Privacy, without the legalese.

Rekkko is a product of Spark CX FZE, licensed by SPC Free Zone, Sharjah, United Arab Emirates. Spark CX FZE is the data controller responsible for your personal data here. For any privacy question or request, write to farhan@spark.cx.

We keep account information such as your name, email and sign-in details to create and secure your account. We process recordings, audio, titles, transcripts, comments and reactions to provide the product features you ask for. We also receive basic usage, browser, device and IP information for delivery, security, fraud prevention and product improvement, plus anything you send when you ask for support.

We process this data to perform our contract with you, meet legal obligations, and pursue legitimate interests in keeping Rekkko secure and improving it. Where the law requires it, analytics and advertising measurement rely on your consent, which you can withdraw through Cookie settings.

We share only what is needed with the providers that help run Rekkko, with professional legal or accounting advisers, and with authorities when the law requires it. We do not sell personal data.

The providers we rely on today are Lovable Cloud, built on Supabase, for your account, database, transcripts and comments; Bunny Stream, run by BunnyWay d.o.o. in Slovenia, for storing and streaming your video files; Paddle as our reseller and seller of record for purchases; Groq for turning the speech in your recording into text; and the Lovable AI gateway for writing titles, summaries, chapters and the answers in AI chat. We also use email, analytics and support providers.

Your account, database, transcripts and comments are stored on Lovable Cloud, a managed platform built on Supabase, in the Europe region on Amazon Web Services infrastructure in Ireland. That region is fixed and does not change. Lovable is SOC 2 Type II and ISO 27001:2022 certified and GDPR compliant; its current reports and list of subprocessors are published at trust.lovable.dev.

The video files themselves are stored and streamed by Bunny Stream, a service of BunnyWay d.o.o. in Slovenia, an EU company. Video is never publicly addressable there: playback happens through short lived signed links. Because Bunny delivers from a global network, a copy of your video may be cached close to whoever opens your link so playback starts quickly. Bunny's own notice is at bunny.net/privacy.

The website itself is delivered from a global edge network so pages load quickly wherever you are.

Recordings are unlisted. Anyone with the exact link can watch, so share it with people you trust.

We do not sell your personal data. We do not use your private recordings to train advertising systems.

Rekkko runs Google ads. When you arrive from one, Google's measurement tag records that a visit, and, if you make one, a completed recording, came from that ad. That is all it measures: no recording content, no watch history, no contact details. Visitors in regions that require consent (the EEA, UK, Switzerland and Quebec) see a cookie banner first, and measurement there runs only after acceptance; everyone can change their choice anytime from Cookie settings in the footer. See how Google uses data from sites that use its services.

Essential cookies keep sign-in, security and basic service features working. Analytics and advertising cookies help measure visits and campaigns and run only with consent where required. Rekkko does not currently use marketing cookies to build advertising profiles. You can accept, reject or change optional cookie choices at any time from Cookie settings in the footer.

Paid plans are sold through Paddle.com, our reseller and Merchant of Record. When you buy a Founding Member spot, Paddle receives what it needs to take the payment, issue your invoice and handle tax: your email address, billing country and payment details, which are entered on their checkout and never stored by Rekkko. Rekkko keeps only the plan you bought, its status and the provider's reference for it. Paddle's own notice is at paddle.com/legal/privacy.

We keep account and recording data while your account is active or until you delete it, then delete or anonymise it when it is no longer needed. Security logs and limited backup copies may remain for a short period. Billing records are kept as long as tax and accounting law requires. Deleting a recording removes its active file and record. For account deletion, email farhan@spark.cx.

We use appropriate technical and organisational safeguards, including encrypted connections, access controls, restricted administrative access and managed infrastructure. No online service can promise absolute security.

Providers may process data outside the UAE, UK or EEA. Where required, transfers use recognised safeguards such as adequacy decisions or standard contractual clauses. Recordings and account data remain hosted in the Europe region described above, while global delivery may temporarily process requests nearer to the viewer.

Depending on where you live, you may ask to access, correct, delete, restrict or receive your data, object to processing, or withdraw consent. Email farhan@spark.cx; we aim to answer within one month where GDPR applies. You can also complain to your local data-protection authority. These rights may be limited where the law requires us to keep information.

Write to farhan@spark.cx and a real person will answer. Postal address: Spark CX FZE, SPC Free Zone, Sharjah, UAE.