Privacy policy

Last updated July 25, 2026

Recourse provides buyer protection for USDC payments on the Arc testnet. This policy covers the Recourse iOS app and the web app at recourse-arc.vercel.app. It is written to be read, not skimmed past: the product's whole premise is that you should not have to trust us, and that starts with being plain about data.

What we collect

Account details. When you sign in with Google, Apple, a passkey, or email, we store your email address and display name to operate your session and identify your workspace.

Content you upload. Merchants upload product photos and order details. Buyers who report a problem upload evidence photos. This content is stored by our backend, addressed by its cryptographic hash, and mirrored to a content delivery network so it loads quickly. Evidence is used only to resolve the dispute it was filed for.

Payment data, which is public by design. Payments, refund policies, disputes, attestations, and verdicts are recorded on the public Arc blockchain. Anyone can read them, and they cannot be edited or deleted by anyone, including us. Wallet addresses are pseudonymous but permanent.

What never leaves your device

Wallet keys. The iOS app generates and stores your signing keys in the device's Secure Enclave. We never see, transmit, or hold them. The web app's provisioned testnet wallet is stored in your browser's local storage.

Face ID. Biometric checks run entirely through Apple's system frameworks on your device. No biometric data reaches us, ever.

Camera. The camera is used to scan checkout QR codes. Frames are processed on the device and are not recorded or uploaded.

What we do not do

No advertising, no analytics trackers, no selling or sharing of data with third parties for marketing, no profiling. The backend logs ordinary operational records (such as request errors) to keep the service running.

Retention and deletion

Account details and uploaded content are kept while your account is active. Email us to delete your account and off-chain content. Data recorded on the Arc blockchain is immutable and cannot be deleted by design; that permanence is what makes verdicts verifiable.

Testnet notice

Recourse currently runs on the Arc testnet. Balances are test tokens with no monetary value, and no real funds are handled.

Contact

Questions or deletion requests: gkenny896@gmail.com.