Privacy Policy

Last updated: August 25, 2026

Rex is a social app for discovering, remembering, and sharing real-world experiences with people you trust. This policy explains what information Rex collects, how it's used, and the choices you have. We've kept it in plain English on purpose.

What we collect

• Account information. Your email address and the profile details you choose to provide, such as your name, username, and profile photo.
• Content you post. The experiences you log and rank, the notes and photos you attach, and the lists you create — solo or with friends.
• Your friends graph. Who you've connected with on Rex, so we can show your activity to your friends and theirs to you. Rex is private by default: your content is visible to your friends, not the public.
• Rec requests and responses. Questions you ask your circle and the recommendations you give and receive.

Device permissions we request

Rex asks for two native device permissions. Neither results in data being transmitted to Rex servers or stored in our database.

• Location (foreground only). Rex may ask for your location during onboarding to auto-detect your current city, and optionally from the place screen to show you the distance to a place. Your precise coordinates are used on-device in that moment and are never sent to Rex servers or retained anywhere. Location data is not used for tracking.
• Contacts (read-only). When you tap "Invite from contacts," Rex reads your device contacts solely to populate an in-app picker so you can choose who to invite via SMS. No contact names, phone numbers, or any other contact information is transmitted to Rex servers or stored anywhere. Contact data is not used for tracking.
• Photos (read/write). When you add a photo to a logged experience, Rex asks for access to your photo library so you can choose an existing photo, or to your camera if you take a new one. Selected photos are uploaded to Supabase storage and associated with your experience. Photos you don't select are never accessed or transmitted.
• Notifications (opt-in). Rex may ask permission to send push notifications so we can alert you when a friend mentions you in a comment or asks you for a recommendation. You can grant or revoke this permission at any time in iOS Settings. Notifications are not used for marketing or advertising.

Where place data comes from

When you search for or log a place (a restaurant, museum, trail, hotel, and so on), that place information — names, addresses, categories — is provided by Google Places. Your search queries for places are sent to Google to return results, subject to Google's privacy policy.

Where your data is stored

Your account and content are stored with Supabase, our hosting and database provider, on infrastructure protected by industry-standard security practices. Data is transmitted over encrypted connections.

What we don't do

We do not sell your personal data. We do not show your content to strangers — Rex has no public profiles or follower counts. We only use your information to run the app: showing your experiences to your friends, generating your personal rankings, and delivering recommendations from your circle.

Deleting your account

You can delete your account directly in the app (Settings → Delete account). Deletion removes your account and all of your data — your experiences, rankings, lists, photos, and connections. If you have trouble, email us at support@rex-app.com and we'll take care of it.

Children

Rex is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we'll delete it.

Changes to this policy

If we make meaningful changes to this policy, we'll update the date at the top and, for significant changes, notify you in the app.

Contact

Questions about privacy? Email support@rex-app.com.