Privacy Policy

Last updated: May 2026

Recap is a desktop task tracker built by an individual developer. This policy explains what data the app collects, why, and what you can do about it. It is written to be read, not to be lawyered around.

What we collect

Account data

When you sign in, we store your email address in our database. That's the only piece of personal information we hold on our servers. We use Supabase as our database and authentication provider.

Task data

Every task you create is stored in our database, associated with your account. Each task record contains:

  • The task text you typed
  • Whether it was completed (and when)
  • The date it was created for
  • Whether you marked it as important

This data is the product. It is never used for advertising, never sold, and never shared with third parties except the infrastructure providers listed below.

Subscription data

If you upgrade to Pro, payment is processed by Stripe. Recap stores only your Stripe customer ID — we never see or store your card number. Stripe's privacy policy applies to payment processing.

Integration webhooks

If you configure a Slack, Teams, or Zapier integration, the webhook URL you enter is stored locally on your device only in the app's settings file. It is never sent to Recap's servers. Webhook requests are made directly from your device to the integration provider when you trigger them.

Analytics

The Recap website uses Google Tag Manager and Google Analytics to understand how visitors find and use the site. This may collect your IP address, browser type, and pages visited. You can opt out via Google's opt-out tool. The desktop app does not include analytics.

How we use your data

  • Email: To send you a magic link when you sign in. We do not send marketing emails unless you explicitly opt in to a future newsletter.
  • Task data: To display your tasks across devices and generate your standup summary.
  • Stripe customer ID: To manage your subscription and billing portal access.

Who can see your data

Your task data is private by default. We use Supabase Row-Level Security — every database query is scoped to your account. No Recap employee or the app itself can read another user's tasks.

We use the following infrastructure providers who may process your data as part of providing their service:

  • Supabase — database and authentication (hosted on AWS)
  • Stripe — payment processing
  • Google — website analytics (Tag Manager / Analytics)

We do not sell data. We do not share data with advertisers. We do not run data brokers.

Data retention

Free accounts retain the last 14 days of task history — older tasks are automatically deleted by the rolling window. Pro accounts retain all task data indefinitely while the subscription is active.

If you delete your account, all task data and your email address are deleted from the database within 30 days. Stripe may retain billing records for longer as required by law.

Your rights

  • Access: You can export your tasks as CSV from the Pro settings page.
  • Deletion: Email [email protected] to request full account deletion.
  • Correction: You can edit any task directly in the app.
  • Portability: CSV export is available to Pro users. Free users can request an export by email.

If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.

Cookies

The Recap website uses cookies set by Google Analytics. The desktop app does not use cookies. There is no cookie banner because we do not use any cookies for advertising or tracking beyond basic analytics.

Children

Recap is not intended for children under 13. We do not knowingly collect data from anyone under 13.

Changes to this policy

If we make material changes, we will update the date at the top of this page and note it in the app's changelog. Continued use after a change means you accept the updated policy.

Contact

Questions about this policy: [email protected]