Legal

Cookies, App Software and Device Storage

Last updated 10 August 2026

This policy explains what Recovru stores on your device, what reads information from it, and what you can control. It covers both our website and the Recovru app. We have written it as a list of the actual things involved rather than a general explanation of what cookies are, because the general explanation tells you nothing useful. Dapper Trading LTD (company number 08800299), trading as Recovru, Oak House, Reeds Crescent, Watford WD24 4QP, is responsible for this. Questions: privacy@recovru.com.

The short version

We do not use advertising cookies, and we do not sell or share your data with advertisers.
Nothing that is optional runs until you agree to it, and every optional item has its own switch in Settings, then Privacy and data.
Some things cannot be switched off, because without them the app cannot sign you in, take a payment, or send help to your location. They are all listed here.
Refusing everything optional does not degrade the service. You get the same recovery, at the same price, at the same speed.
The app also contains software from other companies, such as Stripe for payments and OneSignal for notifications, and this policy names every one of them.
Some of that information travels outside the UK. Section 6 names each company, where it goes and what protects it.
Refusing is as easy as accepting, and closing the banner without choosing counts as refusing.
Recovru accounts are for adults only. If you are unhappy, tell us at privacy@recovru.com, and you can also complain to the Information Commissioner's Office.

This summary helps you read the document. The full text below is what applies.

Jump to a section

1. The short version

We do not use advertising cookies, and we do not sell or share your data with advertisers. Nothing that is optional runs until you agree to it. Analytics and crash reporting are off unless you turn them on. Some things cannot be switched off, because without them the app cannot sign you in, take a payment, or send help to your location. Those are listed below and nothing is hidden among them. Refusing everything optional does not degrade the service. You get the same recovery, at the same price, at the same speed.

2. What the law requires of us

Storing information on your device, or reading information already there, generally requires your consent. There are only two exceptions: where it is done solely to transmit a communication, or where it is strictly necessary to provide a service you have asked for. "Strictly necessary" means the service genuinely cannot work without it, not that it is convenient for us. We have applied that test honestly below, and where something is convenient rather than necessary we have put it in the optional list.

3. Strictly necessary: these cannot be turned off

Each item below is listed with its provider, what it does, and how long it lasts. Sign-in session. Provider: Recovru. What it does: keeps you signed in so you are not asked for your password on every screen. How long: until you sign out. Local app storage. Provider: Recovru (on your device only). What it does: remembers your profile, saved vehicles, saved places and settings so the app works offline and starts quickly. How long: until you sign out or delete the app. Consent record. Provider: Recovru. What it does: remembers which choices you made here, so we do not ask again and can show we asked. How long: 12 months. Payment session. Provider: Stripe. What it does: runs the card entry and payment sheet, and detects fraud on a payment. How long: session, and as set by Stripe. Security and abuse prevention. Provider: Recovru. What it does: detects automated abuse and protects accounts. How long: session. These are exempt from consent because the service you have asked for, signing in, booking, being found and paying securely, cannot be delivered without them.

4. Optional: off unless you turn them on

Usage analytics. Provider: Google (Firebase Analytics). What it does: which screens you visit and where people get stuck, so we can fix what trips people up. Default: on, and you can switch it off in Settings. Crash reporting. Provider: Google (Firebase Crashlytics). What it does: sends a technical report when the app crashes, so we can fix it. Default: off unless enabled. Personalised offers. Provider: Recovru. What it does: uses your job history to tailor membership pricing. Default: off. Marketing analytics. Provider: Recovru. What it does: anonymised analysis for product research. Default: off. You can change any of these at any time in Settings, then Privacy and data. Turning them off does not affect anything you can do in the app.

5. Things that are not cookies but still reach out from your device

The app contains software from other companies. These do not set cookies in the usual sense, but they do connect to those companies' servers, which means those companies can see your device's internet address. We think you should know about them, so here they all are. Payments. Company: Stripe. Why it is there: taking payment, holding the amount, paying operators. When it connects: when you add a card or a payment happens. Identity verification (operators only). Company: Didit Identity Spain, S.L. Why it is there: confirming an operator is who they say they are. When it connects: once, during operator sign-up. Push notifications. Company: OneSignal. Why it is there: telling you an operator accepted, is close, or has arrived. When it connects: on sign-in, and when a notification is sent. Crash and usage reporting. Company: Google (Firebase). Why it is there: diagnosing crashes and improving the app. When it connects: only if you have enabled it. Maps and location. Company: map and routing providers. Why it is there: showing the map, working out routes and arrival times. When it connects: whenever a map is on screen or a route is calculated. Vehicle lookup. Company: official vehicle data services. Why it is there: filling in your vehicle from its number plate. When it connects: when you enter a registration. Voice calls. Company: connection relay. Why it is there: connecting an in-app call when a direct connection is not possible. The call itself is never recorded or stored. When it connects: only during a call. Email. Company: Brevo. Why it is there: sending your booking confirmation, receipts and account emails. When it connects: when an email is sent to you. Sign in with Apple or Google. Companies: Apple, Google. Why it is there: signing you in without a password. When it connects: only if you choose that sign-in method.

6. Where this information goes

Supabase (database and hosting). Country: data in Frankfurt, Germany, reachable by the provider from outside the UK and Europe. What protects it: Standard Contractual Clauses with the UK Addendum. Didit Identity Spain, S.L. Country: Spain. What protects it: inside the European Economic Area, treated as adequate. Stripe Payments Europe, Limited. Country: Ireland, then the United States and other Stripe locations. What protects it: UK Extension to the EU-US Data Privacy Framework, with Standard Contractual Clauses behind it. Sendinblue SAS, trading as Brevo. Country: servers in France and Belgium, with access from Germany, India, the United States and Austria. What protects it: adequacy for the European servers; written confirmation sought for the rest. OneSignal, Inc. Country: servers in the Netherlands, reached from the United States. What protects it: UK Extension to the EU-US Data Privacy Framework, with Standard Contractual Clauses behind it. Google Cloud EMEA Limited (crash reporting). Country: Ireland, then wherever Google operates. What protects it: adequacy, then the UK Extension to the EU-US Data Privacy Framework. Google Ireland Limited (usage analytics). Country: Ireland, then wherever Google operates. What protects it: a separate contract from crash reporting, on the same footing. Anthropic Ireland, Limited (in-app assistant). Country: Ireland, with messages stored in the United States. What protects it: Standard Contractual Clauses with the UK International Data Transfer Addendum. Cloudflare, Inc. (call connection). Country: Cloudflare's network, which carries IP addresses but cannot decrypt the call. What protects it: UK Extension to the EU-US Data Privacy Framework, with Standard Contractual Clauses behind it. Vehicle data services. Country: United Kingdom. What protects it: no transfer.

7. Your choices, and how to change them

In the app: Settings, then Privacy and data. Every optional item has its own switch. There is no bundled "accept all". On the website: the cookie banner, and the "Cookie settings" link in the footer, available on every page. On your device: your phone settings control location, notifications, camera and photo access independently of anything here. With us directly: email privacy@recovru.com and we will action it. Refusing is as easy as accepting. Where we ask, "Reject all" is presented as prominently as "Accept all", closing the banner without choosing counts as refusing, and we will not ask again for six months unless you ask us to.

8. If you are under 18

Recovru accounts are for adults. You must be 18 or over to hold one, and we check date of birth at sign-up. We do not knowingly store anything on the device of a person we know to be under 18. If you believe we have, tell us at privacy@recovru.com and we will delete it.

9. Complaining

Tell us first at privacy@recovru.com. If you are not satisfied, you can complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or at ico.org.uk.

Recovru is a trading name of Dapper Trading LTD. Registered in England and Wales, Company No. 08800299. VAT No. 190396586. Registered office: Oak House, Reeds Crescent, Watford WD24 4QP, UK. Questions? Email recovru@webmastersldn.com.