Privacy Policy

Who is responsible

Erald Beqiri, Tirana, Albania ("we", "us") operates RecPIC and is the controller of your personal data.

Privacy contact: recpicsupport@gmail.com. Data protection contact: recpicsupport@gmail.com.

Data we collect

• Account data: your email address, a display name, and your password (stored only as a salted hash by our authentication provider; we can never read it). If you use Google Sign-In we receive your Google account email and name.
• Age check: only the result of your age declaration (adult or under 18) and the date you made it. We do not store your date of birth.
• Profile: the bio and profile picture you choose to add.
• Content you create: posts (photos, captions, tags), comments, reactions, likes, follows, blocks, reports you file, and saved collections. Profiles and posts are public to other users.
• Technical data: like any online service, our hosting provider and the content sources you use receive your IP address and basic request details when the app connects. We do not build profiles from this data.

Data that stays on your device

Boards, sticker packs, drafts, photo edits, settings and cached images are stored only on your device. Your sign-in session is kept in your device's secure storage. Clearing the app's data or uninstalling it removes all of this.

The camera and photo library are used only when you choose to take or pick a picture. A picture leaves your device only if you post it.

What we do not do

• No advertising, no ad networks and no advertising identifier.
• No analytics, no tracking or crash-reporting services that send usage data about you.
• No location tracking, no contact-list access, no selling of personal data.

Services that process data for us

• Supabase – hosting, authentication, database and file storage [region: add your Supabase region].
• Google – Google Sign-In, if you choose it.
• GIPHY and Imgflip – when you search for GIFs and meme templates, your search words and IP address are sent to them. You can switch either off in Settings → Privacy & data.
• Google Play – payments and subscription management, if paid features are offered.

Each acts under its own privacy policy. We never sell your data.

Sign in with Google

If you choose "Continue with Google", Google shares your name, email address and profile picture with RecPIC through Google Sign-In. We use them only to create and secure your account. Our authentication provider stores them with your account; we show the display name you choose (you can change it) and we do not display your Google picture.

We do not access your Google contacts, Drive, Gmail, calendar or any other Google data, we do not use Google user data for advertising, and we do not sell it or share it except with the services that run RecPIC for us. RecPIC's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Why we use your data (legal bases)

• To provide the service you asked for (contract).
• To keep the service safe, prevent abuse and handle reports (legitimate interests).
• To confirm you are old enough to use RecPIC (legal obligation / legitimate interests).
• Optional third-party content sources (your consent, which you can withdraw at any time in Settings).

Children and teenagers

RecPIC is not for children under 13. If we learn that an account belongs to a child under 13 we delete it.

People aged 13–17 get extra protection: their profile is not shown in people search and GIF search is limited to the most family-friendly rating. If local law requires a parent's permission for your age, you may only use RecPIC with that permission. Parents can contact recpicsupport@gmail.com to see or delete a child's data.

How long we keep data

We store your data only while your account is active. When you delete your account (Settings → Privacy & data → Delete my account) your profile, posts, comments, reactions, follows, collections and uploaded files are deleted right away. We do not keep separate backups of user data, so nothing is retained after deletion.

Your rights

Depending on where you live you can: see your data, correct it, delete it, take a copy of it, object to or restrict how it is used, and withdraw consent. You can edit your profile and delete your account in the app. For anything else, write to recpicsupport@gmail.com; we reply within one month.

You may also complain to your local data-protection authority.

Security

Connections use HTTPS. Access to data is restricted by row-level security rules in our database, sign-in tokens are stored in your device's secure storage, and passwords are hashed. No system is perfectly secure; tell us at once if you notice a problem.

International transfers

Our providers may process data in countries outside your own. Where required we rely on safeguards such as standard contractual clauses. [Describe transfers that apply to you.]

Changes

If we change this policy in a meaningful way we will tell you in the app before it takes effect.

Contact

Erald Beqiri, Tirana, Albania
recpicsupport@gmail.com