Privacy policy

Effective date: to be set at launch. Publisher: Quantum V^ LLC.

Recluda approves sign-ins with a key that never leaves your iPhone, iPad or Mac. Your face and fingerprints never leave it either.

Who handles your data

Recluda talks to a sign-in server. Usually your organization runs that server on its own hardware, and your organization decides how long it keeps sign-in records. When you use the demo on recluda.com, the server is run by Quantum V^ LLC.

What never leaves your device

• Your biometrics. Face ID and Touch ID are handled by iOS. Recluda only learns whether the check passed.
• Your private key. It's created inside the Secure Enclave and can't be copied out.
• Camera images. When you scan a sign-in QR code, the image is read on the device and not stored or sent.

What the app sends to the sign-in server

• When you register the device: the key's public half, the name you've given the device, and the type of biometric it has (Face ID, Touch ID or Optic ID).
• When you approve or deny a sign-in: the sign-in code, the number you picked, and a signature made with your key.
• If you use password fill with the browser extension: a push-notification token from Apple, a random ID for this install, the website's name, and your key's public half, so the server can derive that site's key.

What Recluda doesn't do

• No advertising, no analytics, no tracking across apps or websites.
• No selling or sharing of your data.
• No access to your contacts, photos, location or microphone.

What the sign-in server keeps

To check approvals and let administrators manage devices, the server stores each registered device's public key, name and biometric type, and a log of sign-in approvals and denials. Administrators can revoke a device at any time from the admin console. Ask your organization how long its server keeps these records.

Removing your data

Deleting Recluda deletes your key from the device. To have your device's record removed from a sign-in server, ask the organization that runs it. For the recluda.com demo server, contact us.

Children

Recluda is built for workplace sign-in and isn't directed at children under 13.

Changes

If this policy changes, we'll update this page and its effective date.

Contact

Questions about privacy: contact us.