1Who we are and what this policy covers
Recido is a mobile app for creating invoices, quotations and receipts and for managing customers, products, sales and a small team. Recido is operated by Zintle Technology, 7420 Unity Ave N #211, Brooklyn Park, MN 55443, USA ("Zintle Technology", "we", "us" or "our").
This policy explains what personal information we handle when you:
- use the Recido app for iOS or Android;
- use our website at recido.app, including joining the waitlist; or
- contact us by email.
For the information about you and your business that you give us, Zintle Technology is the controller (the party that decides how and why it is used). For the information you enter about your own customers, your business is the controller and we act as your processor — see section 6.
Recido is currently in beta. It is free to use and we do not take payments in the app. If that changes, we will update this policy before it does.
2The short version
The rest of this policy explains each of these points in detail.
3Information we collect
Most of what we hold is information you or members of your team enter into the app. We do not buy personal information from other companies.
3.1 Your account
- Email address — used to sign in, verify your account and send service emails.
- Password — we never store your password itself. We store a one-way hash of it created with bcrypt.
- Your name and, optionally, a phone number and profile photo.
- Preferences — language (locale), time zone, currency and country, so documents and amounts are formatted correctly.
- Verification and reset codes — when you sign up or reset your password we email you a short-lived 6-digit code.
You sign up with an email address and password. We do not offer sign-in with Google, Apple or other third-party accounts.
3.2 Your business profile
- Business name, logo, address, email, phone number and website.
- Business registration or tax number and default tax rate.
- Default messages, notes and disclaimers that appear on your documents.
- If you set an in-app passcode for your business, we store only a hash of it, never the passcode itself.
3.3 Your customers
To create documents you can keep a customer directory: names, email addresses, phone numbers, company names, tax IDs, billing and shipping addresses, and notes. This is information about other people that you choose to enter. Section 6 explains our role and your responsibilities for it.
3.4 Your business records
- Products and services, prices, stock levels and inventory movements, and product images.
- Invoices, quotations and receipts, including line items, totals, taxes, due dates and status, and the PDF files generated from them.
- Payments you record manually against documents (for example, "paid $200 by bank transfer"). Recido does not process these payments — it only records what you tell it.
- Sales and the reports and totals calculated from your records.
3.5 Your team
A business owner can invite team members (for example, managers or sales representatives). To do this the owner gives us the person's email address and name, and chooses their role and permissions. We use the email address to send the invitation. Once a member joins, we record which business they belong to, their role and permissions, and which records they create or change.
3.6 Recido AI
If you use Recido AI, we store your conversations — the text you write, images you attach, voice notes you record, and the AI's replies — so you can see your chat history. Section 7 explains how AI requests are processed.
3.7 Device and notification information
If you allow push notifications, we store:
- your Expo push token (an identifier that lets us address notifications to your device);
- your device platform (iOS or Android), device name, app version and operating-system build ID; and
- when the device was last seen, so we can stop sending to devices you no longer use.
To keep you signed in, the app stores your login tokens on your device in the operating system's encrypted secure storage.
3.8 Crash and error diagnostics
When the app or our servers hit an error, we send a diagnostic report to Sentry. A report can include the error and stack trace, the app version, device model and operating-system version, the screen or request involved, and your Recido user ID. We do not attach your email address to these reports.
For a sample of app sessions, Sentry also records a session replay — a reconstruction of what happened on screen before an error — so we can understand and fix it. We configure replays to mask all text and images, so the content of your screens is not captured.
3.9 When you contact us
If you email us, we receive your email address, your message and anything you attach, and we keep that correspondence so we can help you.
3.10 Our website and waitlist
- If you join the waitlist on recido.app we collect your email address and, if you provide them, your name, phone number and country. Waitlist entries are stored in our own database.
- Like any website, our hosting provider receives technical information such as your IP address, browser type and the pages requested, and keeps server logs.
- The website uses Google Analytics only if you accept analytics cookies. See section 18 and our Cookie Policy.
4What we do not collect, and device permissions
- We do not collect your location.
- We do not access your phone's contacts.
- We do not use advertising identifiers and we do not include advertising or analytics SDKs in the app.
- We do not collect card or bank details. Recido does not take payments.
The app asks for device permissions only when you use a feature that needs them:
| Permission | When it is used |
|---|---|
| Photo library | Only when you choose an image — for example a logo, product photo or an image to send to Recido AI. We receive only the image you pick. |
| Microphone | Only while you are recording a voice note for Recido AI. |
| Notifications | To send you notifications about your business (section 13). You can turn this off at any time. |
| Face ID / fingerprint / device PIN | To unlock the app if you turn on app lock. Biometric checks are performed by your phone's operating system; your biometric data never leaves your device and we never receive it. |
Recido does not use your camera.
5How we use information, and our legal bases
We use personal information only for the purposes below. If you are in the European Economic Area (EEA) or the United Kingdom, the law requires us to have a "legal basis" for each purpose; we list it alongside.
| Purpose | Information used | Legal basis (EEA/UK) |
|---|---|---|
| Create and secure your account, verify your email, let you sign in and reset your password | Account information | Performing our contract with you |
| Provide the app: store your business profile, customers, products and records; generate documents and PDFs; calculate totals and reports | Business profile, customer data, business records | Performing our contract with you |
| Let you invite and manage team members and enforce their roles and permissions | Team information, account information | Performing our contract with you; for invitees, our legitimate interest in letting the business owner invite them |
| Provide Recido AI when you choose to use it | AI conversations, and the account, business and customer details relevant to your request | Performing our contract with you |
| Send push notifications | Device and notification information | Your consent, given through your phone's notification permission |
| Send service emails (verification codes, password resets, password-changed alerts, team invitations) | Email address, name | Performing our contract with you |
| Diagnose crashes and errors, keep the service secure, and prevent abuse | Diagnostics, device information, user ID, server logs | Our legitimate interest in running a reliable and secure service |
| Answer your questions and support requests | Correspondence and any account details needed | Our legitimate interest in helping you; or performing our contract with you |
| Run the waitlist and tell you when Recido is available | Waitlist details | Your consent, which you can withdraw at any time |
| Measure website traffic (only if you accept analytics cookies) | Website usage data collected by Google Analytics | Your consent |
| Comply with the law, respond to lawful requests, and establish or defend legal claims | Any information relevant to the matter | Legal obligation; our legitimate interests |
We do not use your information for advertising, we do not build advertising profiles, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Where we rely on legitimate interests, you can object (section 14). Where we rely on consent, you can withdraw it at any time; this does not affect processing that happened before you withdrew it.
6Your customers' data
When you enter information about your customers into Recido — or your team does — your business is the controller of that information and Zintle Technology acts as your processor. That means:
- We process your customers' information only to provide Recido to you, on your instructions as expressed through your use of the app, and as described in this policy.
- We do not use your customers' information for our own purposes, and we do not contact your customers, except to deliver what you ask the app to do.
- We use the service providers listed in section 8 to help us; where they handle customer information, they do so as our sub-processors.
- If one of your customers contacts us about their information, we will refer them to you, and we will help you respond where we reasonably can.
As the controller, you are responsible for:
- having a lawful basis to collect and keep your customers' information, and telling them how you use it;
- only entering information you need; and
- responding to your customers' requests to see, correct or delete their information. You can edit or delete customer records in the app at any time.
Customer information can appear in places outside the database: on the PDFs you generate and share, in push notifications (section 13), and in requests to Recido AI if you ask it about a customer (section 7).
7Recido AI
Recido AI is an optional assistant that can answer questions about your business and help draft documents. We do not run our own AI models. When you use Recido AI, we send your request through OpenRouter, a service that routes it to an AI model provider — currently Anthropic for chat and OpenAI for turning voice notes into text.
A request can include:
- the text of your message and earlier messages in the same conversation;
- any image or voice note you send;
- your name, email address and business name, so the assistant can address you and your business correctly; and
- details of your customers, products or documents when your question is about them — for example, if you ask "how much does Jane Smith owe me?", Jane Smith's name and the related document details are sent.
These providers process requests to generate a response. They may keep request data for a limited time under their own terms — for example, for abuse and safety monitoring. Their privacy policies are linked in section 8.
Your Recido AI conversations are stored in your account so you can return to them. They are deleted when you delete them or delete your account.
9International transfers
Zintle Technology is based in the United States. Our servers and service providers may be located in the United States, the European Union and other countries. This means your information may be processed outside the country where you live, including in countries whose data-protection laws differ from yours.
Where the law requires it — for example, when information from the EEA or UK is transferred to a country without an adequacy decision — we rely on appropriate safeguards such as the European Commission's standard contractual clauses (and the UK addendum to them) offered by our providers. You can ask us for more information about these safeguards at privacy@recido.app.
10How long we keep information
| Information | How long we keep it |
|---|---|
| Account, business profile, customers, products, documents, sales, team memberships, AI chats and stored files | For as long as your account is active, until you delete them or your account. |
| Individual records you delete (for example, a customer or an invoice) | Removed from view immediately and permanently purged 30 days after deletion. The delay lets us recover accidental deletions. |
| Database backups | Backups roll off automatically within 30 days, so deleted information disappears from backups within that time. |
| Push tokens and device information | Until you sign out of the device, or removed automatically after 90 days without activity. |
| Crash and error reports (Sentry) | Up to 90 days, under Sentry's retention settings. |
| Email verification and password-reset codes | Until they are used or expire. |
| Waitlist entries | Until you ask us to remove you, or until we no longer need them to tell you about Recido's availability. |
| Support correspondence | For as long as needed to deal with your request and any follow-up. |
10.1 Deleting your account
You can delete your account in the app (Settings → Delete account) or through our web deletion page. When you do, we permanently erase from our live database and file storage:
- your account;
- every business you own, together with its customers, products, documents, sales, AI chats, team memberships and stored files (logos, product images, PDFs, AI images and voice notes); and
- your push tokens.
Remaining copies in database backups roll off within 30 days. If you are a team member of a business someone else owns, deleting your account removes your membership; the records you created in that business belong to that business and stay under its owner's control.
We may keep specific information for longer where the law requires us to, or where we need it to establish or defend a legal claim. We keep only what is needed for that purpose.
11How we protect information
We use technical and organisational measures appropriate to the information we hold, including:
- Encryption in transit. The app, website and API communicate over HTTPS (TLS).
- Hashed secrets. Passwords are hashed with bcrypt and in-app business passcodes are stored as hashes; we cannot read either.
- Access controls. Every request to our API is authenticated, and access to a business's data is checked against the user's membership, role and permissions in that business.
- Restricted internal access. Only authorised people who need it to operate, support or secure the service can access production systems.
- Device protection. Login tokens are kept in your phone's encrypted secure storage, and you can lock the app with Face ID, fingerprint or your device PIN.
- Minimised diagnostics. Crash reports carry a user ID rather than your email address, and session replays mask all text and images.
No system is completely secure. Please use a strong, unique password, keep your device locked, and remove team members who no longer need access.
11.1 If something goes wrong
If a security incident affects your personal information, we will notify you and the relevant regulators as required by law.
To report a security vulnerability, email security@recido.app. See our Security page for details.
12Age requirement
Recido is a tool for running a business. You must be at least 18 years old to create an account or use the app. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact privacy@recido.app and we will delete it.
13Emails and notifications
13.1 Emails
We send only service emails: email verification codes, password resets, alerts that your password was changed, and team invitations. We do not send marketing emails. If we ever add marketing emails, they will be opt-in, and every one will include an unsubscribe link.
If you joined the waitlist, we will email you about Recido's availability. You can ask to be removed at any time.
13.2 Push notifications
If you allow notifications, we send notifications about activity in your business. Notification text can include customer names and amounts, and may be visible on your lock screen. You can turn notifications off, or hide their content on the lock screen, in your phone's settings.
14Your rights and choices
Depending on where you live, you may have the right to:
- Access — ask for a copy of the personal information we hold about you.
- Correction — fix information that is wrong or incomplete. You can edit most of it yourself in the app.
- Deletion — delete your account and data (section 10.1).
- Portability / export — receive your data in a portable format (section 14.2).
- Objection and restriction — object to processing based on legitimate interests, or ask us to limit how we use your information.
- Withdraw consent — for example, turn off notifications or leave the waitlist.
- Complain — to a data-protection supervisory authority (section 15).
14.1 How to make a request
Many of these you can do yourself in the app. For anything else, email privacy@recido.app from the email address on your account. We may need to verify your identity before acting on a request. We will respond within 30 days (45 days for requests under California law), and will tell you if we need more time where the law allows it. We do not charge for requests unless they are clearly unfounded or excessive.
14.2 Exporting your data
- Export my data in the app's settings gives you a JSON file containing your account and business data.
- Each invoice, quotation and receipt can be downloaded or shared as a PDF.
If your request concerns information about you that a Recido customer holds as their customer (section 6), please contact that business directly; we will help them respond.
15Additional information for the EEA and UK
If the EU General Data Protection Regulation (GDPR) or the UK GDPR applies, Zintle Technology is the controller of your account and business information and the processor of the customer information you enter. Our legal bases are listed in section 5, and transfers are described in section 9.
You have the right to lodge a complaint with the data-protection supervisory authority where you live or work, or where you believe a breach of your rights occurred. In the UK this is the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to address your concern first at privacy@recido.app.
16Additional information for California residents
This section applies to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA), applies to our handling of your personal information.
16.1 Categories of personal information
| Category | Examples | Disclosed to |
|---|---|---|
| Identifiers | Name, email address, phone number, Recido user ID, push token, IP address | Service providers in section 8 |
| Customer records (Cal. Civ. Code § 1798.80(e)) | Name, address, phone number, tax ID | Service providers in section 8 |
| Commercial information | Invoices, quotations, receipts, sales and payments you record | Service providers in section 8 |
| Internet or other electronic network activity | Crash diagnostics, masked session replays, website usage (with consent) | Sentry; Google Analytics (website, with consent) |
| Audio and visual information | Voice notes and images you send to Recido AI; logos and product images | Hosting providers; OpenRouter and model providers (AI only) |
| Professional or employment-related information | Your business details, and your role in a business | Service providers in section 8 |
| Sensitive personal information | Account login (email and password) | Used only to sign you in and secure your account |
Sources, purposes and retention are described in sections 3, 5 and 10. We do not use sensitive personal information to infer characteristics about you.
16.2 No sale or sharing
We do not sell personal information and we do not "share" it for cross-context behavioural advertising, as those terms are defined in the CCPA, and we have not done so in the past 12 months. Recido is not intended for anyone under 18 (section 12).
16.3 Your rights
You have the right to know what personal information we collect, use and disclose; to access it; to delete it; to correct it; and not to be discriminated against for exercising these rights. To make a request, email privacy@recido.app. You may use an authorised agent; we may ask the agent for proof of authorisation and ask you to verify your identity directly with us.
17Other jurisdictions
Other privacy laws may also give you rights over your personal information — for example, South Africa's Protection of Personal Information Act (POPIA), Nigeria's Data Protection Act 2023 (NDPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Where a law like these applies to our processing of your information, you can exercise the rights it gives you by contacting privacy@recido.app, and you may complain to the relevant regulator, such as South Africa's Information Regulator, the Nigeria Data Protection Commission, or the Office of the Privacy Commissioner of Canada.
19Changes to this policy
We will update this policy when the way Recido handles personal information changes. We will change the "Last Updated" date above and, for material changes, tell you in the app or by email before the change takes effect.
20Contact us
- Privacy questions and requests: privacy@recido.app
- General support: support@recido.app
- Security reports: security@recido.app
- Post: Zintle Technology, 7420 Unity Ave N #211, Brooklyn Park, MN 55443, USA
- Website: recido.app