Privacy Policy

Last updated: August 2025

Data we collect

Only your email address, collected for account creation and support.

How it's used

Your email is used to send recommendations, manage your account, and — if you opt in — send optional push notifications via OneSignal.

Data storage

Your data is stored on Supabase (EU region) and Upstash Redis.

Third parties

We do not sell your data to third parties. We only share limited data with the service providers listed under "Third-Party Integrations" below, strictly to operate the service.

Your GDPR rights

As an EU resident, you have the following rights over your personal data:

  • Right to Access: You can request a copy of all personal data we hold about you.
  • Right to Rectification: You can correct or update your personal information at any time in your account settings.
  • Right to Erasure (Right to be Forgotten): You can request deletion of your account and all associated data.
  • Right to Data Portability: You can request your data in a portable format (JSON/CSV) to transfer to another service.
  • Right to Object: You can opt out of push notifications and marketing communications at any time.
  • Right to Complaint: If you believe your data rights have been violated, you can file a complaint with the French Data Protection Authority (CNIL) at cnil.fr.

To exercise any of these rights, contact recomindsupport@gmail.com.

Data retention

We retain your email address and account data for as long as your account is active. If you delete your account or request data deletion, all associated data is permanently removed within 30 days. In case of account inactivity (no login for 2 years), we may archive your data but keep it available for restoration upon request.

Analytics & tracking

We use PostHog (hosted in the EU) to analyze user behavior and improve our service. PostHog may set cookies and track page views, clicks, and feature usage. This data helps us understand how users interact with Recomind. You can opt out of analytics tracking by disabling cookies in your browser or by contacting us.

Cookies

We use cookies for session management and analytics (PostHog). Essential cookies are required for the service to function. You can manage cookie preferences in your browser settings.

Third-party integrations

For optional push notifications, we use OneSignal. OneSignal may process your email to send notifications. Data shared with OneSignal is limited to your email address and notification preferences.

For subscription payments, we use Stripe. Stripe processes payment information securely according to PCI-DSS standards. We do not store full credit card details.

Security

We implement industry-standard security measures (SSL/TLS encryption) to protect your data. However, no system is 100% secure. If you believe your data has been compromised, contact recomindsupport@gmail.com immediately.

Children

Recomind is not intended for users under 13. We do not knowingly collect data from children. If we discover a user is under 13, we will delete their account and data.

Changes to this policy

We may update this policy. Changes take effect immediately. Continued use of the service constitutes acceptance of the updated policy. Major changes will be notified via email.