Recoteca Privacy Policy

Effective October 26, 2026. Contact: [email protected]

Recoteca saves the movies, shows and books recommended in Instagram posts you share to it. This policy explains what that involves. There are no ads and no tracking across apps, and accounts are optional.

What stays on your phone

• Your list: the titles you save, your ratings, and what you've watched or read.
• Your settings: your streaming services, appearance and filters.
• The links you share, so the app can show the original post.
• Reminders, if you turn them on (Friday night pick, Sunday reading, new on your services): they're scheduled by your phone from your list. No notification service or server is involved.

This is stored only on your device, unless you sign in (below). Deleting the app deletes it from the phone.

What leaves your phone, and why

To identify titles (Recoteca's server, run on Supabase)

• When you share a post, its link is sent to our server.
• The server stores the titles it finds for each post (not the post's text), so the next person who shares the same post gets them instantly.
• Each install gets a random anonymous ID when it first connects. It isn't linked to your name, email, phone number or Apple ID.
• We keep a log of shares (the post, its creator's public handle, the anonymous ID and the time) to show what's trending. Trending only ever shows totals, never who shared what.
• When you tap "Watch their video" on a creator's list or page, we log the post, the anonymous ID and the time, so the creator sees how many video opens came from Recoteca (a total, never who).
• When you tap a store link (Apple Books, Bookshop.org, Amazon, Apple TV or Fandango), we count the tap with the store, the title's kind, your country and the post it came from, without any ID for you or your phone. Some of these links earn Recoteca a commission if you buy something; the store's own privacy policy applies once you're there.

To understand how Recoteca is used (you can turn this off)

• The app records which screens and features are used: for example "opened a title", "marked it watched", "followed a list", how long a screen was open, and whether a share was identified. Each event carries the app version, iOS version, language, country and whether you're signed in.
• Events are tied to a random analytics ID made on your phone for this alone. It isn't your account or the anonymous ID above, so events can't be connected to your name, email or list. They never contain the titles you save, the posts you share, or anything you type.
• Crash and performance reports come from Apple's MetricKit, built into iOS (crashes, hangs, launch time, memory and battery use). They carry the same analytics ID and nothing else about you.
• We keep usage events for 13 months and crash and performance reports for 90 days.
• Turn both off in Settings → Privacy → Share usage statistics.

If you sign in with Apple or Google (optional)

• Signing in creates a Recoteca account with the email (and, if you share it, the name) that Apple or Google gives us. With Sign in with Apple you can hide your email; Apple then gives us a private relay address instead.
• Your list is then backed up to the account so it's the same on every iPhone you sign in on: each title, its details, your ratings, notes and finished dates, and the link and creator of the post it came from.
• Shared lists (optional): if you create or join a shared list, the other people on it see the titles on it, who added them isn't shown, and the first name (or the start of the email) your account has. You can leave a list at any time; the list is deleted when its last member leaves.
• Creators linking Instagram (optional): if you link your Instagram Creator or Business account, we keep your Instagram username and account ID with your Recoteca account, to show you totals for your recommendations (how often they were saved, never by whom). Instagram's access token is used once to read your username and isn't stored. Unlink any time in Profile. Lists you make there are public in Recoteca, on your creator page and through their share links.
• Following creators' lists (optional): we keep which lists you follow, so they stay in your Lists tab. The creator sees how many people follow their lists, never who. Unfollow any time.
• You can sign out at any time (your list stays on the phone), or delete the account in Profile (top right of Home), which deletes the account and the backed-up list from our server straight away.

To find the titles (Meta's Muse AI, only if you allow it)

• The app asks first. Until you allow it, saves stay on your phone and you add their titles yourself. You can change this any time in Settings → Privacy.
• Our server sends Meta's Muse AI the post's link and gets back the titles it recommends.
• We use a Muse plan under which Meta may use these requests to improve its AI models. They contain the public post's link, never your name or the anonymous ID.

For posters, covers and where to watch

• The app looks titles up on TMDB (posters, summaries, runtime, genres and where to watch, from JustWatch), Apple Books and Open Library (book covers and descriptions).
• These requests contain the title being looked up. Like any website, these services see your IP address.

When the app shows or reads a post

• Posts are shown with Instagram's official embed. When you open one, Instagram loads the post the same way it would on a website, under its own privacy policy.

What we don't do

• No advertising, tracking across apps or websites, or selling of data.
• No third-party analytics or crash-reporting SDKs: usage events and crash reports go only to our own server.
• Accounts are optional. Without one we never know your name or email, and we never ask for your contacts.

If you report a creator's list or page

• We keep the report (what was reported, the reason and the time) with your install's anonymous ID, only to stop report spam. The creator never sees who reported it.

How long we keep it

• On your phone: until you delete the titles or the app.
• Your account and backed-up list: until you delete the account in the app.
• Identified titles for a post: as long as Recoteca runs, because they aren't personal; they're the public post's recommendations.
• The share log: as long as needed to show trends. To have your entries deleted, contact us (see below).
• Usage events: 13 months. Crash and performance reports: 90 days.

Your choices

• Remove any title from your list at any time, or delete the app to remove everything on your phone.
• Turn off usage statistics and crash reports in Settings → Privacy.
• To ask what the server holds for your install, or to have it deleted, email [email protected].

Children

Recoteca isn't directed at children under 13 and doesn't knowingly collect their information.

Changes

If this policy changes, the new version will be posted here with a new effective date.

Services we use

• Supabase: hosts our server and database, including usage events
• Apple MetricKit: crash and performance reports, generated by iOS
• Instagram (Meta): public profile photos of the creators shown in Trending, from their professional accounts, through Meta's official API
• Meta: Muse AI, which identifies the titles
• TMDB and JustWatch: movie and show details, and where to watch
• Apple (Apple Books search) and Open Library: book covers
• Instagram: its official embed, when you view a post