Privacy Policy

Recursa is privacy-first by design.

That said, we do collect a small amount of data in two specific contexts, both described in full below: when you join our waitlist, and when you use the app (anonymous analytics only). We believe you deserve to know exactly what those are.

What we collect when you sign up for early access

When you enter your email on recursa.app to join the waitlist, we collect the following:

We do not store your IP address. The country code is derived by Cloudflare at the network edge and is the only geolocation data we retain. Your email will be used solely to communicate about Recursa — launch announcements and, occasionally, meaningful development updates. No third-party marketing. No sharing. No selling.

You can request removal from the waitlist at any time by emailing [email protected]. We will delete your record within 48 hours.

What stays on your device

When Recursa launches, all of your family's life-admin data — obligations, family members, categories, schedules, notes — will be stored locally on your device using Apple's SwiftData framework. This data is:

• Stored on-device in an encrypted local database
• Never transmitted to our servers (we don't operate any that handle user data)
• Optionally synced between your own devices via your personal iCloud account, using Apple's CloudKit — a direct device-to-iCloud-to-device path that Recursa cannot intercept or read
• Fully under your control — you can export or delete it at any time

We have no ability to access, view, or recover your data. If you delete the app, your local data is gone. If you use iCloud sync, your data persists in your iCloud account under Apple's privacy policy.

On-device AI that respects your privacy

Recursa uses Apple's on-device machine learning frameworks to provide intelligent features. This is a core part of our privacy commitment — all AI processing happens locally on your device.

Here's what our AI features do and how they work:

Technical details: Recursa uses Apple's NaturalLanguage framework, NSDataDetector, and NLTagger — all of which are built into iOS and process data entirely on your device. These are the same privacy-preserving technologies that power features like Siri Suggestions and Spotlight Search. No data is sent to Apple or any third party for AI processing.

Unlike cloud-based AI assistants (ChatGPT, Google Assistant, etc.), Recursa's AI:

• Never sends your data to external servers — all processing is local
• Works offline — no internet connection required for AI features
• Doesn't train on your data — your family's information is never used to improve AI models
• Has no cloud dependency — if Apple's servers go down, your AI features still work
• Respects your privacy by design — we couldn't access your AI-processed data even if we wanted to

Anonymous usage data

To understand how Recursa is used and to improve the app, we may collect anonymised, aggregate analytics. This would include things like:

• Which features are used most frequently
• General session duration
• App stability and crash reports
• Device type and OS version

This data is never linked to your identity, your email, or your family's content. We will use Apple's built-in App Analytics or a privacy-respecting service like TelemetryDeck that does not use cookies or fingerprinting. No personally identifiable information is ever collected through analytics.

Who else has access

Almost nobody.

• Cloudflare — hosts our website and waitlist API. Subject to Cloudflare's privacy policy. Processes requests at the edge; we use their EU region for data storage.
• Apple (iCloud/CloudKit) — if you enable sync, your data passes through Apple's CloudKit infrastructure. Subject to Apple's privacy policy. We have no access to this data.
• Analytics provider — if implemented, will be a privacy-first service (Apple Analytics or TelemetryDeck). No personal data shared.

We do not use Google Analytics, Facebook pixels, advertising SDKs, or any tracking technology that identifies or profiles users. We do not and will never sell, rent, or share your data with advertisers or data brokers.

Family data and minors

Recursa is designed for families, which means you may store information about your children (names, health appointments, school activities, etc.). This data is stored entirely on your device and, if you choose, in your iCloud account. We never have access to it. No data about children is ever transmitted to us or any third party.

Access, deletion, and portability

Because Recursa is local-first, you are always in control of your data:

• Access — all your data is visible to you in the app at all times
• Deletion — delete any item, family member, or all data from within the app. Deleting the app removes all local data.
• Portability — we plan to offer data export in standard formats (CSV/JSON) so you can take your data elsewhere
• Waitlist removal — email [email protected] and we'll delete your record

For users in the European Economic Area (EEA), you have additional rights under GDPR including the right to lodge a complaint with your local data protection authority. Our legal basis for processing waitlist data is your consent (which you can withdraw at any time by requesting removal).

Updates to this policy

If we make meaningful changes to this policy, we will update it here and note the effective date above. If we ever introduce premium features that involve server-side processing, we will update this policy before launch and notify waitlist subscribers and existing users.

Our commitment to local-first, privacy-respecting design is foundational — not a marketing decision. It won't change.

Questions?

If you have questions about this policy or your data, reach us at [email protected].