Legal

Privacy Policy

Effective September 3, 2026. This is the canonical privacy policy for ReoNo on iPhone, iPad, and Mac.

ReoNo is a personal product review app published by Eric Wiener. This page explains what stays on your devices, what optional services can receive, and how to ask for help or deletion.

Your reviews stay with you

Product reviews, photos, ratings, notes, tags, barcodes, rankings, and related library data are stored locally on your device. When iCloud is available, that same library syncs through your private CloudKit database. ReoNo does not publish reviews to a public feed and does not operate a social network around your product notes.

You can export JSON or CSV backups from Settings. You can delete individual reviews in the app, or permanently clear synced iCloud library data from Settings.

Camera, photos, barcodes, and optional locations

ReoNo uses the camera and photo library on your device to capture reviews and scan barcodes. Those images are part of your local and private iCloud library unless you later choose a hosted AI feature that sends a processed copy for identification or translation.

Barcode lookup may send the barcode number, not your review text or photos, to Open Food Facts. If you add your own USDA FoodData Central key in Settings, ReoNo may also send that barcode number to USDA. Lookup is for suggesting a name and brand.

Saving a city from embedded photo GPS is optional and off by default. If you turn it on, ReoNo reads GPS from the photo to store a city with the review. Original photo files may still contain their own embedded location metadata.

Optional analytics and error reporting

PostHog analytics and error reporting are optional and off by default. During onboarding you can share anonymous usage data or decline. You can change this later in Settings with “Share Anonymous Usage Data.”

If you opt in, ReoNo may send anonymous usage events and crash or error reports to PostHog, such as whether a product was created, a barcode type was scanned, or an export ran. These events are usage counters. They are not your product names, notes, photos, barcodes, or other review content. You can turn this off at any time. While it is off, ReoNo does not send those analytics or error reports.

Subscriptions

Optional ReoNo Pro subscriptions are processed by Apple and RevenueCat. Apple handles the App Store purchase, payment method, receipts, and subscription management. RevenueCat tracks entitlement state so the app can tell whether Pro is active, restore purchases, and show localized prices.

ReoNo does not keep a copy of your payment card, App Store receipt, or raw RevenueCat identity in its own backend database. Settings can show a RevenueCat App User ID so you can copy it for support. Manage, cancel, or request Apple refunds through your Apple ID subscription settings.

Hosted AI image processing

Optional Auto-ID and translation features send a product image to ReoNo’s Vercel backend, which calls Vercel AI Gateway to identify a title and brand or to translate a title. This is used only when you run those features. Manual reviews, saved photos, barcodes, tags, iCloud sync, import, export, and already saved AI results remain available without it.

Before a model sees an image, the backend resizes it in memory to a maximum 1024-pixel dimension and re-encodes it as JPEG. That step removes EXIF, GPS, and other embedded photo metadata. Images exist only in function memory during the request. They are not written to Redis, object storage, logs, analytics, or traces.

What the backend stores

To enforce quotas and recover a lost response, the backend may store:

• hashed installation and customer identifiers, not the raw IDs
• usage counters, such as remaining free previews and weekly or monthly hosted-AI counts
• 15-minute encrypted replay data for a completed hosted-AI result, so a retry can return the same answer without calling the model again

Those identifiers are HMACs of a device installation secret and of the RevenueCat App User ID. Encrypted replay data expires after 15 minutes. Sanitized operational metrics may include request outcome, allowance class, cost, and latency. They do not include review content.

What the backend does not store or log

The ReoNo backend does not store or log product images, prompts, generated text, receipts, or raw RevenueCat identities. It also does not store installation secrets, provider keys, or raw network addresses. Generated text may exist only inside the 15-minute encrypted replay value, then it expires.

Contact, support, and deletion

For privacy questions, support, or deletion help, email ericwiener3@gmail.com. See Support for what to include.

You can delete reviews in the app, export a backup first if you want a copy, and use Settings to clear all iCloud library data. Turn off analytics in Settings to stop optional PostHog reporting. Manage Apple subscriptions in your Apple ID settings. For hosted-AI quota or identity questions, include the RevenueCat App User ID from Settings. There is no public self-serve reset button. Support can investigate after confirming ownership.

Deleting the app removes the local copy on that device. iCloud copies remain until you delete them in ReoNo or through your Apple account. Apple, RevenueCat, PostHog, and Vercel retain only what their own services need under their policies.

Children

ReoNo is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Changes

If this policy changes, the updated text will be published at https://reono.app/privacy with a new effective date.

Contact

Eric Wiener
ericwiener3@gmail.com
reono.app/support