Reclist.
Privacy Policy
Reclist is a place for keeping the places you love and sharing Lists with people you trust. We collect what the app needs to work and nothing for advertising. We do not sell your data, we do not show ads, and we do not run third-party analytics or tracking in the app.
Who is responsible
Reclist ("we") operates the Reclist app and reclist.app. For anything about your data, write to hello@reclist.app.
What we collect and why
| Data | Why we use it |
|---|---|
| Account: email address, username, display name, password (stored hashed), optional profile photo | To create and secure your account, let people find you by username, and send account emails such as verification codes and password resets. |
| Sign in with Apple or Google: the identifier and email your provider shares (Apple may share a relay address) | To sign you in without a password and link the login to your account. We never see your Apple or Google password. |
| Invite code you enter | Reclist is invite-only. The code unlocks access and tells us who invited you. |
| Content you create: Lists, the places in them, categories, personal notes, must-visit marks, Pins, follows, collaborators | This is the product. Your privacy setting on each List (Public, Friends, Private) controls who can see it. Notes are visible to whoever can see the List unless you hide them. |
| Location (only while the app is open, and only if you allow it) | To show places around you in Around Me and on maps. We use it for that request and do not keep a history of where you have been. |
| Photos (only if you allow it) | Only to let you pick a profile picture. We access the image you choose, nothing else in your library. |
| Crash and error reports: device model, OS version, app version, the screen and steps that led to the crash, and your account ID | To find and fix bugs. Handled by Sentry (EU data centre). No names, emails or content are included. |
| Technical logs: IP address, request times and errors, kept briefly on our server | To keep the service running, rate-limit abuse and protect accounts (for example, locking a login after repeated failures). |
Place data
Places, their addresses, opening hours, ratings and photos come from Google Places. When you search for a place, your search text is sent to Google to return matches. Google's handling of that request is covered by Google's privacy policy. We keep a copy of place details and cover photos on our own servers so Lists keep working.
Who else sees data
- Other Reclist users see what your List privacy settings allow: Public Lists to everyone, Friends Lists to people you mutually follow, Private Lists only to people you invite. Your username, display name and profile photo are visible to other users.
- Service providers that process data on our behalf: Vultr (hosting, Amsterdam), Resend (transactional email), Sentry (crash reporting, EU), Google Cloud (encrypted backups, Netherlands) and Google Places (place search). Each is bound to use the data only to provide their service to us.
- Legal requests: we disclose data only when required by law.
We do not sell personal data and we do not share it with advertisers.
Where your data lives
Our servers are in Amsterdam, Netherlands. Crash reports are stored in Sentry's EU region and backups in Google Cloud's Netherlands region. If you use Sign in with Apple or Google, those providers handle your login in their own regions.
How long we keep it
- Your account and content: until you delete your account.
- Encrypted backups: up to 90 days after the data is removed, then they expire.
- Crash reports: 90 days.
- Server logs: a few weeks.
- Email verification and password-reset codes: minutes.
Deleting your account
Open Profile → Settings → Delete account in the app. Your account, Lists, notes, Pins and follows are removed immediately; backups that still contain them expire within 90 days. You can also email hello@reclist.app from your account address and we will delete it for you.
Your rights
Wherever you are, you can ask us to see, correct, export or delete the personal data we hold about you, or object to how we use it. If you are in the EU or UK, these are your rights under the GDPR; our legal basis for processing is performing our service to you (your account and content), our legitimate interest in keeping the service secure and working (logs, crash reports), and your consent (location, photos), which you can withdraw at any time in your device settings. You can also complain to your local data-protection authority. Email hello@reclist.app and we will respond within 30 days.
Children
Reclist is not directed at children under 13 (or the age of digital consent where you live) and we do not knowingly collect their data. If you believe a child has an account, contact us and we will remove it.
Security
Traffic is encrypted in transit, passwords are hashed, login tokens are stored in your device's secure keychain, and we lock accounts after repeated failed sign-ins. No system is perfectly secure, so please use a strong, unique password.
This website
reclist.app sets no cookies and runs no analytics. Share links open the app if it is installed, otherwise the App Store.
Changes
If we change this policy in a way that matters, we will update the date above and tell you in the app. Questions: hello@reclist.app.