Privacy policy
Rekky is operated by Sahil Verma. For privacy questions, corrections, access or deletion requests, contact support@rekky.ai.
What Rekky handles
We use your sign-in account identifier, verified email, profile name and available profile photo to sign you in and identify your account. Your email is shown only to you in Your profile; it is not part of Find friends or shared recommendations. Your name and photo identify recommendation contributors. Members may discover your name and photo; you can hide your profile in Library settings. Rekky stores your recommendations, chosen visibility, categories, locations, reactions, friendships and account preferences.
When you record, Rekky temporarily receives your selected audio, transcribes it and stores the text for your recovery and correction. New completed Friends recordings can include their original note, following the visibility you choose for their recommendations. Notes recorded under the earlier private-transcript notice stay private. We also process your Ask questions, relevant recommendations, answer references, processing status and limited request/budget records needed for reliable operation.
Friends and private material
Completed recommendations default to Friends and can be read by accepted reciprocal friends, including friends added later. Only me makes an item private. A shared attached contact follows the recommendation's visibility. The original note on a new completed recording follows its recommendations’ visibility. It is shown to an accepted friend only when every recommendation from that recording is shared and available to that friend. A private, deleted or unfinished recommendation keeps the whole original note private. Earlier transcripts, pending recordings and unfinished material are not shared with friends. Blocking, deleting or changing visibility removes future server access after acknowledgement; information already seen or copied cannot be recalled from another person's device.
Explore may keep recently synced shared recommendations in app-private storage for offline reading for up to six hours. Offline copies exclude attached contact fields, original transcripts and messages. Privacy changes apply when the device reconnects, or the shared copy expires. Signing out or deleting the account clears this offline Explore store. Your own synchronized recommendations remain available separately in your private Library.
Device permissions
The microphone records only when you start recording. Contact matching reads your phone address book on-device. A small shortlist of candidate names and relevant recommendation clues may be sent to OpenAI to select a match; candidate phone numbers are excluded. Only the selected contact name and number are uploaded when attached to your recommendation. We do not upload your entire address book. Attach contacts only with permission or when they are public business contacts.
Foreground location permission supports Explore Near me and optional coarse city context. Nearby sends a fresh position to Rekky to filter by geographic distance; its account/session-owned scope expires within 15 minutes. Rekky does not perform background location tracking or send precise device coordinates to its AI provider. If you explicitly confirm a place pin while editing, that point is saved with the recommendation and follows its chosen visibility. Approximate city context may reach the backend and research providers. You can deny or revoke device permissions and turn contact matching off.
AI and research providers
OpenAI processes selected audio for transcription, transcripts for recommendation creation, questions and relevant saved recommendation text for Ask, and shortlisted names for contact matching. Public shared recommendation text and generated answers are checked for harmful content. Safety checks include original notes eligible for sharing, and exclude private transcripts and attached phone numbers. OpenAI web search receives useful public identity clues and available city context; When enabled, public location lookup and editing use Google Places or Brave Search with public place identity/locality clues, under reviewed retention policies and budgets. Listing fields and points expire; your selection does not turn provider content into an owner assertion. Brave does not receive transcripts or phone position. Independently licensed area data and explicit owner pins support city and Nearby filters. Public location data includes © OpenStreetMap contributors, ODbL. Choosing to open Google Maps sends the selected point or public place query to Google. Research cannot turn a public listing into a friend's endorsement.
AI text requests use store: false. That disables stored response history, not all provider retention. Under OpenAI's standard API controls, text inputs and outputs may be retained for abuse monitoring for up to 30 days, subject to legal exceptions. OpenAI states API data is not used for model training by default; its current controls list transcription and moderation endpoints without application-state or abuse-monitoring storage. We have not enabled a special Zero Data Retention agreement. See OpenAI's data controls and Google's privacy policy.
Railway hosts the API and database in the United States. Google handles sign-in and map services. These providers may process data outside your country. Support emails are forwarded through Porkbun to the operator's existing email inbox. We do not sell your personal information or use an advertising or behavioural-tracking SDK in this beta.
Optional phone notifications
If you enable phone notifications in Rekky, Google Firebase Cloud Messaging handles delivery using an app installation identifier and technical configuration/delivery data. Rekky stores the account/session-linked installation, your notification settings and limited delivery references. Push payloads contain opaque event identifiers, not message, recommendation or transcript text, names or contact details. The app checks current access before displaying a generic alert and when opening its destination. Brief signals that a conversation is open help suppress unnecessary alerts. You can turn notifications off in Rekky or your phone settings and continue using the app.
Delivery references expire after 24 hours and are normally removed within the following day; inactive installation registrations are removed after 30 days. Scheduled cleanup can be delayed. Local display receipts are bounded, expire with their events and clear on sign-out. Account deletion removes active notification preferences, registrations and related delivery records. We do not use Firebase Analytics or advertising features for notifications. Google’s processing is described in its privacy policy.
Technical error reporting
We use technical reports to find errors and delays across the app. Reports include the affected operation, processing stage, error category, app version, timing and timestamps. Reports sent to Rekky are linked to your account and, for recording issues, an opaque recording ID. They do not include recordings, transcripts, Ask questions or answers, messages, contacts, recommendation text or device coordinates.
Sentry receives technical error reports containing error categories, code locations and app version, plus fixed backend error labels and aggregate failure counts, without your account ID or private app content. It hosts our reporting project in the United States. The project disables public issue sharing and prevents IP addresses from being stored in error events; Sentry still processes connection metadata needed to receive requests. Session replay, screenshots, breadcrumbs and behavioural tracking are not enabled.
Phone reports are bounded and expire after seven days when the queue is next used. Rekky server reports are removed after 30 days by scheduled cleanup, which can be delayed, or when your account is deleted. Sentry error reports follow its plan retention: up to 90 days during the initial trial, and 30 days on the free plan after the trial. Reports already received during the trial can retain their original retention period. Sentry reports have no Rekky account identifier; contact support about a specific report or privacy request. See Sentry’s privacy policy.
Retention and deletion
Accepted audio is removed from active Rekky storage after a usable transcript is committed. Unprocessed phone recordings expire after seven days. Useful transcripts remain until you delete them or your account; fresh accidental recordings confidently found to contain no useful information may be discarded automatically.
Saved recommendations and attached contacts remain until deleted. Reports and review records expire after 90 days or earlier when their related content/account is deleted. Content-free account-deletion receipts are retained for 30 days; anonymous processing budget records for 48 hours. Prepared local catalog choices last up to 30 days for queued edits and are bound to your account, recommendation revision and public source version. Legacy Maps choices may retain a Place ID and typed query for up to ten minutes. Explicit owner pins remain with their recommendations until changed or deleted. These periods describe active storage, not copies already delivered to another person.
Encrypted database backups are scheduled daily in private Railway storage, with a target retention of six days. Expired archives are removed after a successful backup; failed runs can delay removal. Deleted data can remain in recovery backups until expiration. Rekky does not promise immediate physical erasure of database recovery files or independently controlled provider copies. A restored database must reconcile later deletions before users can access it. We do not restore an old snapshot into public service when the required deletion record is unavailable.
Delete your account in Library → Settings → Delete account and data, or use the online deletion page. Identity verification protects your account. Successful deletion removes active Rekky account data, sessions, owned recommendations, transcripts, contacts and related processing records. It does not delete your Google account or phone address book. For help deleting individual data or exercising rights available where you live, email support.
Security and changes
Connections to the hosted app use HTTPS. Server authorization limits reads to your account and permitted friends; provider secrets stay on the backend. No system can guarantee perfect security or correct AI results. We will update this policy when practices change and seek renewed consent where required.