Privacy Policy

The short version

RapidRecall exists to tell you when something you own is recalled. To do that it stores what you tell it you own. That data is yours: we don’t sell it, we don’t share it with advertisers, and you can export or permanently delete all of it from Settings at any time, without asking us.

What we collect

• Account details. Your email address, your name if you provide one, and your sign-in method. Authentication is handled by Supabase.
• Purchase records. The products you add — names, brands, model numbers, UPCs, VINs, purchase dates and merchants — however they arrive: typed in, scanned from a receipt, forwarded by email, or imported from your inbox.
• Forwarded email receipts. Mail sent to your private forwarding address is parsed for order details. The extracted line items are stored; the raw message is retained so you can verify what was read.
• Gmail import, if you choose it. The import asks Google for read-only access, searches for order confirmations, and extracts product lines from them. We store the extracted purchases and each message’s ID (so the same receipt is never imported twice). We do not store your Gmail credentials, and the access token is not retained after the import finishes.
• Billing. Payments run entirely through Stripe. We never see or store card numbers — only your subscription status and plan.

What we do with it

One thing: cross-reference your items against public recall databases published by CPSC, NHTSA, FDA and USDA, and alert you on a hit. Product names may be sent to an AI model provider (OpenAI) to compute text embeddings and to judge whether an ambiguous product matches a recall — those requests carry product names only, never your identity or contact details.

Who else touches the data

Infrastructure only, each doing its one job: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Postmark or Resend (sending and receiving email), Google (only if you run the Gmail import), and OpenAI (product-name matching, as above). We have no analytics trackers and no advertising partners.

Household sharing

If you join a household, its members see the shared vault: tracked items and recall alerts. They do not see your emails, your imports, or your billing. You can leave a household at any time from Settings.

Your rights

• Export. Settings → Danger Zone → “Export my data” downloads everything we hold about you as a single JSON file.
• Delete. Settings → Danger Zone → “Delete my account” permanently erases your account, your purchase history, your matches and your activity — immediately and irreversibly. No email required, no retention period.

Contact

Questions about this policy: privacy@rapid-recall.io. If we change this policy, the date above changes with it.