Privacy
The short version
Recto stores your notes in your own iCloud account. They are held in your private iCloud database that only you can access. I cannot read your notes, your attachments, your voice recordings, or anything else you write in Recto.
Recto contains no analytics, no tracking, no advertising, and no third-party software development kits. Nothing you write leaves your own iCloud account.
The rest of this policy explains that in detail, and covers the small amount of information that is handled elsewhere, purchases, which Apple processes, and any email you send me.
View of a note in Recto on macOS Light mode
Overview of a Recto note on iOS
Who is responsible
Recto is made by Kremers Consultancy, registered in the Netherlands (88629031).
For any question about this policy or about your data, write to recto@kremers.co.
Under the General Data Protection Regulation (GDPR), Kremers Consultancy is the data controller for the limited processing described below.
What Recto stores, and where
Your content stays in your iCloud account
Everything you create in Recto notes, folders, tasks, reminders, images, PDFs, tables, voice recordings, and any other attachment, is stored in your own private iCloud database, using Apple's CloudKit service. This is the same mechanism Apple's own apps use.
This means:
Your content syncs between your own devices through your Apple Account.
That's why there is no separate login needed for Recto, it uses the Apple Account linked to your device
It is stored under your Apple Account, not on any server operated/owned/paid by me.
I have no access to it. There is no administrative view, no support tool, and no technical route by which I could read your content, even if asked.
Apple's handling of iCloud data is governed by Apple's own privacy policy: https://www.apple.com/legal/privacy/
Recto also keeps a local copy of your content on each device so the app works offline. That copy is stored within the app's own protected storage and is removed when you delete the app.
Information stored on your device only
Some small technical values are kept on your device and never transmitted to me:
Your app preferences and settings.
Which onboarding screens you have already seen.
A locally generated identifier used to keep your usage count consistent across your devices. It is not linked to you, your Apple Account, or any advertising identifier, and it is not shared with anyone.
A record of whether you hold a paid version of Recto, so the app works without a network connection.
Purchases
Recto is free to download, with an optional paid upgrade a monthly or yearly subscription, or a one-time lifetime purchase.
All payments are handled by Apple. I never see or receive your payment details, card number, billing address, or Apple Account information. Apple confirms to the app whether a valid purchase exists; that confirmation contains no personal information about you.
Apple provides me with aggregated, anonymised sales and download figures through App Store Connect. These show totals by country and period. They do not identify individual customers.
Apple's handling of your purchase is governed by Apple's privacy policy.
Diagnostics and crash reports
Recto contains no analytics software and no crash reporting service.
If you have chosen, in your device settings, to share analytics and crash data with app developers, Apple may provide me with anonymised crash reports and performance data through App Store Connect. This is entirely controlled by you in Settings → Privacy & Security → Analytics & Improvements, and you can turn it off at any time. These reports contain technical information about the app, not the contents of your notes.
If you contact me
If you send me an email, for support, a bug report, or feedback, I will see your email address and whatever you choose to write. I use it only to answer you. I do not add you to any mailing list. I keep support correspondence for as long as needed to resolve the matter and for a reasonable period afterwards in case you write again, and then delete it.
Permissions Recto may ask for
Recto only asks for a permission when you use the feature that needs it, and each is optional. Declining one disables that feature and nothing else. Allowing doesn't give anyone outside Recto permission to see your data ever.
Microphone: to record voice notes and audio attachments. Recordings are saved to your notes in your own iCloud database. There is no speech recognition or transcription service involved, and no audio is sent anywhere other than your own iCloud.
Photos: to attach images to your notes. Recto accesses only the images you select.
Notifications: to deliver reminders you have set. Reminders are scheduled on your own device.
Location: to trigger location-based reminders you set yourself. Your location is evaluated on your device to fire your reminder, and is never transmitted to me or stored outside your own iCloud database.
Who is responsible
Recto is made by Kremers Consultancy, registered in the Netherlands (88629031).
For any question about this policy or about your data, write to recto@kremers.co.
Under the General Data Protection Regulation (GDPR), Kremers Consultancy is the data controller for the limited processing described below.
What Recto stores, and where
Your content stays in your iCloud account
Everything you create in Recto notes, folders, tasks, reminders, images, PDFs, tables, voice recordings, and any other attachment, is stored in your own private iCloud database, using Apple's CloudKit service. This is the same mechanism Apple's own apps use.
This means:
Your content syncs between your own devices through your Apple Account.
That's why there is no separate login needed for Recto, it uses the Apple Account linked to your device
It is stored under your Apple Account, not on any server operated/owned/paid by me.
I have no access to it. There is no administrative view, no support tool, and no technical route by which I could read your content, even if asked.
Apple's handling of iCloud data is governed by Apple's own privacy policy: https://www.apple.com/legal/privacy/
Recto also keeps a local copy of your content on each device so the app works offline. That copy is stored within the app's own protected storage and is removed when you delete the app.
Information stored on your device only
Some small technical values are kept on your device and never transmitted to me:
Your app preferences and settings.
Which onboarding screens you have already seen.
A locally generated identifier used to keep your usage count consistent across your devices. It is not linked to you, your Apple Account, or any advertising identifier, and it is not shared with anyone.
A record of whether you hold a paid version of Recto, so the app works without a network connection.
Purchases
Recto is free to download, with an optional paid upgrade a monthly or yearly subscription, or a one-time lifetime purchase.
All payments are handled by Apple. I never see or receive your payment details, card number, billing address, or Apple Account information. Apple confirms to the app whether a valid purchase exists; that confirmation contains no personal information about you.
Apple provides me with aggregated, anonymised sales and download figures through App Store Connect. These show totals by country and period. They do not identify individual customers.
Apple's handling of your purchase is governed by Apple's privacy policy.
Diagnostics and crash reports
Recto contains no analytics software and no crash reporting service.
If you have chosen, in your device settings, to share analytics and crash data with app developers, Apple may provide me with anonymised crash reports and performance data through App Store Connect. This is entirely controlled by you in Settings → Privacy & Security → Analytics & Improvements, and you can turn it off at any time. These reports contain technical information about the app, not the contents of your notes.
If you contact me
If you send me an email, for support, a bug report, or feedback, I will see your email address and whatever you choose to write. I use it only to answer you. I do not add you to any mailing list. I keep support correspondence for as long as needed to resolve the matter and for a reasonable period afterwards in case you write again, and then delete it.
Permissions Recto may ask for
Recto only asks for a permission when you use the feature that needs it, and each is optional. Declining one disables that feature and nothing else. Allowing doesn't give anyone outside Recto permission to see your data ever.
Microphone: to record voice notes and audio attachments. Recordings are saved to your notes in your own iCloud database. There is no speech recognition or transcription service involved, and no audio is sent anywhere other than your own iCloud.
Photos: to attach images to your notes. Recto accesses only the images you select.
Notifications: to deliver reminders you have set. Reminders are scheduled on your own device.
Location: to trigger location-based reminders you set yourself. Your location is evaluated on your device to fire your reminder, and is never transmitted to me or stored outside your own iCloud database.