Privacy Policy

Last updated: May 2, 2026

This policy describes what data the Recure application (the "App") collects, how it is used and stored, and what rights you have. The App is developed by Ilya Glazunov ("we"). If you have questions, email support@getrecure.com.

1. What data we collect

Data you provide

• Name you chose at sign-up — shown to other members of your households.
• Email — used to sign in, reset your password, and for technical support correspondence.
• Password — stored only as a cryptographic hash (bcrypt); we never see or recover the original password. The password is optional: if you choose to sign in with Apple or Google instead, your account has no password at all.
• Sign in with Apple / Sign in with Google (optional) — when you choose to sign in with one of these services, the provider confirms your identity to us and shares your email address (Apple may issue an anonymous private-relay address that we treat the same as any other email). We never receive your Apple/Google password. We do not share any data back to Apple or Google about how you use the App. You can also link an existing email/password account to Apple/Google by signing in with the same email — both methods will then work for the same account.
• Profile photo (optional) — if you upload a profile photo, we store the file on our server and show it to other members of your households. You can delete or replace it at any time in the App settings. We do not request access to your device's photo library as a whole — only to the single file you pick in the system dialog.
• Per-household color — in each household you pick a color used to distinguish your chore completions from other members'. The color can be different across households.

Data you create inside the App

• Names of your households, categories, chores, and their settings (repeat interval, icon, color).
• Chore completion entries (timestamp and author).
• Household memberships and roles (member / owner).

Data collected automatically

• Technical API access logs (IP address, timestamp, URL, HTTP response code). Logs are kept for no more than 30 days and are used only for diagnostics and abuse prevention.
• Product analytics events — for example, "user opened a screen", "user completed a chore", or "an API request failed". Each event carries the type of action, an internal account identifier (a random UUID), the device type and operating system version, and an auto-generated device identifier created by the analytics SDK. We never include your email, your name, household name, or the title of any chore in these events. They are processed by Amplitude, Inc. (USA) — see "Who we share data with" below — and retained for up to two years for funnel and retention analysis.

What we do not collect: we do not collect precise location, phone contacts, advertising identifiers, information about other installed apps, or health data. We do not read your photo library as a whole — only the single file you chose as your profile photo. The App contains no advertising SDKs and we do not sell your data.

2. How we use the data

• To let you sign in from any device.
• To sync chores and history between members of the same household.
• To show "who did how much" statistics.
• To keep the service stable and prevent abuse.
• To respond to your support requests.

We do not use your data for advertising, profiling, or sale to third parties.

3. Where data is stored

Data is stored on servers operated by Hetzner Online GmbH in Germany (European Union). Traffic between the App and the server is encrypted with TLS 1.3 (HTTPS). The database runs on a private network and is not directly reachable from the internet.

4. Who we share data with

We do not share your data with third parties except:

• Infrastructure providers required for the service to run:
  • Hetzner Online GmbH (Germany) — server and database hosting.
  • Cloudflare, Inc. (USA) — DNS and email routing for the domain.
  • Resend, Inc. (USA) — sending transactional email, in particular password reset messages. Resend receives your email address and the message body only at the moment of delivery.
  • Amplitude, Inc. (USA) — product analytics. Amplitude receives the events described in "Data collected automatically" above (action type, internal account UUID, device type, OS version, auto-generated device identifier). Amplitude never receives your email, name, household name, or chore titles. Data is stored on Amplitude's US infrastructure and retained for up to two years. When you delete your account, we send Amplitude a deletion request via their User Privacy API.
  All of these act as data processors and may not use the data for their own purposes.
• Identity providers — only if you choose to use them: Apple Inc. (USA, for Sign in with Apple) and Google LLC (USA, for Sign in with Google). The data flow is one-way — they confirm your identity to us; we do not share any data about how you use the App with them.
• When required by law — if we receive a lawful order from a competent authority.

5. How long we keep data

While your account is active, we keep your data so the App can work. When you delete your account, your data is deleted permanently (see "Account deletion"). Server access logs are automatically purged after 30 days.

6. Account deletion

You can delete your account at any time directly in the App: Settings → Delete account. You will be asked to confirm with your current password.

What happens on deletion:

• Your profile (name, email, password hash, preferences) is deleted immediately.
• All your chore completions are deleted across every household.
• Households where you were the only member are fully deleted along with their chores, categories, and history.
• In households that have other members you simply stop being a member. The household and its chores continue to exist for the remaining members.
• If you were the owner of a household that has other members, ownership is automatically transferred to the member who joined that household earliest.
• Your analytics events held by Amplitude are scheduled for deletion via their User Privacy API at the moment we delete your account. Amplitude processes the deletion within 30 days per their service terms.

Deletion is immediate and cannot be undone.

7. Your rights

You have the right to:

• Know what data we store about you.
• Correct inaccurate data — via the "Profile" screen or by emailing support.
• Delete your account and data (see above).
• Restrict processing if you believe it is unlawful.
• File a complaint with the data protection authority of your country of residence.

To exercise any right that cannot be handled inside the App, write to support@getrecure.com. We will respond within 30 days.

8. Age restrictions

The App is intended for people aged 16 and older. We do not knowingly collect data from children under 16. If you learn that a child has signed up without parental consent, please contact us and we will delete the account.

9. Changes to this policy

We may update this policy. If changes are material, we will update the date at the top and, where changes meaningfully affect users, notify them through the App before the changes take effect.

10. Contact

All privacy and data processing questions — support@getrecure.com.