Recallab UG

Privacy notice

Version: UG-PRIVACY v3.2 (12 October 2026)

About this notice

Recallab UG is a free question-practice website for students preparing for NEET (UG). This notice is for learners and their parents or guardians. Because many learners are under 18, when you sign up you tick a box that says: "I am 18 or older, or I am under 18 and my parent or guardian knows I am using Recallab and has agreed." A parent or guardian who has agreed accepts this notice and the terms on the learner's behalf. We do not check this tick; it is your word, and we rely on it.

Who we are. Auspec UK Ltd, a company registered in England and Wales (company number 07134027), The Lexicon, Second Floor, Mount Street, Manchester M2 5NT, United Kingdom. We decide how your data is used (we are the "data fiduciary" under India's Digital Personal Data Protection Act 2023).
Privacy contact: privacy@recallab.com

The short version

What we collect, and why

WhatWhyWho sees it
Your email address and a password (stored scrambled)To make your account, let you sign in and get back in if you forget your passwordEmail: only us. Password: nobody
A record that you ticked the box: the date and time, the version of the box's wording, and the versions of this notice and the termsTo show that you were asked and that you agreedOnly us
A nickname you choose in "A little about you"To greet youOnly you today; it is the only name other learners could ever see
If you fill in "A little about you": which year you are sitting NEET (UG), where you are now (for example Class 12), your state, and how you heard about usTo pace your revisionOnly us
Your answers, scores and progress, and any notes or reports you writeTo show you your results, your mistakes and what to reviseYou, and your parent on request
The apps you star on the Apps pageTo keep your favourites where you left themOnly you
Technical records needed to run the siteTo keep the site working and secureOnly us. Our web server records each request (IP address, time, the page asked for, the browser type) and deletes these records after 14 days. The IP address of a sign-in or sign-up attempt is kept for 1 day, to stop abuse. We do not save your IP address with your answers, and we do not record which device you use or which pages you open.

We do not collect: your phone or WhatsApp number, your school, your exact location, photos, or contacts.

What we do not do

The Mentor and the Professor's take

These are buttons under a question you have answered ("Simpler", "Steps" and so on). They are run by an AI service from another company (OpenAI). You use them only by tapping a button; you cannot type anything to them. When you tap a button, our server sends the AI service the question, its answer options, the explanation, the fixed wording of the button you tapped, and which option you chose. If you tap a second button on the same question, the earlier reply goes with it. It does not receive your name, your email address, your nickname or anything you typed. We ask the AI service not to store the request, and it does not use it to train its models. If an answer looks wrong or unsuitable, use Report a problem with this question under the answer and we will look at it. Before you use them the first time, we ask you to agree.

Cookies

We use only the cookies the site needs to work. They are not used for advertising or for tracking you across other sites.

CookieWhat it doesHow long it lasts
rlug_sessKeeps you signed in90 days, or until you sign out
rlug_anonA random number for a visitor who is not signed in, so the site can work before you sign up. It does not say who you areUp to 400 days

Kept in your own browser. The site also saves a few small settings in your browser's own storage, so that it looks and works the same next time: your light or dark theme; whether this browser is signed in and your count of questions answered (so that the blog's header can show it); which first-week steps you have done; and which tips and release notes you have already seen. These stay on your device and are not used for advertising or tracking. Signing out clears the count and your first-week steps. The others stay until you clear your browser's storage. If a different account was used in this browser before, its first-week steps stay too. So on a shared device, clear the browser's storage as well as signing out.

Who we share data with

Only service providers that help us run the site, under contract and only for that purpose:

Our company is in the United Kingdom, and we look after the site from there, so your data is also accessed from the UK. We protect it with the same safeguards described here. We may disclose data where the law requires it.

How long we keep it

Your rights, and a parent's rights

You, and your parent or guardian, can ask us to: show what data we hold; correct it; delete it; and withdraw agreement at any time. Withdrawing agreement means we delete the account. Parents: email privacy@recallab.com, tell us the learner's nickname or email and, if you can, the date the account was made, and say that you are the parent or guardian. We may ask a question or two to be sure the request is genuine; we will not ask for identity documents. We reply within one month. A parent can also name another person (a "nominee") to act for them in India.

Deleting an account. On the site: Profile, then Delete my account. It happens at once and cannot be undone. A parent can ask us to do it by email.

Complaints

  1. Write to our grievance officer first: Grievance Officer, Auspec UK Ltd, The Lexicon, Second Floor, Mount Street, Manchester M2 5NT, United Kingdom, grievance@recallab.com. We acknowledge within 48 hours and aim to resolve within one month.
  2. If you are not satisfied, you may complain to the Data Protection Board of India under the DPDP Act. (The Board's complaint process was still being set up when this was written; we will update this line when it is available.)
  3. In the UK, the Information Commissioner's Office (ico.org.uk).

If something goes wrong

If a data breach affects you, we will tell you by email, put a notice on the site, and tell the authorities where the law requires it.

Changes

If we change this notice in a way that matters, we will put a notice on the site before the change applies, and email learners.