Version 1.0 · effective 29 September 2026
Who controls your data
The controller is Alphabet Consulting EOOD, company registration number 208188307, registered office at 74 Tsar Boris III Blvd., Apt. 10, Lagera, Krasno Selo District, Sofia, Bulgaria.
For questions or requests about personal data, write to info@recipro.app. We do not publish a company phone number. Email is the contact channel for privacy rights and information.
How Recipro works
Recipro is a web service open to people aged 18 or over. It lets you privately save up to three people you already know. Saving someone does not send them an invitation, SMS or other notice.
A mutual connection exists only when two verified accounts have independently selected each other’s phone numbers. Before both people choose to reveal themselves, the app does not explicitly link a saved name or number to that mutual connection. Someone may still infer the other person’s identity from outside information or context.
After a mutual connection, the two accounts may propose a meeting (Event). The Event place and note are visible to the other account before names are revealed.
Data we use and why
| Data | Purpose | Legal basis |
|---|---|---|
| Verified phone number, account identifier, sign-in and security data | Send and verify sign-in codes; maintain the account; protect the service | Performance of the user relationship — GDPR Art. 6(1)(b) |
| Language and visual style preferences; adult declaration | Show the selected experience and restrict the service to adults. Age is self-declared and is not checked against an identity document | GDPR Art. 6(1)(b) |
| A name entered by the user for a selected person, that person’s phone number, and the user’s private interest category (curiosity, dating, attraction) | Save choices, apply the three-choice limit, reduce repeated probing, and check reciprocity. The name is entered by the user and may not be the official name. The category does not affect matching and is never shown to the other person, even after reveal | GDPR Art. 6(1)(b) for requested features; GDPR Art. 6(1)(f) for non-users’ numbers (interest in running a private comparison without contacting them) |
| Mutual connections, reveal decisions, and choice and connection states | Show the correct state and reveal identity only after both decide | GDPR Art. 6(1)(b) |
| Event proposals, place, date, time, optional note, replies and cancellations | Let two accounts with an active mutual connection propose and manage a meeting. Place and note are visible to the other person before reveal | GDPR Art. 6(1)(b) |
| Preference for optional new-mutual SMS alerts and a record of changes | These SMS are not active today. If we enable them, they will go only to users who opt in, with STOP/START. Sign-in SMS remain separate | Consent — GDPR Art. 6(1)(a), if and when the feature is enabled |
| Technical data for operation and security, including session cookies, network information and anti-bot checks | Maintain sessions, prevent abuse and provide the service. Language, style and some interface preferences may also be stored in the browser | Legitimate interest in security and operation — GDPR Art. 6(1)(f) |
We do not use the interest category for advertising, commercial profiling or matching with strangers. There is no stranger search, no address-book access and no public profile.
Phone numbers of people who have not joined
A user may enter the phone number and a chosen name for someone who does not use Recipro. Those details come from the user making the choice, not from the person named.
We do not send that person an SMS, invitation or notice merely because of the choice. We do not tell them who selected them.
The number stays in the database for as long as the author’s choice record remains, even if that choice is no longer shown as active. If the author deletes their account and the procedure succeeds, that choice is deleted.
Informing every non-user individually would seriously impair the purpose of the processing: the comparison stays private, and a person who has not chosen back must not receive a signal. We therefore do not send an individual notice. If you think your number has been entered, write to info@recipro.app. We will handle the request without revealing another person’s choices.
What others can see
A one-sided choice remains private.
Once a mutual connection exists, each account sees an anonymous connection. The app does not explicitly associate a name or number with the mutual before both people agree to reveal.
Details written in an Event (place, date, time, note) are visible to the other account before reveal. Do not include information you do not want to share. Meeting in person may disclose your identity even without tapping Reveal.
Once both agree to reveal, the app shows the identifying information provided for that connection. The interest category remains private.
SMS and Events
Sign-in codes are sent by SMS.
Optional new-mutual SMS alerts are a separate path and are disabled.
Changes, refusals and cancellations of Events do not send SMS. Before travelling to an Event, reopen Recipro and check that it is still confirmed.
Service providers and transfers
Recipro uses processors to run the service:
- Supabase — accounts, database, authentication and sign-in codes. The main database is in Ireland (eu-west-1). Backups, logs and some subprocessors may involve processing elsewhere.
- Vercel — hosting of the site and application functions. Processing may also take place outside the European Economic Area.
- Twilio — sign-in SMS, through Supabase. Mutual and Event alert SMS are disabled. Message logs may also be processed outside the EU.
- Cloudflare — anti-bot checks (Turnstile) on the code request. It processes technical signals such as IP address and browser data, not the content of your choices.
- Google Fonts — fonts are loaded from Google’s servers in the visitor’s browser, including before sign-in. This request may send Google at least the visitor’s IP address.
Some of these providers have facilities outside the EEA. An extra-EEA transfer is therefore possible. For those transfers we rely on the data-processing terms and standard contractual clauses made available by the providers; we have not yet checked each dashboard agreement line by line. We do not sell personal data.
Retention and deletion
Recipro does not currently delete every record automatically when something disappears from the app. There is no scheduled clean-up job.
- Removed choice: it is no longer active and cannot create new mutual connections. The slot among the three choices can be reused after 24 hours. Name, number and category remain in the database, as an inactive record, for as long as the author’s account is active: they are kept to prevent abuse (repeated re-entry of the same number) and to handle reports or data requests. They are no longer used for matching.
- Mutual ended before reveal: the status becomes “expired”. Identity is not revealed. The mutual row remains in the database.
- Already revealed mutual: the status becomes “concluded”. Names and numbers already shown to the other person stay attached to that connection even if a choice is removed.
- Account deletion: we deactivate the profile, clean some information and, if authentication deletion succeeds, delete the choices created by that account. Choices made by others toward the same number, and already revealed connections, may remain visible to the other participant. If authentication deletion fails, the operation stops.
- Events: when an account is deleted we remove place and note. Status, time and the Event record remain.
- Backups and technical logs: deleting data from the live database does not immediately remove earlier copies. Backups and logs follow provider rules and are kept for a limited period.
Records no longer tied to an active account are reviewed at least every 90 days and deleted or anonymised when they are no longer needed for the service or for the other participant in an already revealed connection.
For deletion beyond what the app provides, write to info@recipro.app. We will verify identity and will not disclose another person’s choices. If we later add automatic clean-up periods, we will update this notice’s version and date.
Cookies and browser storage
We use technical cookies and storage needed for the session, language and style preferences, and sign-in security (including Turnstile). We do not use advertising-profiling cookies. Google Fonts are loaded from Google as described above.
Your rights
You may request access, rectification, erasure, restriction, portability, or object to processing where the GDPR provides those rights, by writing to info@recipro.app.
Account holders can also remove a choice, change preferences or delete the account in the app. We will verify identity before responding to requests involving private information, without unilaterally exposing another person’s choices.
You may complain to the Commission for Personal Data Protection of Bulgaria (CPDP) or, if you are in another EU country, to your local authority. In Italy: Garante per la protezione dei dati personali.
Adults only and changes
Recipro is for people aged 18 or over. If we learn that an account belongs to a minor, we will handle it through info@recipro.app.
We will update this notice’s date and version when our processing changes.