Privacy Policy
Effective October 22, 2026
Recado keeps your notes about places so you can find them again. It collects only what it needs to do that. It has no ads, no analytics and no tracking, and your data is never sold.
This policy covers the Recado iPhone app and this website. Recado is made by an independent developer, referred to here as "we".
What we collect
Your account
Your email address and password, which you use to sign in. Your password is stored only in hashed form. Your display name defaults to the part of your email before the "@". The people you share a map with see it, next to what you add.
What you write
The places you save and everything you add to them: titles, notes, what to order, ratings, visits and their dates, favorites, tags, and the maps you make and name. This is the point of the app, and it is stored so it can sync to your phone.
If you prepare a recommendation webpage, we also store its introduction, the page notes you choose to share, the order of its places and its public link. Page notes are separate from your private notes.
Place details
For each place you save, we store its Google place ID, name, address, coordinates and type, fetched from Google. For a pin you drop yourself, we store the coordinates you chose.
Your location
If you allow it, Recado uses your location only while the app is open. It uses it to show where you are on the map and to sort your places by distance. We do not store your location or keep a history of it.
The area of the map you are looking at, which may be around you, is sent to Google to show the map and to rank search results. It is also sent to our server when you save a place, to pick the right match for a link or search.
Your devices and notifications
For each device you are signed in on, we store its model, the app version and when it was last active, so Notifications & Devices can list your devices and let you sign any of them out.
If you allow notifications, we also store that device's push token, which lets us notify you when someone adds a place to a map you share. You can turn these off for one map or for all of them. Signing a device out deletes its token, and it gets no further notifications.
Links you share with Recado
When you paste or share a Google Maps link into Recado, our server opens that link with Google to find out which place it points to. The link itself is not stored.
What we don't collect
- No advertising identifiers, and no tracking across other apps or websites.
- No analytics or crash-reporting services.
- No access to your photos, camera, contacts or microphone.
- This website uses no advertising, analytics or tracking cookies. Its recommendation reader sends no sign-in session or cookies.
How your data is used
Only to run Recado: to sign you in, store and sync your places, look up place details and show recommendation webpages you deliberately publish. It is not used for advertising, profiling or training models, and it is not sold or rented to anyone.
Who processes it
Recado relies on these service providers. They process data on our behalf to run the app:
- Supabase hosts your account and your saved places and runs our server functions. See the Supabase Privacy Policy.
- Apple Push Notification service delivers notifications to your devices. A notification carries the name of the person who added a place, the place's title and the map's name. See Apple's Privacy Policy.
- Google Maps Platform provides the map, place search and place details. The Google Maps and Places software in the app sends Google the map area you view, what you type into place search, and the places you open. Google's use of that data is covered by the Google Privacy Policy.
- Cloudflare hosts this website and delivers its pages. Visiting a webpage sends Cloudflare the requested URL, your IP address and browser request information; its hosting logs may include the public-link URL. See the Cloudflare Privacy Policy.
We disclose data otherwise only if the law requires it.
Sharing
Your places are private to your account unless you choose to share them, put them on a shared map or publish a recommendation webpage.
Shared maps. You can share a map with another Recado user, to view it or to add to it. The people on a shared map see its places and what each person has added to them: titles, notes, what to order, ratings, tags and visits, each with that person's display name. A visit you mark private is visible only to you. You can stop sharing a map, or leave a map shared with you, at any time.
Sharing a place. If you share a place from Recado, the share sheet sends the place's title, address and Google Maps link, plus your note, what to order and rating only if you turn them on. It goes only to the app or person you choose.
Recommendation webpages. Only a map's owner can publish its webpage. Anyone with its link can view and forward it without signing in. It shows the map name, introduction, places, explicit page notes and Google Maps links. Places you add or remove and changes to their titles appear on subsequent page loads. On a shared map, places added by collaborators appear too, using the owner's title when available and otherwise a Google name or a generic title. Collaborators' personal notes and profiles are not published.
Your private notes stay private unless you explicitly copy them into page notes. Copying is a one-time action: later edits to a private note do not update the page note. Editing an introduction, page note or order changes the webpage only when you save. Unpublishing, deleting the map or deleting your account stops future reads through that link. Republish creates a new link. Revocation cannot erase copies someone already saved, forwarded or captured, or information already loaded in an open page.
This website
The recommendation reader runs a small script that sends the public-link token to Supabase to load the published list. Supabase receives your IP address and browser request information. The reader sends no account session or cookies, uses no persistent data cache and suppresses the webpage address in referrers. It does not load an embedded map or call a Google API; following an Open in Google Maps link takes you to Google.
Other pages use Cloudflare's email-decoding script to make contact links work. We run no analytics or tracking scripts. Normal browser history and hosting access logs can still contain a webpage URL.
On your phone
Recado keeps a copy of your places on your phone so the map opens quickly and works offline. Your sign-in session is kept in the iOS Keychain. Signing out removes both from the phone and stops notifications to it.
Keeping and deleting your data
We keep your data for as long as you have an account. To delete your account, email [email protected] from the address you sign in with. Within 30 days we will delete your account and everything linked to it: your places, notes, visits, tags, maps and devices. Deletion is permanent, and we keep no backup copy.
You can also email us for a copy of your data, or to correct it.
Security
Data is encrypted in transit. Access rules protect private account data and shared-map membership. A published webpage is deliberately public to anyone with its hard-to-guess link, and returns only the fields described above.
Children
Recado is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it.
Changes
If this policy changes, we will update it here and change the effective date. If a change affects how your existing data is used, we will tell you in the app first.