Privacy Policy

1. Who We Are

Accruva is a speed-reading and study aid application and website developed by WulverDev Ltd, a company registered in Scotland, United Kingdom.

• Company number: SC884836
• Registered office: 5 South Charlotte Street, Edinburgh, EH2 4AN

In this policy, “we”, “us”, and “our” refer to WulverDev Ltd, and “you” refers to the user of the Accruva application or the accruva.app website.

Contact: privacy@accruva.app

2. Data We Collect

Accruva is designed with data minimisation in mind. We collect different data depending on whether you use the App or the Website, whether you create an account, and which features you use.

2.1 The App — Without an Account (Local Only)

If you use Accruva without creating an account, all your data stays on your device. This includes your reading progress, flashcards, notes, highlights, bookmarks, quizzes, study goals, and preferences. Nothing is transmitted to our servers except as described in Section 2.3.

2.2 The App — With an Account

If you create an account, the following is synced to our cloud service (Supabase):

• Email address (for authentication)
• Reading progress, notes, highlights, bookmarks, and flashcards
• Study goals and streak data

2.3 The Website

When you visit accruva.app, the following data may be collected:

• Analytics data (Google Analytics 4): Pages visited, time on page, scroll depth, button clicks, referral source, device type, browser, screen resolution, and approximate geographic location. This data is collected via cookies and only activated after you provide consent through our cookie banner.
• Server logs (Hostinger): Our hosting provider automatically records your IP address, browser user-agent string, pages requested, and timestamps in standard server access logs. These logs are used solely for security monitoring and are retained for a limited period in accordance with Hostinger’s data retention policies.
• CDN data (Cloudflare): All website traffic is routed through Cloudflare’s content delivery network for performance and security. Cloudflare may process your IP address, request headers, and connection metadata. Cloudflare’s processing is governed by their privacy policy.
• Email correspondence: If you contact us via email (hello@accruva.app, support@accruva.app, or privacy@accruva.app), we store your email address and the content of your message for the purpose of responding to your enquiry.

2.4 Third-Party Services

Service	Data Shared	Purpose	Used By
Supabase	Email, reading data (if signed in)	Authentication and cloud sync	App
RevenueCat	Purchase history, subscription status	Subscription management	App
Google AdMob	Device identifiers, ad interactions	Serving advertisements (free tier only)	App
Sentry	Crash reports, device info, stack traces	Crash reporting (opt-in only)	App
Google Gemini (via Supabase)	Document text excerpts	AI-powered quizzes, summaries, flashcards	App
dictionaryapi.dev	Individual words	Dictionary lookups	App
Google Analytics 4	Browsing behaviour, device info, IP address	Website usage analytics	Website
Cloudflare	IP address, request headers	CDN, SSL, security	Website

2.5 What We Do NOT Collect

• We do not collect your name, phone number, or physical address
• We do not store the documents you import into the App — text is processed on your device
• We do not use dedicated analytics or tracking SDKs in the App beyond Sentry (opt-in crash reporting)
• We do not sell, rent, or trade your personal data to third parties
• Pro subscribers see zero advertisements — no ad-related data is collected for Pro users
• We do not use tracking pixels, retargeting, or behavioural advertising on the Website

3. Cookies (Website)

The accruva.app website uses cookies. We use the Complianz cookie consent plugin to obtain your consent before setting any non-essential cookies, in compliance with UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

• Essential cookies: Required for the website to function (e.g., cookie consent preferences). These do not require consent.
• Statistics cookies: Used by Google Analytics 4 to understand how visitors use the website. These are only activated after you give consent via the cookie banner.

You can change or withdraw your cookie preferences at any time by clicking the cookie settings link in the website footer. Your browser also allows you to block or delete cookies through its settings.

4. AI Features and Document Content

When you use AI features in the App (quizzes, flashcards, summaries), excerpts of your document text are sent to Google Gemini via our Supabase Edge Functions for processing. This text is used solely to generate the requested output and is not stored on our servers or by Google beyond the duration of the API call. No document content is retained after the response is returned.

AI features are enabled by default because they form a core part of the Accruva service. You can disable AI features at any time via Settings → Privacy → AI Content Generation. When disabled, no document text is transmitted to Google Gemini and the AI features are unavailable until you re-enable them. Disabling AI features does not affect any other part of the App.

5. Advertising

Free-tier App users may see advertisements served by Google AdMob. AdMob may collect device identifiers and ad interaction data in accordance with Google’s Privacy Policy. We use the Google User Messaging Platform (UMP) SDK to obtain your consent before serving personalised advertisements, in compliance with GDPR and other privacy regulations.

All paid subscription tiers are completely ad-free. No ad-related data is collected for subscribers. The Website does not display any advertisements.

6. Crash Reporting (Sentry)

The App uses Sentry for crash reporting, but only if you opt in via the “Anonymous Analytics” toggle on the consent screen. If you decline, Sentry is never initialised and no crash data is transmitted. Crash reports may include device model, operating system version, and technical error details. They do not include your documents, notes, or personal content.

7. Age Restriction

Accruva is rated 13+. We do not knowingly collect personal data from children under the age of 13. Users under 13 may use the App fully without creating an account — in this case, no personal data leaves their device (except dictionary lookups and AI feature usage as described above). The Website does not require an account or collect personal data from visitors beyond standard analytics (with consent).

8. Data Storage and Security

Cloud data is stored on Supabase infrastructure with encryption in transit (TLS) and at rest. Local data is stored on your device using SQLite with standard operating system protections. We do not have access to your device’s local storage.

The Website is served over HTTPS with SSL certificates managed via Cloudflare (Full Strict mode). Website hosting is provided by Hostinger with server-level security protections. Email communications are secured with SPF, DKIM, and DMARC authentication.

9. Legal Basis for Processing (UK GDPR)

We process personal data under the following legal bases:

• Consent: For website analytics cookies, personalised advertising in the App, and crash reporting. You may withdraw consent at any time.
• Contract (performance of a contract): For processing data necessary to provide the App and its features when you create an account, and for processing document excerpts through Google Gemini when you use AI features (quizzes, flashcards, summaries). AI processing is integral to delivering the AI features that form part of the Accruva service.
• Legitimate interests: For server log processing (security monitoring) and responding to your email enquiries.

10. Your Rights (UK GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the following rights:

• Access: Request a copy of the data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data
• Withdraw Consent: Withdraw consent for crash reporting, personalised ads, or website analytics cookies at any time via the App’s Settings or the Website’s cookie settings
• Complain: You have the right to lodge a complaint with us directly. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk

To exercise any of these rights, email privacy@accruva.app. We will respond within 30 days.

Account deletion is available directly within the App via Settings. Deleting your account permanently removes all cloud-synced data from our servers.

11. Data Retention

• App account data: Retained for as long as your account is active. Permanently deleted within 30 days of account deletion.
• Website analytics: Retained in accordance with Google Analytics 4’s default retention settings (14 months). Anonymised and aggregated data may be retained longer.
• Server logs: Retained in accordance with Hostinger’s standard log retention period.
• Email correspondence: Retained for as long as necessary to resolve your enquiry, then deleted within 12 months.
• Local device data: Removed when you uninstall the App or clear app data.

12. International Transfers

Some of our third-party service providers (Supabase, Google, Sentry, Cloudflare) may process data outside the United Kingdom. Where this occurs, appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions, to ensure your data receives an equivalent level of protection.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via an in-app notification and/or a notice on the Website. The “Last updated” date at the bottom of this page will always reflect the most recent revision.

14. Contact

For any privacy-related questions, requests, or concerns:

Email: privacy@accruva.app
WulverDev Ltd (SC884836)
5 South Charlotte Street, Edinburgh, EH2 4AN

Last updated: May 2026