Privacy Policy

Recto does its work on your device. Your documents, photos, and scans are never uploaded — not to us, not to anyone. There is no server to upload them to. There are no accounts, no tracking, and no advertising. We never see the contents of anything you open in this app.

Everything below says the same thing in the detail a privacy policy requires.

Recto (“the app”) is published by Octo8 (“we”, “us”, “our”). We are the data controller for the purposes of the EU/UK General Data Protection Regulation, and the veri sorumlusu for the purposes of Turkish Law No. 6698 (KVKK). Questions about this policy: [email protected].

Recto keeps the following on your device only:

• PDFs you import, scan, or create with the app
• Photos you select, copied in so the app can compose them
• Page images captured by the document scanner
• Thumbnails generated for the library
• Text recognized from your documents, and the search index
• Titles, tags, folders, and similar labels you create
• Your app settings

All of it lives inside the app's private container on your device, protected by iOS Data Protection and your device passcode. None of it is transmitted anywhere. We hold no copy, because no copy is ever made off your device.

If you have iCloud Backup or encrypted local backups switched on, files stored by Recto are included in those backups, the same as files from any other app. That backup is between you and Apple under Apple's terms — we have no access to it and receive nothing from it. You can exclude Recto in iOS Settings → your name → iCloud → Manage Account Storage.

Every permission below is optional. Declining one disables only the feature that needs it. You can change any of them at any time in iOS Settings → Recto. In every case, nothing leaves your device.

• Photos — to read the specific photos you pick so the app can compose them into a PDF.
• Camera — to scan pages. Camera frames are processed in memory; only the pages you choose to keep are saved.

Those are the only two. Recto does not ask for your location, your contacts, your microphone, your health data, or your biometrics, and it does not declare permissions it has no use for.

Recto contains no analytics SDK and no advertising SDK. It does send three notifications to the developer, and this section says exactly what they are.

What is sent. Three moments produce a message: the first launch after installation; the Pro screen opening, together with which feature you had tapped to reach it; and a completed purchase, together with the product identifier and the price your App Store charged. Each message carries the same short description of the device: its model (for example iPhone17,2), the system version, the app version and build, your language and region setting, and a random number the app generated for itself on first launch and stored on the device.

What is never sent. No document data of any kind. Not a file, not a file name, not a page image, not a word of recognized text, not a page count, not a file size. Nothing you compress, scan, watermark, redact or read is described in these messages, and no message is produced by any of those actions. We do not send your name, your email address, your Apple Account, your IP-based location, or any advertising identifier.

Where it goes. The messages are delivered to a private Telegram group that only the developer can read, through Telegram Messenger Inc.'s Bot API. Telegram receives the message in transit and is subject to its own privacy policy.

The identifier. The random number described above identifies an install, not a person and not a device. It is not the Advertising Identifier (IDFA) and not Apple's Identifier for Vendor (IDFV). Deleting and reinstalling the app produces a new one. It exists so two messages can be recognized as coming from the same install, and it is useless for anything else.

Tracking. We do not build profiles, we do not track you across other companies' apps or websites, we do not present an App Tracking Transparency prompt, and we do not share data with data brokers. The app's Settings screen discloses the three messages directly as “Analytics — Three events.”

Turning it off. There is currently no setting to disable these three messages. If you would prefer they were not sent, contact us at the address in section 11 and do not install the app in the meantime; we will say plainly in the release notes if this changes. If what is sent ever changes, we will update this policy and the disclosure inside the app's Settings screen in the same release as the change, never after it.

Apple operates the App Store and the operating system, and collects some information under its own privacy policy, not ours: crash and usage diagnostics if you opted in to share them with developers; aggregate App Store download and purchase figures; and ratings and reviews you choose to leave. Apple does not give us your name, email address, or payment details. Apple's handling of this data is governed by Apple's Privacy Policy.

Tapping a legal link, Contact, or Rate Recto hands you off to Safari, Mail, or the App Store, where those services' own terms apply. When you export, share, print, or save a PDF, where it goes is your choice and outside this policy.

Recto is a general-purpose utility, not directed at children. It collects no personal information from anyone, including children.

For as long as you keep it. Deleting a document removes the file and its thumbnail from your device. Deleting the app removes its entire container. We keep nothing, so there is nothing for us to delete on our side.

Under the GDPR, the KVKK, the California Consumer Privacy Act, and comparable laws, you have rights to access, correct, delete, port, and restrict processing of your personal data, and to object to it or lodge a complaint with a supervisory authority.

These rights are straightforward here: we hold no personal data about you. Your documents are on your device, under your control, and you can inspect, export, or delete any of them without asking us. We have never sold or shared personal information, and have none to sell or share. If you want to exercise a right anyway, write to [email protected] and we will respond within the period the applicable law requires.

The strongest security measure in this app is architectural: your documents are never transmitted, so there is no transmission to intercept and no server of ours to breach. On the device, files are held in the app's protected container under iOS Data Protection and are encrypted at rest whenever your device is locked with a passcode. No system is perfect, and the security of your device is ultimately in your hands.

None. Nothing is transferred anywhere.

If this policy changes materially, we will update the date at the top, describe the change in the App Store release notes, and — where the change affects what the app collects — update the disclosure inside the app in the same release.

Octo8 — [email protected]