Privacy Policy
Last updated September 29, 2026
The short version
- You can use r3cent without an account. Guest data stays on your device.
- With an account, your dashboard is stored so it syncs between your devices. Only you can read it.
- AI features are off until you allow them. When they're on, habit names and stats are sent to write each answer, and nothing that identifies you goes with them.
- No ads, no selling your data, and no tracking you across apps or websites.
- Export or delete everything, anytime, from inside the app.
Who we are
r3cent is a daily habit tracker at r3cent.com, made by Luke Wade, an independent developer. "We" in this policy means r3cent. Questions about privacy go to support@r3cent.com.
What we collect, and why
If you use r3cent as a guest
Your habits, check-ins, trackers, workouts and settings are stored in your browser's storage on your device. They aren't sent to us, except when you use an AI feature (below).
If you create an account
- How you sign in: your email address, your phone number if you sign in with one, or the identifier Apple gives us for Sign in with Apple. With Apple you can hide your email, and Apple then gives us a private relay address instead.
- Your dashboard: your habits, check-ins, trackers and workouts, so they sync across your devices.
- A password, if you add one: your device turns it into a scrambled proof before sending it, and we store only a salted hash of that proof. We never see or store your password itself.
- Sessions: when you're signed in, a secure cookie keeps you signed in. We store a hash of it, when it was created and last used, and when it expires.
- Sign in with Apple: we keep the token Apple provides so we can revoke r3cent's access when you delete your account.
We use this to run your account and nothing else.
Sign-in codes
When you sign in with a code, we send a 6-digit code to your email (or your phone). We store only a hash of the code, and it expires after 10 minutes.
Abuse prevention
To stop spam and misuse, we count requests per email address, phone number, account and IP address, such as how many codes were sent in the last hour. These counters are deleted within 2 days.
Health-related information
The names of your habits can reveal things about your health, such as a supplement or medication you track. We treat all of it as private: it's used only to run r3cent for you. It's never used for advertising, never sold, and never shared except with the service providers below, who process it on our behalf.
AI features
r3cent can sort new habits, write a weekly summary, and give coaching and exercise form tips. These features are off until you allow them, and you can turn them off anytime in Settings.
- What's sent: the names of your habits and stats such as "5 of 7 days" or "3 of 4 tasks done today". Never your name, email, phone number or account.
- Where it goes: through our server to Cloudflare Workers AI, which runs the AI model on Cloudflare's network and returns the answer.
- What happens to it: it's used only to produce that answer. We don't store what's sent or returned, and Cloudflare doesn't use it to train AI models.
AI answers are general wellness guidance, not medical advice. For anything about a medication or a health condition, talk to your doctor or pharmacist.
Cookies and analytics
We don't use advertising or tracking cookies. When you're signed in, r3cent sets two first-party cookies: one that keeps your session and one that tells the app you're signed in. During Sign in with Apple, a short-lived cookie protects the sign-in from forgery.
On our website we count page views with Cloudflare Web Analytics, which sets no cookies and doesn't build a profile of you.
Who processes your data
We use these service providers to run r3cent. They process data only on our behalf.
| Provider | What for |
|---|---|
| Cloudflare | Hosting, the account database, AI features (Workers AI) and website analytics. |
| Resend | Delivering sign-in codes by email. |
| Twilio | Delivering sign-in codes by text message, if you sign in with a phone number. |
| Apple | Sign in with Apple, if you use it. |
| Only if you use the one-time "Import from Google sign-in", which reads your data from r3cent's previous Google-based version. That old copy will be deleted after December 31, 2026. |
Your data may be stored and processed in the United States and other countries where these providers operate.
How long we keep it
- Your account and dashboard: until you delete them.
- When you delete your account: it's removed from our database right away. Our database provider keeps a rolling 30-day recovery history, so every trace is gone within 30 days.
- Sessions: expire 90 days after you last use r3cent on that device.
- Sign-in codes: 10 minutes. Abuse counters: 2 days.
Your choices and rights
- Export: Settings → Export History (CSV), or Backup for a full copy you can restore later.
- Correct: edit or remove any habit, check-in or tracker in the app.
- Delete: Settings → your account → Delete account. Or Settings → Privacy & Your Data → Delete all my data, which also clears this device.
- AI: turn AI features on or off anytime in Settings.
- Sign out everywhere: Settings → your account → Sign out of all devices.
Depending on where you live, you may have the right to access, correct, delete, export or restrict your data, to object to how it's used, and to withdraw consent. You can do most of this in the app. For anything else, email support@r3cent.com, and you can also complain to your local data protection authority. We don't sell your personal information or share it for targeted advertising.
Security
All connections use HTTPS. Session tokens and sign-in codes are stored only as hashes, passwords never leave your device in usable form, and each account's data can be read only through that account's session.
Children
r3cent isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has created an account, email us and we'll delete it.
Changes to this policy
If this policy changes, we'll post the new version here with a new date, and tell you in the app about any significant change.