Privacy policy

Who we are

Recall Weekly, the website and the app, is operated by Moss and Metric, LLC (“we”, “us”), which is responsible for the personal information described here. Recall Weekly is a U.S. service; your information is processed in the United States.

What we collect

• Account information: your email address, and whether and when you confirmed it.
• Alert preferences you give us: the audiences you pick (for example, parent or pet owner), and, if you add them, brands, product types, retailers, states, allergens, and vehicles (make, model, year, and optionally a VIN). Allergen choices can reveal health-related information; we use them only to match recalls to you.
• Things you save in the app: products in “My stuff” (a name, and a brand and barcode if you have them), details from receipts you scan (see below), and recalls you follow. Like allergens, what you save can say something about your health, diet or household.
• Your phone, if you use the app: for each phone signed in, a sign-in token (we keep only a scrambled form of it), whether it’s iPhone or Android, the app version, and when it was last used. If you allow notifications, also its push token, the address notifications are delivered to.
• How you found us: when you sign up on the website, the page you first landed on, the website that referred you, and any campaign tags in the link. In the app we only note that you signed up there.
• Alert activity: a record of which recalls we’ve emailed or pushed to you, so we don’t send duplicates, and whether you’ve unsubscribed from email.
• Payment information: if you subscribe, payment is handled by our payment processor, which acts as the seller. We receive your email address and subscription status, never your card details.
• Technical information: standard server logs (such as IP address, browser type, and pages or searches requested), which our hosting provider keeps briefly for security and reliability. We use your IP address to limit abuse.

Using the app without an account

You can use the app without giving us an email address. Until you save a product, follow a recall or turn on alerts, your filters stay on your phone. The first time you do one of those, we create a profile tied only to that phone. It can hold your state, the categories you picked, your allergens, any brands, keywords and retailers you add, saved products, vehicles, followed recalls, the phone’s push token and a record of the alerts we’ve sent it. Allergens and saved products can be health-related information, and by adding them you’re asking us to use them to match recalls to you.

If you later sign in with an email address, the profile is merged into that account. To remove it, use “Delete my data” in the app. Signing out also removes it, within a few hours. A profile on a phone that hasn’t used the app in 180 days is deleted automatically.

Scanning barcodes and VINs

The camera reads a barcode or VIN on your phone, and the app sends us only the number. We look a barcode up in public product databases, and a VIN in the U.S. government’s public vehicle database, without anything that identifies you. A scan isn’t saved to your profile unless you choose to save the product. A VIN you add is kept with that vehicle until you remove it.

Scanning receipts

Receipt scanning needs an account signed in with your email. Your phone reads the photo itself, and we never receive the picture. The app keeps only the lines that look like items, leaving out totals, payment, card and loyalty details, addresses, phone numbers and pharmacy lines, and shows you those lines to edit before anything is sent.

The lines you send, with the store chain’s name if the app recognized it, are processed by an AI service on our behalf to identify the products. We don’t store or log those lines. We keep a note that a scan happened, with your account and the time, for a short period, to limit abuse.

From what you then choose to save, we keep each item’s name and brand, the purchase date (the day you scanned, if the receipt didn’t show one), and the store chain’s name and the state, either of which you can leave out. Together these show where and when you shopped. We use them only to tell whether a recall could concern something you bought. We never keep the store’s street address, your card, loyalty number or the cashier. Receipt items are deleted once they’re unlikely to still be in your home, from under two months after purchase for the most perishable food to about 14 months for long-life goods. A weekly cleanup removes them, or they go sooner if you remove them or delete your account.

How we use it

To send you the Sunday Brief and any email or push alerts you’ve asked for; to match recalls to your preferences and the things you’ve saved; to sign you in; to process your subscription; to keep the service secure and prevent abuse; to understand, in aggregate, which pages and campaigns bring people to the site; and to answer you when you contact us. We don’t use your information for advertising.

Cookies and analytics

We set one cookie, to keep you signed in. Our site analytics are cookieless and count visits in aggregate; they don’t track you across other websites. Our signup and sign-in forms, including the app’s sign-in, use a bot check from our hosting provider, which may evaluate browser signals to tell people from automated traffic. We remember how you arrived at the site in your browser’s session storage until you close the tab, so we can record it if you sign up.

Who we share it with

We don’t sell your personal information, and we don’t share it for targeted advertising. We disclose it only to service providers that process it on our behalf and under contract (for website hosting and storage, email delivery, push notifications, AI processing, payment processing, site analytics, and error monitoring) and when the law requires it.

Push notifications reach your phone through the notification services of your phone’s platform (Apple or Google), which handle the push token and the notification’s text. A notification names the recall, but not which of your products, allergens or other details it matched; those stay in the app. The recall’s headline can still hint at why it reached you (“undeclared peanut”, say), and it can show on your lock screen.

If Recall Weekly is ever sold or merged, your information may transfer to the new owner under this policy.

How long we keep it

We keep your account, preferences and saved products until you remove them or delete your account, and the record of each phone signed in to your account until you delete the account. Exceptions: receipt items and phone-only profiles are deleted as described above, and a phone’s push token is removed when you sign out of the app or when it stops working. If you unsubscribe, we keep your email address so we can honor the unsubscribe. Our record of emails sent is deleted after 90 days; sign-in codes after 24 hours. Deleted data can remain in backups for up to 30 days.

Your choices and rights

• Stop emails: use the unsubscribe link in any email. It takes effect immediately.
• Stop notifications: turn them off in your phone’s settings, or sign out of the app.
• See or change your information: sign in to your account page, or use the app.
• Delete everything: use “Delete your account” on the account page, “Delete my account” in the app (“Delete my data” if you use it without an account), or email us. If you have an active paid subscription, cancel it first.
• Get a copy of your data, or ask any other question about it: email us.

Depending on where you live (including California and other U.S. states with privacy laws), you may have the right to know, access, correct, and delete your personal information, and to opt out of its sale or sharing. We don’t sell or share it, and we treat a Global Privacy Control signal as an opt-out request anyway. We’ll verify requests by confirming you control the account’s email address, and we won’t treat you differently for making one.

Children

Recall Weekly isn’t directed to children under 13, and we don’t knowingly collect their personal information. If you believe a child has given us information, email us and we’ll delete it.

Security

We protect your information with reasonable safeguards, including encrypted connections and sign-in secrets stored only in scrambled form. No system is perfectly secure.

Changes

If we make material changes to this policy, we’ll update the date above and tell subscribers by email or on the site before they take effect.