Recordor

Privacy Policy

Last updated: May 25, 2026

Who we are

Recordor is a Catholic memorization app operated by Samuel Eddy, sole proprietor, based in the United States. You can reach us at samuelgeddy@gmail.com for any privacy question or request.

This policy explains what we collect, why we collect it, who we share it with, and the rights you have over your data. It is written in plain English on purpose.

What we collect

Account information

  • Your name and email address, provided when you sign up through our auth provider (Clerk).
  • An optional phone number, if you choose to add one for notifications.
  • An internal user identifier we use to link your data across the app. We do not see or store your password — Clerk handles that.

Memorization activity

  • Which prayers, scripture, courses, and other memorizables you study.
  • What you have recited, how often, and your accuracy scores per attempt. We use this to schedule reviews and show you progress.
  • Notes you write, custom annotations, and reminders you set for yourself.

Voice and audio

  • When you use voice recital, your microphone input is streamed to Deepgram for speech-to-text transcription. We use Deepgram's no-retention setting, which means the raw audio is not stored by Deepgram after the transcript returns.
  • We store the resulting transcript (the words you said) tied to the prayer attempt, so you can see what you said and we can grade accuracy. We do not store the raw audio.

Uploads

  • Documents and text you upload to generate courses, flashcards, or memorizables. We send your upload to Anthropic (Claude) to extract structured study material. We store the generated material and a copy of the source for your account.

Device and technical data

  • Standard server logs (IP address, browser user agent, timestamps) so we can run the service and investigate abuse.
  • A single first-party session cookie set by Clerk to keep you signed in. We do not use advertising or marketing tracking cookies, and we do not run third-party analytics today.

How we use what we collect

  • To provide the service: render the app, save your progress, and sync across devices.
  • To grade your recitations and compute your spaced-repetition schedule.
  • To render text-to-speech audio for the content you study (pre-cached so we don't re-generate the same audio twice).
  • To send reminders, summaries, and account emails you have asked for.
  • To detect, prevent, and respond to abuse, fraud, and security incidents.
  • To improve the product. We may review aggregate usage patterns (e.g. which courses are most studied), but not your individual content.

Religious practice data

Some of what we collect is sensitive. The app records which prayers you say, how often, and how accurately you remember them. That is religious practice data and we treat it carefully.

  • Your memorization data is private to your account. It is never sold, never shared with advertisers, and never displayed to other users unless you explicitly opt in to a public profile (see below).
  • The only sub-processors that see fragments of this data are the ones required to operate the feature: Deepgram processes the audio of a recitation to return the transcript, ElevenLabs renders the pronunciation audio, and Anthropic processes content you upload. No human at any of these vendors reviews your recitations.
  • You can opt in to a public profile at /u/<your-handle> that shows which platform-canonical Catholic prayers you have mastered. This is off by default. Anything you uploaded yourself is never shown on a public profile.

Sub-processors we share data with

To run the service we share specific data with the vendors below. Each link goes to that vendor's privacy policy.

  • Clerk Authentication, password handling, and session management.
  • Anthropic (Claude) Generating courses and flashcards from content you upload. Your uploaded text is sent to Anthropic for processing.
  • ElevenLabs Pre-rendering text-to-speech audio for prayers and other memorizables. Cached audio is stored in our AWS S3 bucket.
  • Deepgram Speech-to-text transcription of your recitations. Configured for no-retention — Deepgram does not keep your audio after the transcript returns.
  • Resend Sending transactional and reminder emails.
  • Amazon Web Services (AWS) Hosting the application, database, and cached audio files. Data resides in the US.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

Children's privacy

Recordor is intended for users 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please email us and we will delete it.

We plan to add a verified-parental-consent flow for younger users in the future. Until that ships, accounts for users under 13 are not permitted.

Your rights

You can ask us to:

  • Show you what data we have about you.
  • Correct anything that's wrong.
  • Delete your account and all associated data.
  • Export your data in a portable format.

A self-service deletion and export UI is on our roadmap. Until then, email samuelgeddy@gmail.com and we will handle the request within a reasonable time, generally 30 days.

EU / UK users (GDPR). You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. You may also lodge a complaint with your local data protection authority.

California users (CCPA / CPRA). You have the right to know what personal information we collect about you, to delete it, to correct it, and to opt out of any sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA.

How long we keep data

  • Account data is retained until you delete your account or ask us to delete it. After deletion, residual backups age out within 30 days.
  • Raw audio from voice recitals is not retained past the immediate transcription call.
  • Once our cost ledger feature ships, billing-related records will be retained for 7 years to satisfy US tax record-keeping rules.

Security

  • All traffic to the app is encrypted in transit via TLS.
  • The database is encrypted at rest in AWS RDS.
  • Authentication and password storage are handled by Clerk.
  • We never see, store, or process credit card numbers. When paid plans launch, payment data will be handled directly by Stripe.

No system is perfectly secure. If you believe you have found a vulnerability, please email us first so we can fix it before disclosure.

International data transfers

Recordor is operated from the United States and your data is processed there. If you use the service from outside the US — including from the European Union, the United Kingdom, or Canada — you understand that your data will be transferred to and processed in the US, which may have different data protection rules than your country.

Third-party content

Some content in Recordor is published under permission from third-party rights holders. Where required, we surface attribution wherever that content is displayed.

Scripture (NABRE). Scripture passages in the app are quoted from the New American Bible, Revised Edition, under the United States Conference of Catholic Bishops' standard permission for quotation. The required notice:

Scripture texts in this work are taken from the New American Bible, revised edition © 2010, 1991, 1986, 1970 Confraternity of Christian Doctrine, Washington, D.C. All Rights Reserved. Used by permission. All rights reserved worldwide.

Changes to this policy

As the product evolves, this policy will change. When we make material changes, we will update the date at the top of this page and email registered users at the address on file. Continued use of the service after a change means you accept the updated policy.

Contact

For any privacy question, deletion request, or correction, email samuelgeddy@gmail.com.