ACCRUE / INFORMATION & SUPPORT
Privacy Policy
This policy explains how the Accrue app and this website handle personal information, and the choices and rights available to you.
Effective date: 2026-11-05 · Version: 2026-11-05-warning-v1
01Scope and contact
The operator identified on this page is responsible for personal information processing in the Accrue service. Use the contact email on this page for privacy questions or rights requests. This policy covers the Accrue app, account services, support communications and this website. Apple, your email provider, Telegram and exchanges handle their own services under their respective policies.
02Accounts and authentication
When you register or use an account, we process your email, account identifier and status, creation and login times, and an existing phone number if you have provided one. When a password is set, the server stores a salted password hash, rather than the plaintext password. Email verification and recovery involve your email, code verification records and expiry. When authenticator verification is enabled, the server stores a protected authenticator secret and verifies one-time codes to secure login, recovery and sensitive actions.
03Devices, local preferences and system authentication
The app stores preferences such as language, appearance and your last login email on your device. Login credentials use system-protected storage. Face ID, Touch ID and device passcode checks on iOS are performed by the operating system. We do not receive or store face or fingerprint templates or your device unlock passcode. Signing out clears the app's saved session credential but does not automatically delete your server account. You can manage preferences and permissions in the app or system settings.
04Signals, notifications and usage
We process the strategies you follow, notification preferences and related access requests to provide available market reference features. If you enable push notifications, processing also includes a push device token, installation identifier, environment and delivery status. Email notifications involve a verified email, unsubscribe records and delivery status. Optional notifications are used only when available in your version and service and authorized by you. Disabling strategy notifications does not stop essential security, account or billing communications.
05Purchases and subscriptions
Apple handles payment methods and payment details for App Store purchases. For an available purchase feature, Accrue processes product identifiers, transaction or original transaction identifiers, purchase and expiry times, refund or revocation status, and the association with your Accrue account to verify purchases, restore access and resolve billing issues. An App Store purchase does not provide us with your full payment card number or card security code. Merely displaying a plan in a version without purchasing does not create an actual store transaction.
06Existing accounts connected to exchanges
If you have voluntarily connected an exchange in an existing version offering that feature, the server also processes exchange account identifiers, encrypted API credentials, permission status, balances, positions, orders, fills, fees and reconciliation records to carry out the functions requested for that account, maintain security and handle records. This discloses existing processing. It does not promise public trading functionality or describe these records as processed only on your device. The public signal service does not require you to send exchange API keys through support or email.
07Support and technical logs
When you contact us, we process your email, message, attachments and information necessary to verify ownership. Requests to the app service or website involve IP addresses, request times and paths, browser or client information, response status and errors at the network and hosting layers to deliver content, protect services and troubleshoot. Never include passwords, one-time codes, authenticator recovery keys or exchange secrets in support messages or screenshots.
08Website, cookies and advertising tracking
This static website has no registration form, advertising, cross-app tracking, third-party usage analytics or external fonts. Language selection does not set preference cookies. Hosting and network security layers may still log requests or use necessary cookies for security checks. App login uses session credentials, and the web account service may also use necessary login cookies. These are separate from advertising tracking on the website. We do not sell personal information or use it for cross-app targeted advertising.
09Purposes and legal bases
As applicable, we process necessary information to provide the account, content and support services you request; to protect networks, prevent abuse and handle disputes where permitted by law and after balancing relevant rights; and to meet billing or other legal obligations. Optional push messages, strategy emails and permission-based features rely on the relevant permission or consent. You may withdraw optional permission without affecting lawful prior processing or losing paid features unrelated to that permission.
10Recipients and providers
Authorized personnel and service providers process information only as needed for the service. The website and API use the configured cloud hosting and network security services. iOS purchases and push messages involve Apple App Store and Apple Push Notification service respectively. Verification, recovery and subscription emails involve the configured email provider. If you voluntarily contact us through a published Telegram support link, Telegram processes those communications. Existing connected accounts also communicate with the applicable exchange as required for their actual features. Provider names, storage regions and activation status are described in the provider notice on this page. We require processors to provide contractual purpose restrictions and safeguards at least equivalent to this policy and applicable platform requirements. Legally required disclosure, genuine security incidents or business transfers are limited to necessary information and applicable notice and protection obligations.
11Storage, international processing and security
Servers, network edges, email or push providers may be located outside your country or region. See the provider notice on this page for the applicable locations. Where required, international processing uses an applicable transfer mechanism, and you may request information about relevant safeguards. We use measures including HTTPS, access controls, password hashing, encryption of sensitive credentials and system-protected local storage. No measure guarantees absolute security. We provide legally required incident notifications under applicable law.
12Retention and deletion criteria
Account information, verification settings and preferences are retained while the account exists and as needed to provide the service. Disabling an account, signing out or uninstalling is not deletion. Short-lived codes and challenges cannot be used after expiry; associated security records follow the actual cleanup process. Support records are retained until a request is resolved and for any period needed for related legal claims. Billing, tax and anti-fraud records are retained only as required by applicable law or a genuine dispute. After a verified deletion request, we delete or de-identify account and associated personal information no longer needed. We explain any necessary retained categories, reasons, applicable periods and backup handling when processing the request. Indefinite retention of all information is not a substitute for deletion.
13Access, correction, deletion and withdrawal
Use the contact email on this page to request access, correction, export or deletion. Where applicable law provides them, you may also request restriction, object to particular processing, withdraw consent or exercise portability rights. Provide your account email and request type; we ask only for information necessary to verify ownership. We respond within applicable legal deadlines and explain a lawful extension, refusal or available remedy. You may complain to the competent data protection authority. See the account and data deletion page for request options and their current availability.
14Notification and permission choices
Where provided, app notification settings let you disable strategy emails or push messages; system settings let you withdraw notification permission. Strategy emails with an unsubscribe link can also be stopped through that link. Declining optional notifications does not automatically cancel an App Store subscription. Apple manages Apple subscriptions, payment details and Apple accounts; we handle deletion requests for Accrue accounts.
15IP regional risk notices
Trusted network sources estimate the IP country for risk notices. Public-account records retain the latest country, risk category, observation time and an HMAC-derived IP fingerprint, rather than the raw IP. Network providers and security logs are described separately. Active acknowledgment records the account, notice version, content digest, language and server time. The current mode requires no manual residence check and does not deny business by IP country. Failed or unknown location also triggers a warning. Records support notices, maintenance and verification, not advertising profiles, and are retained as needed for those purposes and applicable law.
16Age and regions
The service is for people at least 18 who have reached their local age of majority, and does not target children. The system shows policy and market risk notices for all regions, including mainland China. IP location does not itself block registration, signals or purchasing. Mainland China carries elevated policy risk. Access is not evidence that the service is lawful, approved or licensed where you are; reference information and signals can themselves be restricted. Understand and follow the rules that apply to you before use.
17Changes
This page identifies the version and effective date. Material changes to data categories, purposes or sharing are communicated through the app, account email or another appropriate channel. Processing that legally requires new consent begins only after that consent is obtained. An update does not retroactively authorize previously unauthorized processing. Chinese and English versions describe the same rules; translation differences do not restrict mandatory consumer or privacy rights.
Service providers and processing locations
- Alibaba Cloud
- The API and this static site use Alibaba Cloud servers. The verified instance region is Singapore (ap-southeast-1). Processing covers server account and associated records, network requests and necessary logs for hosting, storage and service operation. This does not mean all email or network edge information is stored in Singapore.
- Cloudflare
- The domain uses Cloudflare for network delivery and security. Its global network processes request IP addresses, paths, client information and necessary security or network diagnostics, and may set necessary security cookies. Processing nodes vary with network routing.
- Apple
- App Store processes payments and transactions when purchasing is available. Apple Push Notification service handles device tokens and message payloads when push is enabled. Processing may occur globally. System biometrics are managed by the device; we do not receive biometric templates. Listing the provider does not mean purchasing or push is available in every version.
- Alibaba Cloud Enterprise Mail
- The current service uses encrypted Alibaba Cloud Enterprise Mail SMTP with accrue@xmwefun.com for account security, verification and available notifications. Processing includes recipient addresses, message contents and transmission information; mail processing and storage do not necessarily share the API server region.
- Telegram
- If you voluntarily contact a published Telegram support account, Telegram processes your platform profile and message contents under its policy, potentially outside your jurisdiction. Reading this policy does not require a Telegram account.