Privacy Policy

r3kal (the website at r3kal.com and the r3kal iPhone app) is run by an individual based in Texas, USA ("we", "us"). This policy explains what information r3kal collects, how it's used, and the choices you have. If you have questions, email [email protected].

Your account

• Your email address and password. We never store or log your password; our sign-in provider keeps only a protected (hashed) form of it.
• Your plan (Free or Premium), when you created your account, and when you confirmed your email.
• When you sign in, and for each signed-in session the IP address and device type. Our sign-in provider records these to keep your account secure.

What you save

• The video links you save, and when you saved them.
• Public details about each video that we fetch from its platform, where the platform makes them available: title, creator name, caption, platform, and a copy of the thumbnail image.
• Your notes, and the categories you create and assign.
• A record of when you saved or replaced each video (the time only, not which video). We use it to apply the limit on how many videos you can save in any 24-hour period.

Share pages

• When you create a share link, we store the videos you picked and their details. We also store separate copies of their thumbnails, so the share page keeps working even if you later edit your library.

Technical information

• When you visit r3kal, your IP address, device and browser type, and the pages you request pass through our network provider and server. We use this to deliver the site and protect it from abuse. Any logs we keep are short-term and used only for security and fixing problems.

What we don't collect

• We don't access your TikTok, YouTube, Rumble or Facebook accounts. We don't see your watch history on those platforms either.
• We don't collect your location, contacts or photos, and we don't track you across other apps or websites.

The website uses only the cookies needed to keep you signed in. The iPhone app keeps your sign-in session on your device for the same reason. We don't use advertising or analytics cookies, so there's nothing to opt out of.

When you save a link, our server requests the video's public preview information: the official embed (oEmbed) services of YouTube, TikTok and Rumble, and the preview tags on the video's public web page. It also downloads the thumbnail image. The platform sees a request from our server, not from you. If a platform doesn't make a thumbnail or details available to us, we show a placeholder instead.

When we use YouTube's services, the Google Privacy Policy also applies. When you tap a video to watch it, you go to the platform, and that platform's own privacy policy applies.

• To run r3kal: save, show, search and organize your videos, and display the share pages you create.
• To apply plan limits and daily limits.
• To send account emails, such as confirming your email address.
• To keep r3kal secure, prevent abuse, and fix problems.
• To answer you when you contact us.

We don't sell or rent your information. We don't share it for advertising, and we don't use it to build profiles about you.

We use a few service providers. They handle data only so they can provide their service to us:

• Supabase runs our database, sign-in system and file storage, where your library and the thumbnails are kept. It also sends account emails.
• Cloudflare provides our network connection and security. Every visit to r3kal.com passes through it.
• Apple provides the App Store. Once Premium launches, it will also handle in-app payments. We never receive your payment card details.

We may also share information if the law requires it, or to protect the safety or rights of our users, the public or r3kal. If r3kal is ever transferred to a new owner, your information may move with it. We'll tell you first, and this policy will continue to protect it.

Your library is private to your account. Thumbnail images are stored at hard-to-guess web addresses that aren't listed anywhere, so only someone who has the exact address can open one. When you create a share page, anyone who has its link can see it. This includes the title you gave the share and the titles, creators, thumbnails and links of the videos you picked. We ask search engines not to list share pages, but we can't control who the link is passed on to. You can delete a share page at any time, and the link stops working right away.

• We keep your information while your account exists.
• When you delete a video, we delete its details and thumbnail from your library. A share page you made earlier keeps its own copy until you delete that share page.
• When you delete a share page, we delete it and its thumbnail copies.
• When you delete your account in the website or app, we delete your account and everything in it right away. If you ask us by email instead, we do it within 30 days. Copies in our providers' backups are overwritten in the normal course, usually within a few weeks.

You can delete your account yourself at any time, in the website or the iPhone app: go to Account, then Delete account. This immediately and permanently deletes your account, your saved videos, your categories, your share pages (their links stop working) and your thumbnails. It can't be undone.

If you can't sign in, email [email protected] from the address you signed up with and write "Delete my account" in the subject line. We'll delete your account and all of its data within 30 days and confirm once it's done. You can also delete individual videos and share pages yourself at any time in the website or app.

You can ask us to:

• give you a copy of the information we hold about you;
• correct information that's wrong;
• delete your information.

Email [email protected] to make a request. We'll answer within 30 days, and we won't treat you differently for making a request. Depending on where you live (for example California, other US states, the UK or the EU), the law may give you extra rights. We honor these requests for everyone. As noted above, we don't sell your personal information or share it for targeted advertising.

r3kal uses encrypted connections (HTTPS) and hashed passwords. Database rules let each account see and change only its own data. No system is perfectly secure, though. If we learn of a breach that affects you, we'll tell you as the law requires.

r3kal isn't meant for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has created an account, email [email protected]. We'll delete it.

r3kal is run from the United States. Our providers may process data in the United States and other countries. By using r3kal, you understand that your information may be processed outside the country where you live.

We'll update this policy when r3kal changes, for example when Premium payments launch. If a change is significant, we'll let you know before it takes effect, by email or with a notice in r3kal. The date at the top shows the latest version. Also see our Terms of Service.