Effective Date: June 24, 2026
Privacy is important to RecSpot. This Privacy Policy explains how RecSpot Corporation ("RecSpot," "we," "us," or "our") collects, uses, and shares information when you use www.therecspot.com, the RecSpot mobile app, and related services (collectively, the "Service").
By using the Service, you agree to the collection, use, sharing, and storage of information as described in this Privacy Policy. This Privacy Policy supplements and is incorporated into our Terms of Service.
When you sign in with Apple or Google, we receive your name if you authorize it and an email address. We do not receive your Apple ID or Google password. When you set up your profile, we also store your chosen @handle, display name, optional avatar image, optional location such as city or region, and your profile privacy preference.
We store the recommendations ("recs") you create, including titles, ratings, notes, photos, dates, locations, external URLs, and any RecLists you organize them into. We also store bookmarks, comments, likes, and other content you choose to create or share through the Service.
We store who you follow and who follows you. For users with private profiles, we also store pending follow requests until they are approved, ignored, or deleted.
If you grant Contacts permission to find friends on RecSpot, your device hashes each contact's email address using SHA-256 before sending it to us. We never receive plaintext email addresses from your contacts. Hashes are matched against existing user emails, also hashed, to help surface mutual connections.
If you grant location permission, we may use one-time GPS readings to reverse-geocode a "City, Region" label for your profile or rec creation. We do not continuously track your location and do not store latitude/longitude for this purpose. We store only the human-readable location label you confirm.
To deliver push notifications, we store your iOS push token. We may collect basic device information, such as iOS version, device model, and app version, to diagnose crashes and improve app reliability.
We use Firebase Analytics to measure product events such as sign-up, rec creation, rec sharing, push taps, and recap views. These events may be associated with your user ID so we can deduplicate events and understand aggregate product usage.
Our backend records timestamped request metadata, such as operation name, user ID, IP address, and response latency, for abuse detection, security, and performance debugging. We generally retain these server logs for up to 30 days.
When you visit our website, we may collect information through cookies, pixels, and similar technologies, including device, browser, IP address, pages visited, and interactions with the website. We may use third-party analytics and advertising tools to understand website usage and improve our marketing and product experience.
We use the information we collect to:
We do not sell your personal information.
We share information with service providers and technology partners that help us operate, protect, and improve the Service. These include providers for authentication, hosting, push notifications, analytics, crash reporting, maps and place search, web search, AI-assisted drafting, website analytics, and marketing measurement.
Current examples include Apple, Google, and Anthropic.
When you use search or AI-assist features, the information needed to complete that request may be sent to the relevant provider. For example, place searches may be processed through Google services, and text submitted for AI-assisted drafting may be sent to Anthropic.
Your information may also become visible to other users when you interact with the Service, such as when you create a public profile, post a rec, share a RecList, comment, like, or follow another user.
We may disclose information if required by law, legal process, or government request; to enforce our Terms of Service; to investigate fraud, abuse, or security issues; or to protect RecSpot, our users, or others.
If RecSpot is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, user information may be transferred as part of that transaction.
We may also share information with your consent or at your direction.
You can control or delete certain information through the Service and your device settings:
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.
We may update this Privacy Policy from time to time. If changes are material, we will notify you in-app or by another reasonable method before the update takes effect.
If you have questions, comments, or concerns about this Privacy Policy, contact us at support@therecspot.com.