Legal

Privacy Policy

Last updated 10 August 2026

This explains what we do with information about you. We have tried to write it so that you could actually read it while waiting for a recovery, rather than so that it survives a lawyer.

The short version

We collect what a rescue actually needs: who you are, your vehicle, where you are, what has gone wrong, and how you pay.
Your operator receives your name, your location, your vehicle and your photographs once they have accepted your job, because they cannot help you otherwise.
We do not sell your personal information, and we never will.
Job records, invoices and payments are kept for 6 years because tax and accounting law and the period for bringing a claim require it. Most other information goes much sooner.
Pricing, dispatch and cancellation charges are worked out automatically, and a person will check any of them if you ask. No account is ever closed, suspended or refused by software alone.
You can see everything we hold, take a copy elsewhere, correct it, delete it, object, or withdraw consent. Using any of these rights costs nothing.
Complain to us at privacy@recovru.com, and if you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk without telling us first.

This summary helps you read the document. The full text below is what applies.

Jump to a section

Who we are

Version 2026-08-10, effective 10 August 2026. CONTROLLER: Dapper Trading LTD (company number 08800299), trading as Recovru. ADDRESS: Oak House, Reeds Crescent, Watford, England, WD24 4QP. CONTACT: privacy@recovru.com. ICO REGISTRATION: [TO BE ADDED ONCE REGISTERED]. We are not yet able to publish a registration number, and we will add it here once our registration is complete. Cookies and the software inside the app are covered separately in our Cookies, App Software and Device Storage policy, so that this one stays about you rather than about technology.

1. What you must give us, and what happens if you do not

NAME, DATE OF BIRTH AND MOBILE NUMBER. Must you? Yes, required to hold an account. If you do not: we cannot open an account. Date of birth is how we check you are 18 or over. EMAIL ADDRESS. Must you? Yes. If you do not: we cannot send you a booking confirmation or a receipt, both of which we are legally required to provide. YOUR LOCATION. Must you? Yes, to book. If you do not: we cannot send anyone to you. You can set an address manually instead of using live location. VEHICLE REGISTRATION. Must you? Yes, to book. If you do not: we cannot price the job or send the right equipment. PAYMENT CARD. Must you? Yes, to book. If you do not: we cannot hold or take payment, so no operator can be dispatched. PHOTOGRAPHS OF THE PROBLEM. Must you? For some job types. If you do not: you can tell us you are somewhere unsafe and continue without them. ANYTHING ABOUT A DISABILITY OR ACCESS NEED. Must you? No, entirely your choice. If you do not: nothing. We simply will not know to make the adjustment in advance.

2. What we collect, why, and what allows us to

NAME, CONTACT DETAILS, DATE OF BIRTH. Why: to run your account and check you are 18. Legal basis: contract; legal obligation. YOUR LOCATION. Why: to send an operator to you, and to show you their approach. Legal basis: contract. VEHICLE DETAILS FROM THE REGISTRATION. Why: to price the job and send the right equipment. Legal basis: contract. WHAT HAS GONE WRONG, AND YOUR PHOTOGRAPHS. Why: so the operator arrives prepared. Legal basis: contract. PAYMENT DETAILS AND HISTORY. Why: to hold and take payment, and issue invoices. Legal basis: contract; legal obligation for accounting. MESSAGES AND THE FACT OF CALLS. Why: so you and your operator can communicate, and to resolve disputes. Legal basis: contract; legitimate interests in resolving disputes with evidence. RATINGS YOU GIVE. Why: so other customers can see who is coming. Legal basis: legitimate interests in a trustworthy network. FRAUD AND SAFETY SIGNALS. Why: to protect customers and operators. Legal basis: legitimate interests. APP USAGE AND CRASH REPORTS. Why: to fix what breaks. Legal basis: your consent, which you can withdraw at any time. MARKETING PREFERENCES. Why: to send you offers only if you asked for them. Legal basis: your consent. Where we rely on legitimate interests we have weighed our reasons against your rights, and you can ask us for that assessment or object at any time. IMPROVING RECOVRU, AND UNDERSTANDING DEMAND. What we use: how jobs actually ran, which screens you used, and what you booked. Why: to make the service work better and to better understand our customers, so there is an operator near you when you need one. Legal basis: our legitimate interests, weighed against your rights, and set out in full in section 5, which also tells you how to object.

3. Sensitive information

WE ONLY HOLD TWO KINDS, AND ONLY BECAUSE YOU CHOSE TO TELL US. Some information gets extra protection in law. We hold it only where you have given it to us deliberately, and we have identified below exactly what allows us to. HEALTH OR DISABILITY INFORMATION. When it arises: only if you tell us about an access need, in the notes when you book or by messaging support, so your operator arrives able to help you properly. What allows us to hold it: your explicit consent, given at the moment you tell us. It stays with that job and is not copied onto your profile, so tell support and we will remove it from the record. INFORMATION IN A PHOTOGRAPH OR MESSAGE. When it arises: if you happen to include something sensitive when describing your problem or messaging your operator. What allows us to hold it: your explicit consent, given when you send it. We do not go looking for it and we do not use it for anything other than the job. We do not carry out any biometric processing on customers. Operators go through an identity check that does involve biometric data; that is covered in the Operator Privacy Notice, not here.

4. Decisions made automatically

Some things in the app happen without a person looking at them. None of them decides anything about you as a person, and none of them has a legal effect on you or anything similarly significant, but you should know they exist. PRICING. What it does: works out your price from the job type, distance, time of day, area and demand. What you can do: the price is shown before you commit. If it looks wrong, ask us and a person will check it. DISPATCH. What it does: chooses which operators are offered your job, by distance and driving time. What you can do: nothing is decided about you, it is about who is nearby. CANCELLATION CHARGE. What it does: calculates the charge from the distance and time actually travelled. What you can do: you see the figure before confirming, and a person reviews it if you challenge it. FRAUD AND SAFETY CHECKS. What they do: flag unusual activity for a person to look at. What you can do: a person always makes the decision. Ask us and we will explain. No account is ever closed, suspended or refused by software alone. A person decides, you will be told, and you can ask for it to be looked at again.

5. Improving Recovru: research, development and analytics

We use information about how Recovru is used to make it work better, and you should be told that plainly rather than find it buried in a permission. WHAT WE DO WITH IT. We look at how jobs actually run, so we can price and dispatch them better: how long operators take to reach people in an area, where cancellations cluster, which screens people abandon, and which faults turn out to need a different service than the one booked. We test changes to the app against what happened before them. We produce statistics about the business for ourselves and, in aggregate form, for insurers and partners. WHAT ALLOWS US TO. Our legitimate interests in running and improving a service people can rely on, and in understanding demand well enough to have an operator near you when you need one. We have weighed that against your interests: the work is about patterns rather than people, so wherever the question can be answered from aggregated or pseudonymised data we use that instead of your record, and we do not use it to make any decision about you as an individual. You can ask us for that assessment. HOW WE USE IT TO BETTER UNDERSTAND OUR CUSTOMERS. Understanding which services customers actually need, in which places and at which times, is how we decide where to recruit operators and what to build next. That is the improvement purpose, not marketing: we do not build advertising profiles and we do not sell any of it. YOUR RIGHT TO OBJECT. You can object to this use, at any time and without giving a reason, and we will stop unless we have compelling grounds that override your objection. In the app: Settings, then Privacy and data, then Share trip data, which switches off the use of your journeys for this purpose. Or email privacy@recovru.com. Turning it off does not affect your bookings, your price or the operators you are offered. WHERE WE ASK INSTEAD. App usage analytics and crash reporting are not covered by legitimate interests, because storing and reading identifiers on your device needs your consent under the Privacy and Electronic Communications Regulations. We ask for that separately, it is off unless you say yes, and you can withdraw it in Settings at any time. WHAT WE NEVER DO WITH IT. We do not train any model to identify a person. We do not use your data to work out anything about your health, beliefs or finances. We do not use anything an operator sent us for verification, including their documents or the images of their face, for any purpose other than verifying them.

YOUR OPERATOR. What they get: your name, location, vehicle, what has gone wrong, your photographs, and any access note. Why: they cannot help you otherwise. OUR PAYMENT PROVIDER. What they get: what is needed to hold and take payment. Why: to take payment. OUR HOSTING, EMAIL, NOTIFICATION AND MAPPING PROVIDERS. What they get: only what each needs to do its part. Why: to run the service. INSURERS AND PROFESSIONAL ADVISERS. What they get: information about a specific claim or dispute. Why: only where there is one. POLICE OR A REGULATOR. What they get: what they are legally entitled to require. Why: where we must, or where someone is at risk. We do not sell your personal information, and we never will.

7. Who inside Recovru can see it

Our staff use an internal console to run the service and resolve problems. Access is limited to those who need it, staff are bound by confidentiality, and what they look at is recorded. Staff do not browse customer records or locations out of interest.

8. How long we keep it

YOUR ACCOUNT. How long: while you have one, then 12 months. Why: so you can come back without starting again. JOB RECORDS, INVOICES AND PAYMENTS. How long: 6 years. Why: tax and accounting law, and the period in which a claim can be brought. YOUR LOCATION DURING A JOB. How long: 12 months. Why: long enough to answer a dispute about what happened. PHOTOGRAPHS OF THE PROBLEM AND THE FINISHED WORK. How long: 12 months, or until a dispute ends. Why: they are the evidence of what was done. MESSAGES AND CALL RECORDS. How long: 90 days, longer if the job is disputed. Why: support and disputes. HEALTH OR ACCESS INFORMATION. How long: until you remove it. Why: it is yours to keep on file or not. POLICY ACCEPTANCES. How long: 6 years. Why: to show what you agreed to and when. MARKETING PREFERENCES. How long: until you change them, then a record that you opted out. Why: so we do not contact you again by mistake. Information in a backup is deleted when that backup is overwritten in the normal cycle, which is never longer than 30 days. We do not restore deleted information back into the live service from a backup.

9. Where it goes

Some of the companies that help us run Recovru are outside the United Kingdom. That is allowed, but only if the information is protected to the standard UK law requires. Below is every one of them, what it does, where the information actually goes and what protects it. Where the honest answer is that something still needs confirming, we say so rather than leave a comforting gap. OUR DATABASE AND THE SERVERS THE APP RUNS ON. Who: Supabase. Where it goes: your data sits in Frankfurt, Germany. The company itself is outside the UK and Europe and can reach it from there. What protects it: Standard Contractual Clauses with the UK Addendum. TAKING PAYMENT AND PAYING OPERATORS. Who: Stripe Payments Europe, Limited (Ireland). Where it goes: Ireland, then the United States and other countries where Stripe operates. What protects it: the UK Extension to the EU-US Data Privacy Framework, with Standard Contractual Clauses behind it. CHECKING AN OPERATOR IS WHO THEY SAY THEY ARE. Who: Didit Identity Spain, S.L. Where it goes: Spain. What protects it: Spain is in the European Economic Area, which UK law treats as safe. No extra safeguard needed. SENDING YOUR CONFIRMATIONS AND RECEIPTS. Who: Sendinblue SAS, trading as Brevo (France). Where it goes: servers in France and Belgium, with company access from Germany, India, the United States and Austria. What protects it: the European servers are covered by adequacy. We are seeking written confirmation of the safeguard for the wider access, and will publish it here. SENDING THE NOTIFICATIONS THAT TELL YOU AN OPERATOR IS COMING. Who: OneSignal, Inc. (United States). Where it goes: servers in the Netherlands, reached from the United States. What protects it: the UK Extension to the EU-US Data Privacy Framework, with Standard Contractual Clauses behind it. TELLING US WHEN THE APP CRASHES. Who: Google Cloud EMEA Limited (Ireland). Where it goes: Ireland, then wherever Google operates. What protects it: adequacy for the Irish leg, and the UK Extension to the EU-US Data Privacy Framework for the rest. TELLING US WHICH SCREENS PEOPLE GET STUCK ON, IF YOU HAVE SWITCHED IT ON. Who: Google Ireland Limited. Where it goes: Ireland, then wherever Google operates. What protects it: a separate contract from the crash reporting one, on the same footing. READING AN OPERATOR'S INSURANCE CERTIFICATE AND CHECKING IT MAKES SENSE. Who: Didit Identity Spain, S.L. Where it goes: Spain. What protects it: Spain is in the European Economic Area, which UK law treats as safe. No extra safeguard needed. This reading was done by Google Cloud until 30 July 2026; it is now done by the same provider that runs the identity check, so an operator's documents pass through one processor rather than two. THE IN-APP ASSISTANT, IF YOU USE IT. Who: Anthropic Ireland, Limited. Where it goes: Ireland, and the messages are stored in the United States. What protects it: Standard Contractual Clauses with the UK International Data Transfer Addendum. Anthropic does not train its models on what you send. CONNECTING AN IN-APP CALL WHEN A DIRECT CONNECTION WILL NOT WORK. Who: Cloudflare, Inc. (United States). Where it goes: Cloudflare's network. It carries both people's IP addresses and how long the call lasted. It cannot listen to the call: the audio is encrypted between the two phones before it gets there. What protects it: the UK Extension to the EU-US Data Privacy Framework, with Standard Contractual Clauses behind it. FILLING IN YOUR VEHICLE FROM ITS NUMBER PLATE. Who: our vehicle data provider. Where it goes: United Kingdom. What protects it: it never leaves the UK. Two honest notes on that table. Where a company is outside the UK, putting your data on a European server does not by itself solve the problem, because the company can still reach it from where it is: that is why the database row names a safeguard rather than resting on Frankfurt. And the assistant keeps what you send for thirty days in the ordinary course, longer only where something you sent was flagged for review under its provider's usage rules. Ask us at privacy@recovru.com for a current copy of this list and the safeguard for each.

10. Your rights

SEE EVERYTHING WE HOLD. How: Settings, then Access your data, or email us. Free, normally within one month. GET A COPY TO TAKE ELSEWHERE. How: the same place produces a file you can keep or share. CORRECT SOMETHING WRONG. How: edit it in the app, or tell us. DELETE IT. How: Settings, then Delete account. You choose immediate deletion, or a six-month freeze first in case of a dispute. OBJECT, OR ASK US TO RESTRICT USE. How: email us and tell us why. WITHDRAW CONSENT. How: Settings, for analytics and marketing. For an access need you have told us about, ask support and we will remove it. Withdrawing does not undo what we did before. COMPLAIN. How: to us first, then to the Information Commissioner. If you cannot use the app to exercise a right, email or write to us and we will do it for you. No right is only available through the app, and using any of them costs nothing.

11. Children

Recovru is not for children. You must be 18 or over to hold an account, which is why we ask for your date of birth when you sign up and check it against the identity documents we see. We do not knowingly collect information about anyone under 18, we do not advertise to children, and nothing in the app is designed to appeal to them. A child may still be present at a breakdown, and may appear in a photograph you send us of your vehicle or the road. We do not seek that, we do not identify anyone in your photographs, and the photograph is kept against the job in the ordinary way and deleted with it. If you believe a person under 18 has opened an account, tell us at privacy@recovru.com and we will close it and delete what we hold, keeping only what we must to show that we did.

12. Changes and complaints

CHANGES. If we change this policy we will tell you in the app, and where the change is significant we will ask you to read it before you carry on using Recovru. The version and date at the top tell you which one applies. We do not make a change take effect retrospectively for information we already hold under the older version. COMPLAINING TO US. Tell us at privacy@recovru.com. We would rather hear it and fix it. COMPLAINING ABOUT US. You can complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or at ico.org.uk, and you can go to them without telling us first. You can also take a claim to court. Complaining costs you nothing and we will not treat you differently for doing it. IF SOMETHING GOES WRONG WITH YOUR DATA. If there is a breach of security that is likely to put your rights or freedoms at risk, we will tell you without undue delay, in plain words, and tell you what we are doing about it. Where the law requires it we also report it to the Information Commissioner within 72 hours of becoming aware.

Recovru is a trading name of Dapper Trading LTD. Registered in England and Wales, Company No. 08800299. VAT No. 190396586. Registered office: Oak House, Reeds Crescent, Watford WD24 4QP, UK. Questions? Email recovru@webmastersldn.com.