Is my data encrypted?

Yes. All traffic uses HTTPS. Credentials are handled via Apple Sign-In, Google Sign-In, or Firebase Authentication.

What that means in practice:

1. In transit: everything RecitID sends, including detection clips, Live audio chunks, scans, AI questions and your synced bookmarks, travels over encrypted HTTPS connections.
2. Passwords: RecitID never receives your Apple ID or Google password. With Apple or Google, you sign in on their own screen. With email and password, sign-in is handled by Firebase Authentication rather than a password database of our own.
3. Payments: subscriptions are paid through Apple or Google. RecitID doesn't receive your full card number or billing details.

Keeping your account safe:

1. Use Sign in with Apple or Google if you can; they come with their own security protections, such as two-factor authentication.
2. If you use email, choose a password you don't use anywhere else. "Forgot password?" ("Forgot Password?" on Android) on the email sign-in screen sends you a reset link.
3. Deleting your account requires a recent sign-in. If you signed in a while ago, RecitID asks you to confirm it's you first.

Good to know: Live transcripts and scan history are stored on your phone, not on our servers, so they're protected by your phone's own lock and encryption. The Privacy Policy describes how data is stored and for how long.