RecapybaraPrivacy notice
Last updated: 13 October 2026. This notice covers the website recapybara.com and the app at app.recapybara.com.
Who is responsible
The controller of your data is Just Games Land Ltd, HE 419675, 35 Achaion Street, 5th Floor, Office 17, 1101 Nicosia, Cyprus. For anything about your data, write to privacy@recapybara.com.
What we keep, and for how long
| What | Why | How long |
|---|---|---|
| Your account: name, email, password (hashed), language, plan | to run your account and the contract with you | while the account exists; deleted with it |
| Your recordings and uploads | to write your transcript, notes, cards, tests, maps, podcasts and films | the recording is kept seven days after your notes are ready, then deleted. A recording whose processing failed is kept seven days so you can retry, then deleted. Accounts opened during the beta, before this notice was published, are the exception: their recordings are kept while the beta lasts, so we can check and redo transcriptions, and are deleted at its end or on request. Uploaded documents stay as your material |
| Transcripts and everything made from them | they are your notes | while the account exists; you can delete any lecture at any time |
| Your study: which cards you reviewed, when, how it went | to bring each card back on the right day | while the account exists |
| Usage rows: which processing ran, how long, what it cost us | to run the service within its budget and to show you your minutes | while the account exists, and twelve months in aggregate without your name for our accounts |
| Payment: your Paddle customer id, your plan, the dates | to give you what you paid for | while the account exists; receipts are Paddle’s, kept by Paddle as the law requires |
| The waitlist: email, first name, role, where you study, what you would record, the page you came from | to write to you when it is your turn | six months if you are not admitted, then deleted |
| Invitations: who invited whom, when | to run the beta by invitation | while both accounts exist |
| Feedback you send us, with an optional screenshot | to read it | while the account exists; the screenshot is deleted with the account |
| Product analytics and session replay, only if you switch them on in the app | to see how the app is used and where it fails | twelve months; off by default; switched off in the app at any time |
| Server logs | security and fault-finding | thirty days |
On what basis
Most of this is needed to provide what you asked for: the contract. Budgets, security and the fight against abuse are our legitimate interest; we keep them to the minimum above. The two product-analytics rows in the app run only if you switch them on, and that is consent, which you can withdraw in the app.
Who processes it for us, and where
We do not sell your data and never hand it to advertisers. These companies process it for us, under contracts that bind them to our instructions:
- DigitalOcean hosts the service in Frankfurt, Germany. Your data is stored there.
- Deepgram transcribes recordings at its European endpoint; it keeps nothing after the transcription and does not train on your recording.
- Anthropic writes the notes, cards, tests, maps and scripts from the transcript. It may process the transcript outside the European Union, under its data processing agreement with the European Commission’s standard contractual clauses; it deletes what it received within thirty days and does not train on it. The transcript it receives carries no account data.
- Paddle takes payments as merchant of record; it holds your payment details, not us, under its own privacy policy.
- Brevo sends our emails: invitations, the magic link, the welcome.
- Cloudflare forwards mail sent to hello@ and privacy@ to us.
- PostHog, the product-analytics software, runs on our own server in Frankfurt; if you switch analytics on, the data stays there and nothing goes to PostHog the company.
No other third party receives your data, except where the law obliges us.
The lecturer’s voice
A lecture you record contains your lecturer’s voice and words. We process it only to write your notes, we delete the recording seven days after they are ready, and we never use it for anything else. The transcript is kept as your study material, for you.
Your rights
You can export everything we hold about you as one file, and delete your account with all of it, from your account page in the app; or write to privacy@recapybara.com from the address of your account and we do it within a month. You also have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR; write to privacy@recapybara.com and we answer within a month. You may complain to a supervisory authority: the Commissioner for Personal Data Protection in Cyprus, where we are, or the CNIL in France, or the authority of your own country.
Minors
Recapybara is for people aged 16 or over. We do not knowingly keep an account of anyone younger; if you know of one, write to privacy@recapybara.com and we delete it.
Cookies
The website sets no cookies. The app keeps three: your sign-in, your theme and your language. Paddle’s payment page sets its own at checkout. All of it is on the Cookies page.
Security
Connections are encrypted; passwords are stored hashed; the servers are in the European Union; access to the data is limited to the people who run the service. If a breach ever touches your data, we tell you and the authority as the law requires.
Changes
If this notice changes, the date at the top changes, and for anything that matters we tell you by email.