Privacy Policy

1. Introduction and scope

This Privacy Policy applies to Recoy, including www.recoy.ai, the installed progressive web app, and related Recoy services. “Recoy,” “we,” “us,” and “our” refer to the service and its operator.

2. Information we collect

Account and authentication information

We collect information needed to create and secure an account, such as your email address, authentication and account identifiers, email-verification state, profile name, and related profile information. If you use an enabled Google, Apple, or Facebook login option, we receive the account information that you authorize the provider to supply for authentication, such as an email address, basic profile information, and provider account identifier, as applicable.

We do not use social login to post to your social account, read private social messages, access your friends or contacts unless a future feature expressly requests and explains that access, or target advertising based on social-login data.

User content

We collect content you choose to provide or create through Recoy, including private conversations, AI-generated responses stored with those conversations, connection descriptions and invitations, your private perspective on a connection, private personal memory maintained by Recoy, mutually enabled shared connection context, feedback, beta survey responses, and support information you voluntarily submit.

Technical information

We may collect technical and operational information such as IP address, browser, device and operating-system information, timestamps, authentication and security logs, PWA installation or capability state, cookies and local-storage records, notification preferences, Web Push subscription endpoints and related delivery information, privacy-filtered application events, and technical error information.

3. Private conversations and connected users

Your raw conversation with Recoy is private to your account. A connected person cannot read your raw conversation, and connecting accounts does not create a shared direct-message thread. Recoy AI—not your connected person—receives the private conversation.

Where the product offers shared connection context, it becomes active only under the applicable mutual agreement and permission controls. It is designed to derive limited context rather than expose source conversations. Shared context must not identify who supplied an underlying private insight or reproduce the source wording. Available controls let users pause shared context and delete derived memory. Under the current privacy contract, earlier private-only messages are not retroactively analyzed after shared context becomes active.

4. How we use information

We use information to:

• operate, authenticate, maintain, and secure accounts;
• provide AI responses, check-ins, and other requested features;
• maintain permitted personal memory and connection context;
• facilitate connections, invitations, emails, and notifications;
• personalize each user’s own experience;
• operate beta feedback and survey programs;
• diagnose failures and maintain service reliability;
• prevent abuse, fraud, and security incidents;
• improve Recoy through privacy-limited analytics when a user has allowed optional analytics; and
• comply with applicable legal obligations.

5. Artificial intelligence processing

Recoy uses OpenAI’s API to provide AI features. Portions of user content and relevant context needed to generate a response, check-in, memory update, or privacy-filtered connection understanding may be transmitted to OpenAI for processing. The model does not run exclusively on Recoy infrastructure.

Recoy does not use private conversation content to build a third-party advertising profile. OpenAI’s handling of API data is governed by its own terms, policies, and the configuration of Recoy’s API account. Provider practices and controls can change, so we do not promise that a provider will never retain or otherwise process data beyond the immediate generation request.

6. Service providers and disclosure

We use service providers to operate Recoy. Current provider categories include:

• Supabase for authentication, databases, and backend services;
• Vercel for hosting and application infrastructure;
• OpenAI for AI processing;
• Resend for transactional email;
• Sentry for privacy-filtered technical error monitoring;
• PostHog and Google Analytics 4 for optional, privacy-limited behavioral analytics when enabled and allowed; and
• browser and platform push services for optional notification delivery.

These providers receive information only as needed to perform their applicable services. We may also disclose information when reasonably necessary to comply with law, protect users or the service, investigate abuse or security incidents, or complete a business transaction subject to appropriate protections.

7. Analytics

Optional behavioral analytics require the applicable user choice. When enabled and allowed, Recoy uses GA4 and PostHog for high-level product and acquisition events. Those providers must not receive raw message content, AI response text, names, email addresses, relationship details, or memory contents from Recoy’s analytics pipeline. PostHog session replay is disabled. Sentry receives only information passed through Recoy’s privacy filters. You can change optional analytics preferences in Privacy & data settings.

8. Selling data and advertising

Recoy does not sell users’ private conversation content, use private conversation content for third-party targeted advertising, or currently operate an advertising business. We do share limited information with service providers as described above so they can operate Recoy.

9. Activity visibility

Recoy may show a connected user a limited, broad activity status. You can control this feature in connection settings. Activity status does not expose message content, topics, message counts, message frequency, or emotional state.

10. Notifications

You may choose to receive browser or Web Push notifications and control notification categories and private previews. Push providers may receive technical subscription and delivery information. Recoy limits notification content according to your privacy settings and uses generic wording where previews are disabled.

11. Retention

We retain information for as long as reasonably necessary to operate accounts and the service and for legitimate security, legal, backup, fraud-prevention, and operational purposes. Retention varies by the type of information and why it is needed. After information is deleted from active systems, copies may remain temporarily in backups, logs, or systems maintained for security and legal purposes.

12. Your choices and controls

Depending on the feature, Recoy provides controls for optional analytics, connection activity visibility, notifications and private previews, private personal memory, shared connection context, memory or context deletion, and connections. These controls may affect future processing without removing every historical operational record.

Recoy does not currently offer a complete self-service account-deletion workflow. To request complete account or data deletion, follow the User Data Deletion instructions or email privacy@recoy.ai.

13. Privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, or portability of personal information; object to or restrict certain processing; withdraw consent; or appeal a decision about a privacy request where applicable. These rights may be subject to legal exceptions. Contact us to make a request. We may need to verify your identity before acting.

14. Security

We use reasonable technical and organizational safeguards designed to protect information. No online service or storage system can guarantee complete security. You are responsible for protecting your account credentials and should notify us if you believe your account has been compromised.

15. International processing

Recoy and its service providers may process information in the United States and other locations where they operate. Those locations may have data-protection laws different from those where you live.

16. Children

Recoy is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us so we can review and address the situation.

17. Changes to this policy

We may update this Privacy Policy as Recoy changes. We will post the updated policy here and change the “Last updated” date. When required, we will provide additional notice or request consent.

18. Contact

Questions and privacy requests can be sent to privacy@recoy.ai. For deletion requests, see User Data Deletion. For a plain-language explanation of product privacy controls, see Privacy & How It Works.