Privacy Policy for Recif

Last updated: July 20, 2026
Effective date: July 20, 2026

Recif ("Recif", the "App", "we", "us", or "our") is operated by Pristn Technologies LLC, a limited liability company organized in the State of Nebraska, United States. This Privacy Policy explains what information we collect when you use the Recif mobile application and related services (together, the "Service"), how we use and share it, and the choices and rights you have.

This Policy applies to users in the United States, Canada, Brazil, and other countries in Latin America where the App is available. By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Quick summary

This summary is for convenience only. Please read the full Policy for details.

• What Recif is. A personal reef-aquarium tracker. You log your tanks, water-test readings, target ranges, maintenance tasks, and livestock, watch trends and a Reef Stability Score over time, and get reminders. Recif is a single-user app: your data is yours and syncs across your own devices.
• What we collect. Account details (your email and a display name), the aquarium data you enter (tanks, readings, tasks, livestock, notes, and any photos or voice notes you add), limited device information, and subscription status. We collect this to provide and sync the Service.
• What we do NOT do. We do not sell your personal information. We do not use it for advertising. We do not include advertising, analytics, tracking, or crash-reporting SDKs in the App. We do not collect your location, contacts, or calendar.
• Payments. Subscriptions are handled by the Apple App Store and Google Play. We never see or store your full card number or banking details.
• Your control. You can export your data as CSV, manage your signed-in devices, and delete your account and associated data from within the App at any time.
• Age. Recif is intended for people who are at least 13 years old.

2. Who is responsible for your data

The controller of your personal information is:

Pristn Technologies LLC
Omaha, Nebraska 68127, United States
Privacy contact: info@pristntechnologies.com
Support: contact@pristntechnologies.com

For users in Brazil, our data protection officer ("encarregado") can be reached at info@pristntechnologies.com.

3. Information we collect

3.1 Information you provide

• Account and profile. Your email address and a display name. If you sign in with Apple or Google, we receive your name and email from that provider and create an account for you. You may also set preferences such as theme, language, and measurement units (temperature, salinity, alkalinity, and volume).
• Authentication credentials. If you register with email and password, we receive your password to create your account and to log you in. We never store your password in readable form; we store only a securely hashed version. We also generate short-lived codes and tokens for email verification and password reset.
• Content you create ("Your Content"). The aquarium data you enter, including: tanks (name, system type, water volume, units, and setup details); water-test readings (the parameter, the value and unit you entered, when it was measured, and any note or photo you attach), including any custom parameters you define; your target ranges and the Reef Stability Score history derived from your readings; maintenance tasks, their schedules, and a log of what you completed, including any voice note or photo you attach; and livestock records (type, common and scientific name, acquisition date, source, price paid, quantity, coral type, placement, status and status history, notes, and any moves between tanks).
• Communications. If you contact us for support, we receive the information in your message and your contact details.

3.2 Information we collect automatically

• Device and session information. When you use the Service we collect a per-installation identifier (a random value we generate), your device name, platform (iOS or Android), and app version. These let you see and manage your active sessions on the "Connected devices" screen and help us keep your account secure and route notifications.
• Push token. If you enable notifications, we collect a push token so we can deliver reminders and alerts to your device.
• Usage and activity within the Service. Records needed to sync your data and run the Service, such as session timestamps, when a device was last active, per-device sync markers, and the Reef Stability Score snapshots our server computes from the readings you enter.
• Technical data. When your device connects to our servers, your IP address is used briefly in memory to protect the Service against abuse (rate limiting). We do not store your IP address in our application database. Standard server logs maintained by our hosting and network providers may record connection metadata such as IP addresses.

We do not collect your precise or background location, your contacts, or your device calendar. The charts and Reef Stability Score in the App are simply derived from the readings you enter.

3.3 Information from third parties

• Sign in with Apple / Google. If you choose social sign-in, the provider sends us a verified identifier and basic profile details (such as name and email) so we can create or access your account. For Sign in with Apple, we also securely store a token that lets us revoke the connection with Apple when you delete your account, as Apple requires.
• App stores and RevenueCat. When you purchase or restore a subscription, we receive purchase and entitlement information (such as the plan, transaction identifiers, store, and renewal dates) from the Apple App Store or Google Play through our subscription provider, RevenueCat. We do not receive your full payment card or bank details.

4. Device permissions we request

The App asks for the following permissions, only when needed for a feature you use:

• Camera. To take photos of your livestock (or of a reading or tank) to attach in the App.
• Photo library. To let you choose an existing image to attach. On modern iOS and Android versions this typically uses the system photo picker, which does not require granting access to your whole library.
• Microphone. To record a voice note on a maintenance task.
• Notifications. To send you the reminders and alerts you turn on. You can decline or turn these off at any time in your device settings.

You can manage or revoke these permissions at any time in your device settings. Some features will not work if a required permission is denied.

5. How we use your information

We use the information described above to:

• Create and maintain your account and authenticate you.
• Provide the core features: tanks, readings, target ranges, the Reef Stability Score and charts, maintenance tasks, livestock tracking, reminders, and CSV export.
• Sync your data across your own devices and let you manage active sessions.
• Process and manage your Recif Pro subscription.
• Send you transactional messages such as email verification, password reset, and account-deletion confirmation.
• Send the reminders and alerts you have enabled, and respect your notification preferences.
• Protect the Service, prevent abuse and fraud, enforce our Terms of Use, and maintain security (for example, rate limiting and account-enumeration protection).
• Comply with legal obligations and respond to lawful requests.

We do not use your personal information to build advertising profiles, and we do not sell it.

6. Legal bases for processing

Where the law requires us to identify a legal basis (for example, under Brazil's LGPD or similar frameworks), we rely on the following:

• Performance of a contract: to provide the Service you request, including your account, your data sync, and your subscription.
• Consent: for optional features that ask for it, such as push notifications and device permissions. You may withdraw consent at any time.
• Legitimate interests: to keep the Service secure, prevent abuse, and improve reliability, balanced against your rights.
• Legal obligation: to comply with applicable laws and lawful requests.

7. How we share information

We share information only as described here. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Recif is a single-user app: your aquarium data is not shared with other users. We share information only as follows:

• With service providers (sub-processors). We use trusted providers to operate the Service. They may process your information only on our instructions and for the purposes we set. See Section 8 for the list.
• For legal reasons. We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Pristn Technologies LLC, our users, or the public.
• In a business transfer. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

8. Service providers and sub-processors

We rely on the following third parties to provide the Service. Each receives only the information needed for its function.

Note: Google's involvement above is limited to Sign in with Google and Android push delivery. We do not use Google Analytics, Firebase Analytics, Crashlytics, or any other analytics, advertising, or crash-reporting service in the App.

9. Push notifications

If you enable notifications, we send reminders and alerts about your tanks (for example, when a maintenance task is due, when it has been a while since you tested a parameter, and Reef Stability Score alerts). To deliver them, the notification content passes through the push services listed above. You can turn notifications off at any time in your device settings, or adjust your notification preferences in the App, including a quiet period.

10. Children's privacy

Recif is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are between 13 and the age of majority in your country, you may use the Service only with the involvement and consent of a parent or legal guardian, to the extent your local law requires it. In Brazil and some other Latin American countries, the processing of data relating to minors may require specific parental consent; where that applies, a parent or guardian must provide consent and supervise the minor's use.

If you believe a child has provided us with personal information without the required consent, please contact us at info@pristntechnologies.com and we will take steps to delete it.

11. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service, and afterward only as needed for the purposes described in this Policy or as required by law.

General retention practices:

• Account information is retained while your account exists.
• Your Content (tanks, readings, tasks, livestock, notes, and media) is retained while your account exists so it stays synced across your devices. When you delete an individual item in the App, it is marked as deleted and removed from your devices on the next sync; a residual record may persist on our servers for a limited period to complete syncing before it is cleared.
• Authentication tokens and verification codes are short-lived and expire automatically.
• Backups maintained for disaster recovery may persist for a limited period before being overwritten, even after data is deleted from the live Service.

When you delete your account (Section 12), we delete your data as described there.

12. Deleting your account and data

You can delete your account at any time from within the App, in your account settings. When you delete your account:

• We permanently delete your account and your associated data from our live systems, including your tanks, readings, tasks, livestock records, preferences, notification settings, saved devices, and subscription record.
• Your uploaded photos and voice notes are deleted from our cloud storage.
• We revoke your active sessions and sign you out on all devices.
• If you signed in with Apple, we revoke the connection with Apple on your behalf.
• We send a confirmation ("receipt") email to the address on your account.

Please note:

• If you have an active auto-renewing subscription, you may need to turn off auto-renewal in the App Store or Google Play before you can delete your account, so that you are not charged again.
• Residual copies may persist briefly in backups before being overwritten.

Deletion is permanent and cannot be undone. If you want to keep a copy of your data, use the CSV export first (Section 15). We do not sell your personal information, and we do not retain your identifying account data after deletion beyond what is described here and what applicable law requires.

If you need help deleting your account or data, contact us at info@pristntechnologies.com.

13. Security

We take reasonable technical and organizational measures to protect your information, including:

• Passwords are stored only as salted hashes (bcrypt), never in readable form.
• Password-reset tokens and session refresh tokens are stored only as cryptographic hashes.
• Sessions use signed tokens, and requests to our servers require authentication.
• Uploads to and downloads from our storage provider use short-lived, single-purpose links.
• We apply rate limiting and protections against account-enumeration and abuse.
• Data in transit is protected using industry-standard encryption (HTTPS/TLS).

The photos and voice notes you add are stored on our servers and cloud storage so they can sync across your devices; they are not end-to-end encrypted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please also do your part: use a strong, unique password and keep your device secure.

14. International data transfers

We are based in the United States, and we process and store your information in the United States. Our application servers and database are hosted in Phoenix, Arizona, United States. The photos and voice notes you upload are stored with Cloudflare R2 in its Eastern North America region (United States). The other service providers listed in Section 8 may also process limited information in the United States or in other countries where they operate. If you use the Service from Canada, Brazil, or elsewhere in Latin America, your information will be transferred to and processed in the United States. These countries may have data protection laws that differ from those in your country.

By using the Service, you understand and consent to this transfer. Where required, we rely on appropriate safeguards and legal mechanisms for international transfers, and on your consent and the necessity of the transfer to provide the Service you request.

15. Your privacy rights

Subject to your local laws and to verification of your identity, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and personal information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Portability, where applicable, of the information you provided.
• Lodge a complaint with your local data protection authority.

You can exercise many of these rights directly in the App: you can edit your profile, export your readings, livestock, and maintenance log as a CSV file at any time, and delete your account. For any other request, contact us at info@pristntechnologies.com. We will respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

15.1 United States (including California)

We do not sell your personal information and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and similar U.S. state laws. California residents and residents of other U.S. states with comparable laws may request to know, access, correct, and delete their personal information, and may designate an authorized agent to act on their behalf. To make a request, contact us at info@pristntechnologies.com. We will not discriminate against you for exercising these rights.

15.2 Canada (PIPEDA and provincial laws)

If you are in Canada, you may request access to and correction of your personal information, and you may withdraw your consent to our processing, subject to legal and contractual restrictions and reasonable notice. We handle personal information in line with applicable Canadian privacy laws. To make a request or raise a concern, contact us at info@pristntechnologies.com. You may also contact the Office of the Privacy Commissioner of Canada.

15.3 Brazil (LGPD)

If you are in Brazil, the Lei Geral de Proteção de Dados (LGPD) gives you the rights to confirmation of processing, access, correction, anonymization or deletion of unnecessary data, portability, information about with whom we share your data, and to withdraw consent. You may also petition the national data protection authority (ANPD). To exercise these rights, contact our data protection officer (encarregado) at info@pristntechnologies.com.

15.4 Other Latin American countries

Many countries in Latin America (for example, Mexico, Argentina, Colombia, Chile, and others) provide rights similar to those above under their own data protection laws. If you reside in one of these countries, you may exercise the rights granted by your local law by contacting us at info@pristntechnologies.com.

16. Do Not Track and no sale of data

We do not respond to "Do Not Track" signals because there is no common industry standard for them. Regardless, we do not track you across third-party websites or apps, and we do not sell your personal information.

17. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice (such as an in-app message or email). Your continued use of the Service after the changes take effect means you accept the updated Policy.

18. Contact us {#contactus}

If you have any questions, requests, or complaints about this Privacy Policy or your information, contact us:

Pristn Technologies LLC
Privacy: info@pristntechnologies.com
Support: contact@pristntechnologies.com
Mailing address: Omaha, Nebraska 68127, United States
Website: https://pristntechnologies.com/

We will do our best to resolve your concern. You also have the right to contact your local data protection authority.