Privacy Policy

We built Reci to help people find service providers they can trust, through recommendations from people they already trust. We try to apply the same standard to how we handle your data: we only collect what we need to make the product work, we don't sell it, and we don't share it with anyone who doesn't need it to operate the service.

A few things worth knowing up front: we use your location to show you nearby providers (only with your permission), we use your name and email to run your account, and we use analytics to understand how the app is being used so we can improve it. That's the gist of it.

Phone number and contacts. We don't require a phone number. If you add one, we store it only in hashed form, not the number itself, so people who have your number in their contacts can find you on Reci. If you choose to find friends from your contacts, the app reads the phone numbers in your contacts on your phone and sends only hashed versions of them to check who is already on Reci. We don't store your contacts.

Location. We ask for permission to access your device's location so we can show you service providers nearby. You can say no, or turn it off at any time in your device settings. Some parts of the app won't work without it, but we'll never access your location without asking first.

Usage data. We automatically collect basic data about how you use the app, and it is linked to your account: when you were last active, which app and iOS version you use, how far you got in signing up, and whether your invite link was shared or opened. We may also record which days you use the app, to see whether people keep coming back. When you tap Book on a business, we record the tap, how you chose to contact the business (its booking page, a text, WhatsApp, Instagram or a call) and how long you were away before coming back to Reci. We use this only to run and improve Reci, and we never sell it.

Your visits (optional). After you tap Book, Reci may ask whether you booked. If you answer, we store your answer, the date, time and service of the visit you tell us, and whether you would recommend the business, so we can remind you and ask how it went. If the business is a doctor, dentist or therapist, this can be health information. We never put a health business's name in a notification. Apart from what "Friends who booked" below describes, only you see these details.

Your journal (optional). Your journal is private. It holds the visits you log or import, your notes on a visit or a place, what you paid, how you rated value for money, the places you save to try, and the photos you add to a visit. Only you can see it: it is never shown to your friends, on your profile, in search or in Explore. Journal photos are stored privately and shown only to you through links that expire after an hour. If you turn a visit into a recommendation for your circle and leave "Visible to friends?" on, the photos you picked move to that recommendation and become visible like any recommendation photo. Logging or importing a visit never tells anyone or earns anyone points. A visit to a doctor, dentist or therapist can be health information. When you delete your account, we delete your journal, and we delete its photos from our image provider.

Calendar (optional). Reci offers Connect calendar in your journal, and we keep whether you connected it or dismissed the offer. If you connect it and allow access, the app reads, on your phone: the list of your calendars, the events from 180 days ago to 90 days ahead (their title, location and time), and, for events that look like appointments, their list of invitees, only to count them and skip meetings. Before you choose anything, the location of each appointment it finds, or its title when it has no location, is sent through our servers to Google Places to find the business; our error tracking never receives it. You then pick which appointments to add. We store only the visits you add: the business, the date and time, the name after "with" in the event title if there is one (as in "Haircut with Marco"), and a scrambled code made from the event so the same appointment is not added twice. We don't store your event titles or anything from the events you don't add, and Reci never reads your reminders.

Links you paste (optional). When you paste a TikTok or Instagram link to save a place, our server sends the link to TikTok or Instagram exactly as you pasted it (so it can carry the tracking details of whoever shared it with you; a TikTok short link is first resolved through TikTok). It reads the post's public text and any location tagged on it (the post's public page, or TikTok's public embed service) to find the place's name, and searches Google Places for it. You confirm the place or pick it yourself. Nothing we read from the post is stored. Any https link you paste, from these two apps or elsewhere, is saved with your place save, in your private journal.

What you post. The recommendations, requests and comments you write, and the photos you add to them, are stored so the people you share them with can see them.

Your little black book. You can add your own recommendations to your little black book. Your friends and their friends can see it, as they can see those recommendations. Your personal invite link also opens it: anyone signed in to Reci who opens that link sees the recommendations in your book, your name and your profile photo, and nothing else of yours, for as long as the link works. Anyone who has blocked you, or whom you have blocked, never sees it.

Friends who booked. When you tell us you booked a business from someone's recommendation, including through Book on your journal (where Reci picks a recommendation for that place from your friends or their friends), Reci lets its author know. Your first name is shown only to people who are your friends on Reci: to the author if you are friends, with your profile photo and the service you booked; and to people viewing that recommendation who are your friends, with your profile photo. Everyone else sees only a number, such as "and 2 more people". For a doctor, dentist or therapist there is no name, no notification, and no line or screen about who booked; the author's points may still grow, without saying which recommendation earned them.

Business account information. If you register a business on Reci (e.g., a salon), we also collect your business name, address, and contact details.

Profile photo (optional). If you add a profile photo, we store it. Profile photos are visible to other users in the app.

Sign-in identifier. When you sign in with Apple, we store the unique account identifier Apple gives us. We also retain a token from Apple solely to disconnect your account from Apple if you delete it.

Device & technical data. To run the app securely and deliver notifications, we process basic device information (device identifier, app/OS version, and your device's push token).

• Create and manage your account
• Let you make and receive recommendations within your network
• Track referral activity and help facilitate rewards at participating businesses
• Show you providers near you
• Send you push notifications and communications about your account, and occasionally about the Service itself (e.g. new features). You can turn push notifications off at any time in your device settings
• Understand how the app is used so we can make it better
• Comply with legal obligations

We do not sell your data. We share it only in these cases:

Your network. Your name and referral activity are visible to the people you're connected with on Reci. That's the whole point of the platform.

Google Maps Platform. We use the Google Places API to power location search. We use your device's location on your device to show distances to nearby providers; your precise location is not sent to our servers. Address searches you type are sent to Google to power autocomplete, and so are the appointment locations or titles and the post text described in section 1, to find the place they name.

Analytics. We don't use a third-party analytics service; the usage data described in section 1 stays on our own servers. Two services built into the app also collect basic device and usage data under their own privacy policies: Google Maps, which draws the map, and Sentry (below), which reports errors and app crashes.

TikTok and Instagram. When you paste a link to one of their posts, our server, not your phone, asks TikTok or Instagram for it, so the request comes from Reci, not from your device. The link itself may still carry details that the person who shared it with you added.

Participating businesses. When you redeem a referral reward, the business may receive basic information about your referral to process it. They don't receive your full profile.

Infrastructure providers. We use third-party services for hosting and infrastructure. They're contractually bound to keep your data secure and can only use it to provide services to us.

Apple. We use Sign in with Apple to authenticate you. Apple provides us your name and email (or a private relay email if you choose to hide it). See Apple's privacy policy at apple.com/legal/privacy.

Push notifications (Expo). To deliver notifications, your device's push token is processed by Expo's push service.

Image hosting (Cloudflare). Photos you upload (your profile photo and photos on recommendations and comments) are stored and served via Cloudflare's image CDN. Note: they are visible to other users of the app. Journal photos are stored there too, privately: they open only through the expiring links we give you.

Error monitoring (Sentry). We use Sentry to capture technical error reports and basic app-stability data (such as when the app starts) so we can fix bugs. These reports are not used to identify you personally.

Legal requirements. If we're required by law or valid legal process to disclose information, we will. We'll tell you if we're permitted to do so.

You can access, correct, or delete your personal information at any time. Just email us at hello@joinreci.com and we'll take care of it.

Location. Turn it off anytime in your device settings.

Calendar. Turn off Reci's calendar access anytime in your device settings. Visits you already added stay in your journal until you delete them.

Account deletion. Delete your account from within the app or by emailing us.

We are a small team and we are happy to talk through any of this.

Reci NYC, LLC
161 West 61st Street, New York, NY 10023
hello@joinreci.com