension token, and billing portal state.

What stays out of billing APIs

AI conversation content and local archive data stay out of `/api/me` and billing endpoints.