Privacy policy
Effective 3 November 2026
Recora is built so your recordings never leave your Mac. This page explains the little we do collect for accounts and billing, and why.
Who we are
Recora is run by [Company legal name], [registered address] ("we"). We are the controller of the personal data described here. Contact us at [privacy@your-domain].
What stays on your Mac
Recordings, audio, transcripts, captions, translations, edits, exports, cursor and keyboard-shortcut tracks, and the app's log file are created and kept on your Mac. We never receive them, and Recora has no feature that uploads them.
Transcription and translation use Apple's on-device speech and translation frameworks. macOS may download language models from Apple the first time you use a language; Apple's privacy policy covers that download.
What we collect
| Data | Why | How long |
|---|---|---|
| Email address, and your name and profile picture if you sign in with Google or Apple | Your account and sign-in | Until you delete your account |
| Web sign-in sessions: a session cookie, your IP address and browser type | Keeping you signed in and protecting the account | 30 days, or until you sign out |
| One-time sign-in codes (stored hashed) | Email sign-in | 10 minutes |
| For each signed-in Mac: a random device ID, the computer's name, the Recora version, when it last checked in, and a hashed sign-in token | Showing your Macs, the 3-Mac limit, signing a Mac out | Until you sign that Mac out or delete your account |
| Trial dates, and a salted one-way hash derived from your Mac's hardware ID | One free trial per account and per Mac | Dates: until you delete your account. The hash: kept without any link to you after deletion, to stop repeat trials |
| Plan, subscription status and renewal date, and Dodo Payments' customer and subscription IDs | Unlocking the app for the plan you paid for | Until you delete your account |
We do not receive or store your card details. Dodo Payments collects them at checkout.
What the app sends
- Sign-in and plan checks: when you sign in, at launch and about every 12 hours, the app sends its device ID, its version and its sign-in token, and receives your plan.
- Update checks: the app downloads a small file listing the latest version, and the update itself when there is one. Our host sees the request like any web request.
- Nothing else. No analytics, crash reports, usage tracking or advertising IDs.
The website
The site sets one cookie, for signing in. It has no analytics, ads or third-party trackers. Its fonts load from Google Fonts, so Google receives your IP address when you visit.
Who processes data for us
- Cloudflare hosts the website, the database and the downloads, and handles security logs.
- Dodo Payments is the merchant of record. It runs checkout and the billing portal, collects payment details and taxes, and keeps invoices under its own privacy policy.
- Resend delivers sign-in code emails.
- Google and Apple, only if you choose to sign in with them.
These providers may process data outside your country, including in the United States, under safeguards such as the EU Standard Contractual Clauses. We don't sell or share personal data for advertising.
Legal bases
Where the GDPR or UK GDPR applies: we process account, device and plan data to provide the service you signed up for (contract). We process security logs and trial-abuse checks for our legitimate interest in keeping the service safe and fair. Our payment partner keeps billing records to meet legal obligations.
Your choices and rights
- See and change: your account page shows your plan and signed-in Macs, and lets you sign any of them out.
- Delete: delete your account at any time. It takes effect immediately.
- Other requests: depending on where you live, you can ask for a copy of your data, correction, restriction or portability, and you can object to processing. Email [privacy@your-domain]; we reply within 30 days. You can also complain to your local data protection authority.
Children
Recora isn't meant for anyone under 16, and we don't knowingly collect their data.
Changes
If we change this policy in a way that matters, we'll update the date above and tell account holders by email before the change takes effect.