Privacy, in plain words

A short summary of how Recto works during the invitation-only beta. It is not a privacy policy, and it may change.

What people see

Your recommendations and skips are seen only by people you approved as readers. A quotation you add to a recommendation is seen by the same people.
Your private notes, your ratings, your diary, and quotations on records that aren't recommendations are not shown to anyone else.
Accepting an invitation lets the person who invited you read your recommendations and skips. That is what an invitation means; you can choose "Not now" instead.
When you remove a reader or block someone, they stop seeing your records right away. Anything they already saved stays in their own list.
There is no public profile or directory, and search finds only people you already have. Someone holding your invitation link sees your first name and initial.
There are no like or follower counts.

With an account, your records, including the private ones, are stored on Recto's server so they follow you to a new phone. Other people can't read your private records.

You sign in with Apple, Google or a code sent by email. Recto has no passwords.
You need to be 13 or older.
You can delete your account in the app: Settings → Account → Delete account. If you signed in with Apple, Recto asks Apple to revoke its access; you can also remove Recto yourself in your Apple ID's Sign in with Apple settings.
If you tell us why you left, that note is kept without your account, with the month only.

Book searches go to Open Library and film searches to Wikidata, so those services receive the words you search for. Book covers load from Open Library.

Each time the app opens, it asks Expo, the service that delivers Recto's updates, whether a newer version exists. Expo receives a random ID made on your phone for this purpose, your IP address, and the app's version, and keeps them. If an update fails to start, the error text is also sent and kept for three days.

It loads no trackers, analytics, ads or outside fonts; the site's security policy blocks them.
Like any website, it receives the address you open, including an invitation link.

A full privacy policy, a support process, and how long each kind of data and its backups are kept.