La ubicación se usa para verificar la tienda, no para seguir a la persona.

Lo que usa Recall durante una sesión activa

A valid RedHawk access token, foreground ubicación permission, a customer-confirmed store, and the product identifiers entered or scanned during the active session.

Lo que conserva una señal confirmada

The recall and product identifiers, time, confirmed store, city/state, a coarse ubicación cell, evidence confidence, and an anonymous token-account reference.

Lo que no se conserva en una señal

No continuous movement history, no raw camera frames, no contact list, no advertising identifier, no home route, and no precise GPS coordinate.

Anonymous device continuity for free trials

Recall uses a high-entropy anonymous per-install device identifier plus a secure HttpOnly server binding so an active free trial can be recognized and the same installation cannot repeatedly redeem the same campaign QR. Recall does not request, read, or retain the phone IMEI, serial number, contacts, or advertising ID. Clearing browser/site storage can reset browser-level identity; a normal website/PWA cannot obtain an unresettable hardware identifier.

Pedidos y pagos

Recall keeps order identifiers, plan, billing status, organization name, contact email, payment-provider customer/subscription identifiers, and access entitlement status. Raw card numbers, bank-account credentials, and payment authentication data are entered with and retained by the payment provider, not Recall.

Contacto con tiendas

A detection enters a private review queue. RedHawk does not automatically accuse or contact a store from a single unreviewed scan.