Privacy Policy

RecallAlert

This policy describes exactly what RecallAlert stores. It is written from the application's database schema rather than from a template.

What is collected

Data	Why	When
Email address	Identifies your account, lets you sign in and recover access, and delivers optional product tips if you explicitly enable them	At sign-up; optional tips only after opt-in
Password hash	Authentication. Hashed with bcrypt; the password itself is never stored or logged	At sign-up
Alert preferences	Selected recall categories, nationwide/ZIP/state coverage, alert level, daily brief, quiet hours, and device time-zone offset	When you save alert settings
Email consent and delivery state	Remembers whether optional tips are enabled and prevents a sequence step from being sent twice	When you opt in or out and when a sequence step is attempted
Saved product details	Checks your watchlist against recalls. May include a name, brand, model, serial or lot number, barcode, VIN, and notes that you choose to enter	When you save a product while signed in
Recall review state	Remembers alerts you save, review, or dismiss	When you take one of those actions
Community messages	Shown to other signed-in members	When you post
Optional rating and coarse area	Context on a community message	Only if you provide it
Product feedback and votes	Shows requested improvements and ranks the ideas members support most	When you post, vote, or report on the feedback board
Aggregate app analytics	Daily counts of approved feature events by platform, used to improve RecallAlert. No account, device, session, location, search, scan, product, or free-text value is included	Only if you turn on anonymous app analytics
Device notification token	Delivers recall alerts to your device	Only if you allow notifications
Subscription status	Unlocks Premium across devices and restores purchases	When you subscribe or restore through Apple or Google
Reports and blocks you create	Community safety and moderation	When you report or block

What is not collected

RecallAlert does not collect precise location or store visits. If you opt into nearby-store alerts, Apple's Location Services and Maps service process location to find nearby food markets and monitor stores you select. The RecallAlert API does not accept GPS coordinates, MapKit place identifiers, or store-visit records.
No advertising or tracking identifiers, and no third-party analytics. Optional first-party analytics are aggregated immediately and cannot reconstruct a person's activity trail.
No contacts, photos, or microphone access. Camera access is requested only while you open the barcode scanner; images are processed on-device and are not recorded or uploaded.
No card or bank details. Apple or Google processes payment. RecallAlert receives only product, transaction, renewal, and entitlement status needed to provide Premium.

Recall data

Recall information comes from the U.S. Food and Drug Administration, the Consumer Product Safety Commission, and the National Highway Traffic Safety Administration. Routine recall-feed requests are made by our server and contain no information about you. Searches, barcode lookups, and vehicle lookups send the query needed to answer the request. A VIN lookup sends the VIN to the RecallAlert API and NHTSA; it is not retained as search history. A VIN saved to a signed-in watchlist remains stored until you remove it or delete the account.

Who else processes your data

Render — application hosting and the database.
Google Firebase Cloud Messaging — delivers push notifications. Receives your device token and the alert text, which contains only public recall information.
Apple Maps and Location Services — find nearby grocery stores and monitor stores you select. RecallAlert does not receive the coordinates or branch visits.
The configured email delivery provider — receives your email address and message content when you request password recovery or explicitly enable optional email tips.
RevenueCat — validates Apple and Google purchases and keeps Premium entitlement status synchronized across supported devices. It receives the RecallAlert account identifier and store transaction/subscription data, not your password or watchlist.

Your data is not sold, rented, or shared for advertising.

Your controls

Delete your account from Account settings in the app. This permanently removes your account, your community messages, product feedback, votes, device tokens, and your reports and blocks.
Turn off notifications in your device settings at any time.
Turn anonymous analytics on or off from Profile & safety. It is off until you choose to enable it.
Turn optional email tips on or off from Profile & safety, or use the unsubscribe control included in every sequence email. Opening a preference link alone does not change the setting.
Block members whose messages you do not want to see, and unblock them later from Account settings.
Request a copy of your data by contacting us.

Retention

Account data is kept until you delete your account. Deletion is immediate and cascades to everything linked to the account. Moderation reports are retained while the report is open so that safety decisions remain reviewable. Password-reset token digests expire after 30 minutes and are removed after use. Anonymous daily analytics aggregates are automatically removed after 13 months.

Lifecycle email delivery records contain step names, status, attempt counts, and timestamps. They do not duplicate message bodies or addresses and are removed when the account is deleted.

Security

Traffic is served over HTTPS. Passwords are hashed with bcrypt. Sessions use short-lived signed tokens. Device tokens are never returned by the API and are never written to logs in full.

Children

RecallAlert is not directed at children under 13 and we do not knowingly collect their information. Contact us if you believe a child has created an account and we will remove it.

Contact

J&A Appworks LLC
jacobkhalil@gmail.com