Privacy & How It Works
A plain-language overview of this private beta. It is not a final legal Privacy Policy and will be replaced or supplemented by formal legal documents before the public beta.
Effective version: 2026-07-private-beta-1
Connections
Recoy uses Connection as a neutral term. You do not need to define or select a connection type. Recoy may privately learn how each person describes it, and two people may describe the same connection differently.
Private conversations
Each person's raw AI chat is stored in a separate private thread. Connected people cannot read one another's raw messages. You are talking to Recoy AI, not directly messaging the other person.
Private personal memory
Recoy may remember limited, non-sensitive context from your own private messages so guidance can make sense across your conversations. This account-level memory is never shared with connected people. You can review its categories and clear it in Settings without deleting your conversations.
Private connection perspective
Recoy can keep your own evolving description of a connection separate from personal memory and from shared context. It remains your perspective, not a fact about the other person.
Shared connection context
Shared context begins only after both accounts accept the one-time onboarding agreement. Either person can pause it for one connection without affecting others. Raw messages remain private, earlier private-only messages are not analyzed retroactively, and Recoy must not reveal who introduced an insight or reproduce its source wording. You can still delete context derived from your conversations.
Activity
General activity sharing starts on by default and can be disabled in Settings. It uses only broad statuses such as Active recently. It never reveals message content, topics, counts, frequency, or emotional state.
Analytics during the private beta
When you allow optional behavioral analytics, Recoy may use GA4 and PostHog to understand high-level feature use. Recoy does not send message content, AI responses, names, email addresses, or relationship details to those providers. Sentry may receive strictly filtered technical error information for reliability, and Recoy stores privacy-filtered first-party events in Supabase. Session replay is disabled. You can change optional analytics at any time under Privacy & data.
AI limitations
AI can misunderstand context or give imperfect advice. Recoy is not professional or emergency support. Avoid using it for dangerous, abusive, legal, medical, or emergency situations.