Effective date: October 24, 2026. Publisher: Quantum V^ LLC.
Recluda approves sign-ins with a key that never leaves your iPhone, iPad or Mac. Your face and fingerprints never leave it either.
Who handles your data
Recluda talks to a sign-in server. Usually your organization runs that server on its own hardware, and your organization decides how long it keeps sign-in records. When you use the demo on recluda.com, the server is run by Quantum V^ LLC.
What never leaves your device
- Your biometrics. Face ID and Touch ID are handled by iOS. Recluda only learns whether the check passed.
- Your private key. It's created inside the Secure Enclave and can't be copied out.
- Camera images. When you scan a sign-in or setup QR code, the image is read on the device and not stored or sent.
- Your approval history. The list of sign-ins you approved or denied is kept on the device only, so you can spot one you didn't make.
What the app sends to the sign-in server
- When you register the device: the key's public half, the name you've given the device, and the type of biometric it has (Face ID, Touch ID or Optic ID). If you allow notifications, also a push-notification token from Apple, so the server can tell you about a sign-in waiting for your approval. The notification never contains the number you need to pick. A sign-in server your organization runs itself sends notifications through Recluda's push service, which passes the token, the sign-in code and the requesting app's name to Apple and keeps none of them.
- When you approve or deny a sign-in: the sign-in code, the number you picked, and a signature made with your key.
- If you use password fill with the browser extension: a push-notification token from Apple, a random ID for this install, the website's name, and your key's public half, so the server can derive that site's key.
What Recluda doesn't do
- No advertising, no analytics, no tracking across apps or websites.
- No selling or sharing of your data.
- No access to your contacts, photos, location or microphone.
What the sign-in server keeps
To check approvals and let administrators manage devices, the server stores each registered device's public key, name and biometric type, and a log of sign-in approvals and denials. Administrators can revoke a device at any time from the admin console. Ask your organization how long its server keeps these records.
Removing your data
Deleting Recluda deletes your key from the device. To have your device's record removed from a sign-in server, ask the organization that runs it. For the recluda.com demo server, contact us.
Children
Recluda is built for workplace sign-in and isn't directed at children under 13.
Changes
If this policy changes, we'll update this page and its effective date.
Contact
Questions about privacy: email support@recluda.com or contact us.