Legal
Privacy Policy
Last updated: 28 May, 2026
1. Who runs Rekky
Rekky is operated by Rekky Pty Ltd, a company registered in Australia. When this policy says “we,” “us,” or “Rekky,” it refers to Rekky Pty Ltd. You can reach us anytime at contact@rekky.io.
2. What we collect
When you use Rekky, we collect: your username and email address; profile information you choose to add, such as your name and avatar; the books you post about, including reviews, ratings, photos, comments, likes, and wishlist saves; who you follow and who follows you; and basic usage data such as device type, app version, and crash reports. If you turn on push notifications, we also store the push token your device gives us so that Apple can deliver notifications to you. We sign you in using one-time passcodes sent to your email, so we never see or store a password for your account.
3. How we use your data
We use your data to run the app: to authenticate you, store and display the content you post, deliver notifications you've opted into, communicate with you about your account, prevent abuse, and improve the product. We do not use your data to train AI models or to build advertising profiles.
4. Push notifications
If you opt in to push notifications, Rekky stores the push token Apple assigns to your device so we can send you notifications about likes, comments, follows, and other in-app activity. You can turn notifications off at any time in your phone's Settings, and you can ask us to delete your stored token by contacting us.
5. Data sharing
We do not sell your data and we do not share it with advertisers. We use a small number of trusted service providers to operate Rekky — currently Supabase (database, authentication, storage, and edge functions), Apple (push notifications and App Store), and Vercel (the marketing website). These providers process data on our behalf under their own privacy and confidentiality obligations, and may store data outside your country.
6. Children and minimum age
Rekky is intended for users aged 13 and over. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has signed up, please email us and we'll remove the account.
7. International users
If you use Rekky, this policy applies wherever you are. If you're in the UK or EU, you have rights under the UK GDPR and EU GDPR — including the right to access, correct, or delete your data, and to lodge a complaint with your local data protection authority. If you're in California, you have similar rights under the CCPA. Our legal basis for processing your data is the performance of our contract with you (running the app you signed up for) and our legitimate interests in operating and improving Rekky.
8. Your rights
You can request a copy of your data, ask us to correct it, or delete your account at any time. You can delete your account directly inside the app under Account settings, or by emailing contact@rekky.io. Account deletion is permanent and removes your posts, comments, likes, wishlist, and profile from Rekky.
9. Security
We use reasonable technical and organisational measures to protect your information, including encryption in transit, secure authentication, and row-level security on our database. No method of data transmission or storage is ever 100% secure, but we work to keep Rekky's data protected.
10. The Rekky website
This website (rekky.io) is hosted on Vercel. We don't use third-party analytics, advertising trackers, or cookies on the marketing site. Vercel may collect basic request logs (such as IP address and user-agent) for security and performance, in line with its own privacy practices.
11. Changes to this policy
If we make material changes to this Privacy Policy, we'll notify you in the app and update the date at the top of this page. Continued use of Rekky after changes take effect means you accept the updated policy.