Privacy Policy

1. Data Controller

The Relo application is operated by an individual developer ("we"). For any privacy questions or to exercise your rights, contact us via in-app Settings → Help & Feedback.

2. Your Data Stays on Your Device by Default

• The contacts, trait tags, timeline entries (including photo and audio attachments), wish pool, reminders and app preferences you create are stored on your device by default and are not uploaded to our servers.
• Data is only sent to the services listed below when you turn on cloud backup (Plus), use business-card scanning, contact support, or purchase a subscription.
• Reminder notifications (birthdays, anniversaries, interaction reminders) are scheduled locally on your device; their content is not sent to a server.

3. Data We Process on Our Servers

• Account data: the account identifier, name and email address provided by Clerk when you sign in with Google, Apple or LINE.
• Cloud backup (Plus, optional): your app data is encrypted before upload and stored on the Supabase servers Relo uses.
• Subscription and entitlements: plan type, expiry date and gift-code redemptions, used to determine which features you can use. We never receive or store card or bank details.
• Push tokens: your device push token and whether you opted in to product news and promotions.
• Support data: the content of support tickets you send from the app, replies, and attached screenshots.
• Web deletion requests: the email address and note you submit on our account-deletion page.

4. Data We Do NOT Collect

• Analytics and crash reporting: Relo does not use any analytics or crash-reporting SDKs.
• Biometric data: Face ID / Touch ID / fingerprint checks run entirely on your device. Relo does not read or store any biometric data.
• Device contacts: Relo does not read your phone's built-in address book.
• Location data: We do not track your location.
• Advertising identifiers: We do not collect IDFA, GAID or any advertising identifiers, and we do not show ads.

5. Security & Cloud Backup

• All data sent between the app and our servers is encrypted with TLS.
• Cloud backups are encrypted before upload and stored encrypted (encrypted in transit and at rest). The encryption key is derived from your account, so this is not end-to-end encryption: Relo is technically able to access backup contents.
• Access to backup data is restricted to the account owner and, only when needed for support or legal reasons, to authorized staff.
• Our database uses Row Level Security (RLS) so that each user of the app can only access their own data.

6. Business-Card Scanning (Anthropic)

When you use business-card scanning and agree to the notice shown in the app, the card photo is sent to the third-party AI service Anthropic to extract text. It is used only to fill in contact fields and is not stored on Relo's servers. Under Anthropic's commercial terms, content sent through its API is not used to train its models by default; Anthropic's own policies govern how it handles the data. You can turn this feature off at any time in Settings → Privacy. Anthropic Privacy Policy: anthropic.com/legal/privacy

7. QR Code Sharing

The app lets you share contact information via encrypted QR codes. A QR code contains only the fields you choose to share, and scanning and decoding happen on the devices — no data passes through our servers. Share QR codes only with people you trust.

8. Push Notifications

• Reminder notifications (birthdays, anniversaries, interaction reminders) are scheduled locally on your device.
• Product news and promotions are only sent if you explicitly opt in, and you can turn them off at any time in the app settings.
• Remote notifications are delivered through the Expo Push Notification Service. Push tokens are stored in Supabase, used only to deliver notifications, and deleted when you delete your account.

9. Payments & Subscriptions

• All subscription payments are processed by Apple App Store (iOS) or Google Play (Android). Relo never sees or stores your card or payment details.
• Subscription status and purchase history are managed by RevenueCat and synced to Supabase to unlock features.
• For plans and prices, please refer to the App Store / Google Play listing and the prices shown in the app.

10. Third-Party Services

• Clerk (sign-in) — clerk.com/legal/privacy
• Google, Apple, LINE (only if you choose to sign in with them)
• Supabase (backend and storage) — supabase.com/privacy
• Expo Push Notification Service (push delivery) — expo.dev/privacy
• RevenueCat (subscription management) — revenuecat.com/privacy
• Apple App Store / Google Play (distribution, subscriptions and payment)
• Anthropic (business-card scanning, only when you use the feature and have agreed to it) — anthropic.com/legal/privacy
• Each service has its own privacy policy, which we recommend reviewing. We do not sell your personal data.

11. Your Rights

• Export: export your data as JSON or CSV in the app under Settings → Privacy.
• Delete in the app: go to Settings → Privacy → Delete Account. Your account and the related data on our servers are deleted immediately.
• Delete on the web: if you can't use the app, submit a request at relo.app/account-deletion. We process requests within 30 days.
• Access and correction: edit your data directly in the app, or ask through in-app support for a copy of the personal data we hold about you.
• Withdraw consent: turn off product-news notifications or business-card scanning at any time.
• Users covered by Taiwan's Personal Data Protection Act or the EU GDPR can submit requests via in-app Settings → Help & Feedback; we will respond within 30 days.

12. Data Retention

• Account data, cloud backups, entitlements, push tokens and support data are kept until you delete your account; deletion requests are completed within 30 days.
• Deleting your account does not cancel your subscription — cancel it in the App Store or Google Play first.
• Payment and purchase records are held by Apple / Google under their own policies and cannot be deleted by Relo. Apart from data we are required by law to retain, Relo keeps none of your data.
• Data stored on your device is under your control and is removed when you uninstall the app.

13. Children's Privacy

The Service is not directed to children under 13 (or a higher age as required by applicable local law). If we learn we have inadvertently collected personal data from a minor, we will take steps to delete it. If you are a parent or guardian and believe your child has used our Service, please contact us.

14. International Data Transfers

The service providers we use (such as Supabase, Clerk, Expo, RevenueCat and Anthropic) may process data in the United States or other countries outside where you live. When you use features that require a server, the related data may be transferred to and processed in those regions.

15. Policy Changes

We may update this Privacy Policy from time to time. For material changes (such as new types of data or new purposes), we will let you know through an in-app notice. Minor adjustments (such as wording corrections) will be made directly on this page with a revised "Last Updated" date.

16. Contact Us

For privacy questions or data requests, contact us via in-app Settings → Help & Feedback. Account deletion: in-app Settings → Privacy → Delete account, or the account deletion page on this website (/account-deletion).