Privacy policy

Last updated 17 October 2026. Applies to the Recur Android app (app.recur.subs) and this website.

Recur is a local app. Your subscriptions, prices, notes and settings are stored on your device, in the app's own storage, and are not sent anywhere. There is no account, no sign-up and no server of ours that holds your data. The only data that leaves the device is described under Purchases and in the exchange rate section below.

What Recur stores on your device

The subscriptions you add and everything attached to them: name, price, currency, billing cycle, next payment date, category, payment method label, notice period, cancellation link, notes, usage rating, and the payment and price history Recur builds from them. Your settings, including the base currency, reminder time and lead, week start, and whether the app lock is on.

If you turn on the app lock, your PIN is not stored. Recur keeps a random salt and the SHA-256 hash of salt plus PIN in the Android keystore-backed secure storage, so the PIN cannot be read back out. Biometric unlocking is handled by Android; Recur only receives a yes or no.

The one request Recur makes

To convert subscriptions that are in another currency, Recur asks the public Frankfurter API for the daily reference rates of the European Central Bank. That request contains your base currency code and nothing else: no identifier, no subscription data, no device information beyond what any HTTPS request carries. The answer is cached on the device, and Recur shows which day the rates are from. The request is only made when Pro is active and at least one subscription is in a foreign currency. Apart from this request and the purchase check described below, nothing in the app talks to a network.

Purchases

Recur Pro is sold through Google Play. The purchase is handled by Google Play and by RevenueCat, which manages the receipt and tells the app whether Pro is active. We do not receive your payment details.

When the app starts, it connects to RevenueCat so it can check whether Pro is active. RevenueCat then receives a random, anonymous app user identifier created for this installation, the purchase history of that identifier (which product, when, and whether it is still active), and a short set of technical flags the app records to detect modified installations (for example whether the app came from Google Play and whether a debugger is attached). No name, email address, subscription data or advertising identifier is sent. This happens whether or not you buy Pro, because the app has to ask to know. Google's and RevenueCat's own policies apply to that data: Google Privacy Policy, RevenueCat Privacy Policy.

What Recur does not do

• No bank or card connection. You enter subscriptions yourself.
• No advertising, no advertising identifiers, no ad SDKs.
• No analytics, no crash reporting, no usage tracking.
• No contact, photo, location or calendar access.
• Nothing is sold, and no data is shared with third parties for their own purposes. RevenueCat processes the purchase data above on our behalf.

Permissions

Recur asks to post notifications, so it can remind you before a charge. You can refuse and use the app without reminders, and you can withdraw the permission in Android's settings at any time. Internet access is used for the purchase check and the exchange rate request described above.

Backups

Android's automatic cloud backup is switched off for Recur, so your subscription data is not copied into a Google account behind your back. The export and backup files you create yourself are yours: they land wherever you share or save them, and that copy is outside the app's control.

Data retention

How long each kind of data is kept, and what ends the retention:

• Subscriptions, payment history, notes and settings on your phone: kept until you delete them in the app or uninstall Recur. They are never copied to a server.
• App lock salt and PIN hash: kept in secure storage on the device until you turn the app lock off or uninstall Recur.
• Cached exchange rates: kept on the device and replaced by the next day's rates. Deleted on uninstall.
• Anonymous app user identifier and purchase history at RevenueCat: kept for as long as the subscription or lifetime purchase exists, so Pro can be restored, according to RevenueCat's own policy. Deleted within 30 days of an email request, see recur-917.pages.dev/delete. An identifier without any purchase cannot be linked to you by us.
• Purchase records at Google Play: kept by Google under your Google account, under Google's policy.
• Backups: we run no server and keep no backups of your data, so a deletion leaves no copy with us. Records deleted at RevenueCat on your request are removed from its own disaster recovery backups under RevenueCat's retention schedule. Android cloud backup is off for Recur.
• Emails you send us: kept while the conversation is open and deleted no later than 12 months after the last message, or earlier on request.

The steps for deleting your data, with or without the app, are at recur-917.pages.dev/delete.

Deleting your data

Uninstalling Recur removes everything it stored on your device. To have the purchase record at RevenueCat deleted, write to us as described on the deletion page. Purchases themselves are tied to your Google account.

Children

Recur is not directed at children under 13, and we do not knowingly collect data from them.

This website

This site is a set of static files hosted on Cloudflare Pages. It sets no cookies, embeds no trackers, and loads its fonts from its own domain. Cloudflare processes standard request logs (such as IP address) to serve and protect the site; see the Cloudflare Privacy Policy.

Changes

If this policy changes, the date at the top changes with it, and a material change will be noted in the app's release notes.

Contact

Questions about privacy or anything else: clearpointstudios@proton.me. Clearpoint Studios, the developer of Recur.