Privacy Policy

Last updated 25 June 2026 · published centrally by AKdev and shared across every app it publishes, Crub included.

This Privacy Policy explains how AKdev Ltd collects, uses, and protects personal data across all of the websites, apps, and services we publish. It applies to everyone who uses an AKdev product. We are the “controller” of the personal data described here for the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018) and, where applicable, the EU GDPR.

1. Who we are

AKdev Ltd, company number SC892925, with its registered office at Suite 2/3, 48 West George Street, Glasgow, G2 1BP. For any privacy question or to exercise your rights, contact privacy@crub.ai.

2. The data we collect

We collect only what we need to run our products. The categories below describe the kinds of data any AKdev app may process; which apply to you depends on the product and the features you use. Each app also discloses the specific data it collects through its app-store privacy label and in-app permission prompts.

Account data – such as your name, email address, authentication identifiers, and settings.
Content you create – the data you add while using a product, stored in your account.
Location data – where an app uses it, the approximate or precise location you set or permit, to provide location-aware features.
Photos, media, and sensor data – where an app uses it, images or scans you choose to capture, processed to deliver the feature you requested.
Usage and device data – limited, privacy-respecting analytics such as device type, app version, and how features are used, to keep our products working and improve them.
Communications – the content of messages you send us (for example support requests).

We do not intentionally collect special-category data, and we ask that you do not send it to us unless a feature specifically requires it. Where a feature does require it, we process it only with your explicit consent – the condition we rely on under Article 9 of the UK GDPR – and you can withdraw that consent at any time.

3. How and why we use data, and our lawful bases

Under the UK GDPR we rely on one or more of the following lawful bases:

Performance of a contract – to create and maintain your account and provide the features you ask for.
Legitimate interests – to secure, maintain, and improve our products, prevent abuse, and communicate with you about them, balanced against your rights.
Consent – for optional features that require it (for example device location, camera, or any marketing emails). You can withdraw consent at any time.
Legal obligation – to comply with law, such as tax, accounting, and responding to lawful requests.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Cookies and analytics

Our websites use only the cookies that are strictly necessary for them to function. For analytics we use Vercel Web Analytics and Speed Insights, which are cookieless: they set no cookies and store no other identifier on your device, and they do not read any identifier stored on it. Visitors are counted from a hash that Vercel generates server-side from each incoming request and discards within 24 hours, and the statistics we see are aggregated and not tied to you or your IP address. Because we neither store nor access information on your device for analytics, this does not require your consent under PECR. We use no advertising cookies and no cross-site tracking.

5. Sharing and sub-processors

We share personal data only with service providers (“processors”) that help us run our products, under contracts that require them to protect it and use it only on our instructions. The processors we rely on today are:

hosting, database, and infrastructure (Supabase and Vercel);
product analytics and performance monitoring (Vercel);
email and productivity tooling (Google Workspace).

Where you make a payment, it is handled by the relevant app store or payment provider – Apple, Google, or Stripe. For those payments they act as independent controllers of your payment data under their own privacy policies, not as our processors, and we never receive your full card details.

We may also disclose data where required by law, to protect our rights or users’ safety, or in connection with a business transfer.

6. International transfers

Some providers may process data outside the UK or European Economic Area. Where they do, we rely on an adequacy decision or appropriate safeguards (such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses) so your data stays protected.

7. Retention

We keep personal data only for as long as needed to provide the Services and to meet legal, accounting, or reporting requirements, after which it is deleted or anonymised. As a guide, account and content data is kept while your account is active and removed when you close it; records we must keep for tax and accounting are retained for six years, as UK law requires. You can delete your content from within a product, and closing your account removes your personal data except where we must retain some of it by law.

8. Your rights

Subject to the conditions in the law, you have the right to:

access a copy of the personal data we hold about you;
have inaccurate data corrected;
have your data erased;
restrict or object to certain processing;
data portability; and
withdraw consent at any time, without affecting earlier processing.

To exercise any of these, email privacy@crub.ai. We will respond within one month and will not charge a fee in most cases.

9. Automated decisions

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

10. Children

Our products are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact privacy@crub.ai and we will delete it.

11. Changes to this policy

We may update this policy as our products or legal obligations change. We will revise the “last updated” date and, for material changes, take reasonable steps to notify you.

12. Complaints and contact

For any privacy matter, contact AKdev Ltd at privacy@crub.ai. If you are in the UK and are not satisfied with our response, you can complain to the Information Commissioner’s Office (ico.org.uk); if you are in the EU, you may contact your local supervisory authority. We would appreciate the chance to resolve your concern first.