CASE FILE / RECALL

Designing semantic search for everything you’ve seen.

FIG. 0.1
Recall app on a Windows desktop, search results page with multiple match cards
Recall on the Windows desktop. Semantic search surfaced as moments, not documents.
ROLE
Senior UX/Product Designer
PLATFORM
Windows 11 (Copilot+ PCs)
TIMELINE
2023 – 2025
TEAM
Cross-functional team of design, research, and ML engineering
MY FOCUS
Semantic search experience: ranking, relevance, and trust
STATUS
Shipped at Build 2024; reshaped post-launch around privacy

Where was that thing I saw last week?

You'd seen a presentation, a snippet of code, or a reference in an email, but filenames and exact keywords could not retrieve a half-remembered moment. Recall aimed to make everything shown on screen searchable by meaning instead.

I led the semantic search experience: how people form queries, how results are ranked and displayed, and how relevance is explained. The technical system mattered, but the product only worked if people could understand and trust what it returned.

FIG. 1.1
Recall mark. A glowing blue rotating-arrow glyph centered on a faint capture grid.
Recall mark. Continuous capture resolved into a searchable moment.

System

On demand intelligence

RECALL QUERY LIFECYCLE

  1. 04 · SEARCH & INDEX SERVICE

    Stores enriched content in a semantic index and retrieves it by matching the meaning of a query against similarity scores, finding the right files even when the exact words don't match.

  2. 03 · MEANING ANALYSIS

    Interprets raw extracted text by running meaning analysis to identify concepts and intent, then maps those concepts to semantic vectors for downstream understanding.

  3. 02 · OCR PROCESSING

    Converts raw image input into structured text by straightening and denoising the image, identifying characters through optical recognition, and reconstructing the output into formatted, flowing text.

  4. 01 · SCREENSHOT CAPTURE

    Continuously monitors and captures the screen at intervals, saving raw visual snapshots as the source material that enters the processing pipeline.

Isometric exploded view of the Recall query lifecycle. Four stages stacked from Search & Index Service down to Screenshot Capture.

Search wants precision. Memory offers fragments.

File search is built on certainty. You give it a filename or keyword. It matches exactly. Done.

But that's not how memory works. You remember a chart, maybe the color was blue, maybe it was from an email or a browser. Nothing precise enough for traditional search to grab hold of.

Recall flipped this. Instead of requiring exact queries, it indexed everything the system could see and made it searchable through semantic understanding.

If you're indexing everything, how do you let people search without overwhelming them? The system needed to think like a person, not force people to think like the system.

Gmail showing an OpenTable reservation confirmation, with extracted Recall chips below: reservation, The Front Room, July 16 2023, OpenTable, Menu, Confirmation 25564, Portland ME

Cards as moments, not documents

We built around the screenshot as the primary anchor. Not a cropped asset preview, but the actual desktop as it appeared. That context is what lodges in memory.

App name, timestamp, and extracted text stayed visible but secondary. The hierarchy shifted the result from “found document” to “revisited moment” while keeping the system predictable enough to search.

FIG. 4.1
Six Recall cards in a 3-by-2 grid. Each is anchored on a desktop screenshot, with timestamp and app metadata secondary.
FIG. 4.2
Recall search results for Presentation with a red barn, with visual matches separated into a grid of close-match cards.

CARD HIERARCHY / SEPARATED RESULTS · SCREENSHOT AS MEMORY ANCHOR, METADATA AS PROVENANCE.

Testing showed that one merged ranking buried visual matches, so we separated text and visual results. Opaque correctness erodes trust faster than transparent mistakes.

AI-powered search has a trust problem

Technically correct results can still feel wrong. Rather than hide every false positive at the model layer, we made each result explain itself.

Cards labeled text and visual matches explicitly, then showed source app and time. Visible provenance let people judge relevance instead of asking them to trust an opaque score.

FIG. 5.1
Recall search results for the query Catering. Match cards are labeled with source app and match-type signals.
Result cards expose source and match type so relevance can be judged, not assumed.

We made waiting feel like progress.

Fast enough to feel alive

Embedding indexing is computationally heavy, so we tuned retrigger cadence to refine results per keystroke without ever blocking the user.

FIG. 6.1
Semantic results refine with each keystroke without blocking input.

PER KEYSTROKE

200MS WINDOW

NO BLOCKING WAIT

Trust

Privacy was the whole product

Recall only works if people trust where captured data sits and what control they retain. Capture, indexing, and retrieval stayed on-device.

After public scrutiny, we moved from opt-out to opt-in, added per-app exclusion and pause controls, and made deletion boundaries explicit. I owned the information architecture for that privacy surface.

FIG. 7.1
Recall card menu showing sensitive content (a credit-card snapshot from Fidelity) with a Delete snapshot actionSnapshot removed confirmation modal with an option to update Recall capture settings to block specific apps and websites
Deletion and capture settings form one recovery path: remove the moment, then prevent recurrence.
DATA STORAGE
Everything stays on-device. Local capture, local indexing, local retrieval. Nothing leaves the machine.
USER CONTROL
Opt-in by default. Users can exclude apps, pause indexing, and delete any memory at any time.
TRANSPARENCY
Every card shows where the result came from and when. System boundaries are visible, never hidden.
DELETION
Delete individual memories or wipe everything. No hidden caches. No silent retention.

We killed RAG to keep search fast

Early on we explored RAG synthesis across screenshots, but latency broke the core expectation that search should feel instantaneous. We abandoned synthesis for speed and legibility. Surface relevant moments, let people interpret them.

FIG. 8.1
Fast retrieval preserved the direct relationship between a query and the moments it surfaced.

The system helps people rediscover what they saw. It doesn’t rewrite their history for them.

From rediscovery to reference pattern

In testing, people could explain why each result appeared, reject what did not fit, and recover information they had written off as lost. Visible provenance turned mysterious AI behavior into something rational.

The work shipped at Build 2024, then its privacy patterns, relevance transparency, and match-type separation became reference points for Windows Search and File Explorer.

FIG. 9.1
Recall introduced on stage at Build. System architecture diagram (Screen Region Detector, Optical Character Recognition, Parser, Text Encoder, Image Encoder) framing the Recall pill.
Recall announcement
Copilot+
DEVICES
Local intelligence required for on-device indexing
WS + FE
TEAMS ADOPTING
Windows Search and File Explorer adopting the patterns
2
YEARS
Shipping cycle, including privacy redesign

NEXT PROJECT

Teams for Education