Privacy Policy

We use the information we collect strictly for the purposes outlined in this policy: to provide and operate the Application, create and manage your account, enable synchronization, and provide AI-powered features. We do not process your data for any other purpose without your separate and explicit consent.

We do not sell, rent, or trade your personal information to third parties. We may share your information with service providers who perform functions on our behalf, including Firebase (authentication), Cloudinary (image storage), Sentry (error monitoring), and PostHog (aggregated and pseudonymized analytics).

We implement appropriate technical and organizational measures to protect your personal information, including encryption of data in transit using TLS 1.3 and encryption of data at rest using AES 256-bit encryption.

We retain your personal information for as long as your account is active. You may request the deletion of your account and all associated data at any time through the Application settings (Settings > Account > Delete Account).

Upon account deletion, your data will be retained for a grace period of thirty (30) days to allow for accidental deletion recovery. After this period, all personal data, including contacts, memories, and files, will be permanently and irreversibly deleted from our servers.

Behavioral analytics data is retained under the following rolling schedule:

• Authenticated user events: 18 months rolling. Events older than 18 months are automatically purged nightly.
• Anonymous pre-signup events: 90 days rolling. Used to understand pre-registration funnel behavior.
• Deleted accounts: All analytics data is purged within 30 days of account deletion, in line with our user deletion policy.

We never store user content (notes, memories, transcripts, AI summaries), email addresses, names, or phone numbers in our analytics pipeline. All behavioral analytics run on infrastructure we operate directly. A subset may also be sent to PostHog for operational dashboards, with the same strict content rules applied.

If you are located in the European Union, United Kingdom, California, or any other jurisdiction granting privacy rights, you can exercise them at any time:

• Right to access — request a copy of data we hold about you.
• Right to rectification — correct inaccurate data.
• Right to erasure (“right to be forgotten”) — delete your account and all associated data. Use the in-app Delete Account flow (Settings > Account > Delete Account) or email hello@resyl.app.
• Right to data portability — export your data in a portable format.

All requests are honored within 30 days.

In accordance with the Information Technology Act, 2000, if you have any grievances, please contact our Grievance Officer. We will acknowledge your complaint within 24 hours and dispose of it within 15 days.