Privacy Policy

Recka is built local-first. Your decks, cards and study history live on your own device, and nothing you study is sent anywhere unless you turn on cloud sync. We collect the minimum we need to run your account and, if you choose it, to sync and back up your library. We do not sell your data or use it for advertising. The rest of this page is the detail.

Recka ("Recka", "we", "us") provides the Recka desktop application and this website. For anything in this policy you can reach us at privacy@recka.app. For the purposes of UK and EU data protection law, we are the data controller for the personal data described here.

We keep collection deliberately small. Depending on how you use Recka, that can include:

• Account details. When you create an account we store your email address and an encrypted (hashed) form of your password. Authentication is handled by our infrastructure provider, Supabase.
• Billing details. Paid subscriptions are processed by Stripe. Stripe handles your card details directly. We never see or store your full card number; we keep only a customer reference, your plan, and its status.
• Your library, only if you sync. If you enable cloud sync, the content you create (decks, folders, cards, review history and app settings) is stored on our servers so it can sync and stay backed up across your devices. With sync off, none of this leaves your device.
• Basic technical data. Like most software, we may process limited technical information such as app version, operating system and error diagnostics to keep Recka working and to fix bugs.

We do not collect the contents of cards you keep only on your own device, and we do not track your activity across other apps or websites.

• To create and run your account and sign you in.
• To sync and back up your library across your devices, when you have turned sync on.
• To take payment for and manage your subscription.
• To respond to you when you contact us for support.
• To keep the service secure, diagnose problems and improve reliability.
• To send you essential service messages (for example about your account, security, or billing).

Recka runs entirely on your device. The scheduler, your cards and your progress all work with no connection at all. Cloud sync is optional and off until you enable it. When you turn sync on, your library is copied to our servers so it can reach your other devices; when you turn it off, we stop syncing new changes. You can ask us to delete your synced data at any time (see Your rights below).

Subscriptions are handled by Stripe, a global payments provider. When you subscribe, your payment information is collected and processed by Stripe under its own terms and privacy policy. We receive confirmation of payment and your subscription status, not your card details.

We use a small number of trusted providers to run Recka. They process data only on our instructions:

• Supabase for account authentication and, if you use sync, database storage of your library.
• Stripe for subscription payments.
• Hosting and email providers for running this website and sending essential account messages.

We do not sell, rent or trade your personal data, and we do not share it for advertising.

We keep your account and synced data for as long as your account is active. If you delete your account, we delete or anonymise the associated personal data within a reasonable period, except where we need to keep limited records to meet legal, tax or accounting obligations. Data you keep only on your own device stays there under your control until you remove it.

We take reasonable technical and organisational measures to protect your data, including encryption in transit and access controls on our systems. No method of storage or transmission is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond quickly if something goes wrong.

Depending on where you live, you may have rights over your personal data, including the right to access it, correct it, delete it, export it, or object to or restrict certain processing. These include the rights given by the UK GDPR and EU GDPR.

To exercise any of these, email us at privacy@recka.app. You also have the right to complain to your local data protection authority (in the UK, the Information Commissioner's Office).

This website uses only the cookies needed to make it work, such as keeping you signed in to your account. We do not use advertising or cross-site tracking cookies. The desktop app does not use cookies for tracking.

Recka is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we will remove it.

Our providers may process data in countries other than your own. Where data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses) to protect it in line with applicable data protection law.

We may update this policy from time to time. When we make material changes, we will update the date at the top and, where appropriate, let you know in the app or by email. Continuing to use Recka after an update means you accept the revised policy.

Questions about your privacy or this policy? Email privacy@recka.app. See also our Terms of Service.