Privacy Policy

Last updated: 2 October 2026. This policy covers the CruxR mobile app and website (the "Service"), operated by CruxR ("we", "us").

1. Information we collect

Account data: the username you choose, your email address, and a password (stored only as a salted hash). We do not ask for your phone number or real name.

Content you save: the links, text, documents and images you submit, and the AI-generated summaries, transcripts and metadata we create from them.

Usage and purchase data: your plan, remaining saves, referral codes you redeem, and subscription status supplied by Google Play / RevenueCat. We never see your card details.

Device and technical data: basic request data (IP address, app version, OS) processed by our hosting providers for security and abuse prevention. The app also keeps a short on-device diagnostic log that stays on your phone unless you share it with us.

Product analytics: how the app and website are used, such as screens and pages viewed, buttons tapped, session length, approximate country, device type, and which site a saved link came from (the domain only, never the full link). We also record anonymised session replays with all text, form fields and images masked, so we never see what you save, type or read. This is collected with PostHog (EU cloud) and tied to your account ID so we can improve the product. IP addresses are not stored.

Notifications: if you enable the daily digest, reminders are scheduled locally on your device; we do not collect a push token for this.

2. How we use it

To run the Service: fetch and analyse the links you submit, generate summaries, store your vault, enforce plan limits, process subscriptions, prevent abuse, and provide support. We use your email to let you recover your account (for example, to reset a forgotten password) and to send important service and account notices; we do not send marketing email without your consent. We do not sell your personal data, do not show third-party ads, and do not use your saved content to train public AI models.

3. Who we share it with

Service providers acting on our instructions: cloud hosting and database providers, AI inference providers that process the content you submit in order to produce your summary, Google Play and RevenueCat for subscription billing, and PostHog (hosted in the EU) for product analytics. We may disclose data if required by law or to protect the Service. Content is fetched only from public URLs you provide.

4. Retention and deletion

We keep your data while your account is active. You can delete your account at any time in the app (Account → Delete Account) or on the web at cruxr.live/delete-account. Deletion permanently removes your account, saved items and summaries from our systems; backups are purged within 30 days. We may retain limited records where law requires (for example, purchase records held by Google).

5. Security

Data is encrypted in transit (HTTPS). Access to production systems is restricted. No method of transmission or storage is perfectly secure.

6. Your rights

Depending on where you live (including the EEA/UK under GDPR, California under CCPA/CPRA, and India under the DPDP Act) you may have the right to access, correct, export or delete your data and to object to or restrict processing. Use the in-app deletion or contact us. We respond within 30 days. Where our processing relies on consent you may withdraw it at any time. Your data may be processed in countries other than your own; we rely on appropriate safeguards for such transfers.

7. Children

The Service is not directed to children under 13 (or under 16 where local law requires), and we do not knowingly collect their data. If you believe a child has provided data, contact us and we will delete it.

8. Changes

We will update this page and its date when this policy changes, and notify you in the app for material changes.

9. Contact

Questions or requests: [email protected].