Privacy Policy

Last updated: September 16, 2026

The short version: Your saved reminder list is kept on your device. Voice input uses Apple Speech, and the resulting text is sent to OpenAI to understand your reminder. Our secure gateway runs on Cloudflare. Optional feedback goes to our Telegram inbox. We do not use advertising or cross-app tracking.

1. What Recue Does

Recue turns spoken or manually entered tasks into reminders. No Recue account or sign-in is required. The secure-gateway data flow below applies when using version 1.6.4 or later; earlier versions may connect directly to OpenAI and Telegram instead of using that gateway.

2. Data on Your Device

Reminders, settings, and preferences are stored locally in the app. Device security storage also holds registration and recovery information used to authenticate requests. Temporary audio recordings may remain in the app's cache; Recue does not upload these recordings to its parser gateway or OpenAI.

If you enable calendar integration, reminder copies are added to your selected system calendar and may sync through your calendar provider. Local data may also be included in device backups, depending on your settings. Recue does not upload your full reminder library, contacts, or calendar to its parser.

3. Voice Processing

When you use the voice feature, your speech is processed as follows:

Our gateway does not persist or intentionally log transcripts or parser responses. OpenAI's default API policy does not use inputs or outputs for model training unless an organization opts in. Its abuse-monitoring logs may include content and are normally retained for up to 30 days, with possible longer retention for legal or security reasons. Disabling response storage does not eliminate that retention. See OpenAI's API data controls; this policy does not claim zero data retention.

4. Secure Gateway and Security Records

We operate a gateway and security database on Cloudflare to protect access to our services. Apple App Attest verifies requests from genuine app installations. Registration proofs are processed for verification; the gateway retains public-key records, hashed key identifiers, assertion counters, timestamps, and limited challenge/request metadata to prevent replay and abuse. It does not store your private attestation key.

Challenges expire after about two minutes, request-deduplication records after 24 hours, and ingress rate-limit buckets after one minute. Expired records are pruned during subsequent activity, so expiry is not a promise of immediate physical deletion. Registered public-key records have no automatic expiry. Cloudflare backups may retain earlier security metadata. These records do not contain reminders, transcripts, or feedback text.

Network providers necessarily process connection information such as IP addresses. Our application's rate-limit records use a keyed, rotating representation rather than storing raw IP addresses. Cloudflare may process infrastructure and security data under its own service policies. See Cloudflare's Privacy Policy.

5. Optional Feedback

When you submit feedback, the message you enter is sent through our gateway to a developer inbox on Telegram. Feedback is not sent to OpenAI, and your reminder library is not automatically attached. Please avoid including sensitive information that is unnecessary for your request.

The gateway does not persist or intentionally log feedback content. Delivered messages remain in Telegram separately from your local app data; there is no automatic message-deletion schedule in Recue. See Telegram's Privacy Policy.

6. Subscriptions and Identifiers

Apple processes subscription purchases, and RevenueCat handles receipt validation and subscription status. RevenueCat may process an automatically generated customer identifier, purchase and entitlement information, and technical information such as device and operating-system details. Recue does not collect your payment-card information directly. See RevenueCat's Privacy Policy.

We do not use advertising or cross-app tracking. That does not mean no data is processed: subscription services and our security gateway use the operational information and identifiers described above. You may also voluntarily provide personal information in a transcript, feedback message, or support email.

7. Your Choices and Deletion

8. Children's Privacy

Recue is not directed to children under 13. If you believe a child has provided personal information through our services, please contact us so we can investigate and address it.

9. Changes to This Policy

We will publish changes on this page and update the date above. This policy describes our data practices; it does not replace any permission that applicable law or platform rules require.

10. Contact

Questions about privacy? Reach us at support@recueapp.com