Accrue is provided by Room to Grow LLC. It helps psychotherapy trainees keep records of supervised experience, on iPhone, on Android and on the web. This policy explains what we handle, why, who helps us, and your choices.
Accrue is not for client information
Do not enter client names, dates of birth, case numbers, contact details, diagnoses, session notes, or other clinical information. The one exception is the optional client code field on client sessions and schedules, which takes a client's initials (up to three letters) or a short code of up to four letters and numbers and nothing else; it stays in your own records and is left off printed logs, exports and analytics. Accrue is built to record the type, date, and length of your work, not who a client is or what happened in a session. If you enter client information anyway, we may delete it.
Information we handle
- Account information: your name, email address, a profile photo if you choose one, and an account identifier. If you use Sign in with Apple and hide your email, we receive Apple’s private relay address. If you sign in with Google, we receive the name and email Google shares.
- Your records: hours, activity types, dates, durations, sites, supervisors and any credentials you enter, program, state, license track, registration details, client codes if you add them, and your own reminders. Information about supervisors and sites is information you choose to enter.
- Purchase information: what you bought, subscription status, and receipt or transaction details. For web purchases, checkout also collects your email, billing country and postal code, and payment details. Stripe handles payment details, and we do not receive full card numbers.
- Program documents: if you send files through our program documents page, we receive your name, email address, whether you are program staff or a student, your program's state, type, and name, any notes, whether you asked to review the result before it goes live, and the files themselves, such as handbooks, calendars, and forms.
- Technical information: device and app version, crash reports, and basic usage events, described below.
How we use it
To run Accrue: sign you in, sync and calculate your records, prepare exports, confirm paid access and restore purchases, check new passwords against known breaches, understand how the app is used, whether people come back to it and whether onboarding and purchase flows work, find and fix crashes, answer support requests, and meet legal obligations and protect the service.
We use program documents, and the details sent with them, to set up and maintain Accrue's ledgers and task lists for that program, to contact you about them, and, if you ask, to send you the setup to review before it goes live.
We do not sell your personal information, and we do not use it for advertising or to track you across other companies’ apps and sites. We do not send your name, email address or the contents of your records to our analytics or crash tools. Our product analytics tool receives your account identifier while you are signed in, as described below.
Who helps us
We use service providers who process information for us under their own terms and privacy policies:
- Google: Firebase Authentication and Cloud Firestore for sign-in and synced records, and Google sign-in if you choose it. On Android, Google Play handles purchases and subscriptions. Our web API also runs on Google Cloud.
- Apple: Sign in with Apple (also offered on Android), App Store purchases, and Apple Maps search suggestions when you search for a work site on iPhone.
- Geoapify: on the web, the text you type into a site name or work address field is sent to Geoapify to suggest places and addresses. We do not send your name, account, or other records.
- Photon (komoot): on Android, the text you type into a site name field is sent to Photon, a place search built on OpenStreetMap data, to suggest places. We do not send your name, account, location or other records.
- RevenueCat, Google Play and Stripe: purchases and subscriptions. RevenueCat runs web checkout and subscription management, and Stripe processes web payments.
- PostHog (iPhone, Android and web apps): the web app at getaccrue.app/app sends the same PostHog usage events as the iPhone and Android apps, under the same rules. They are product events with fixed values, such as opening the app, which screen is open, logging an entry and whether it came from the plus button, the timer or your schedule, adding a ledger, creating an export, completing a task, signing in or out, and paywall and purchase steps. While you are signed in, the app tells PostHog your account identifier, the same one used for purchases, so your use across launches and devices counts as one person. A new random identifier starts when you sign out or a different account signs in. PostHog is not given your name, email address, hours, dates, sites, supervisors, ledger names, notes or other record content. Screen recording, automatic click capture and location lookup are off. The web app also sends no page addresses or referrers, and the demo workspace sends nothing.
- Sentry (iPhone and Android apps): crash and performance diagnostics. Sentry is not given your account identity or your records.
- Have I Been Pwned: when you create a password, a partial fingerprint of it, never the password itself, is checked against known breaches.
- Resend: sends our account emails: confirming your address, resetting a password, and one welcome email after you finish setup. It receives your email address and the email itself, which can include your first name and your program's name.
- Cloudflare: delivers our website and web app and passes requests on to our API. It handles each request, including your network address and browser details, to deliver it and protect the site.
- Hostinger: hosts the server that checks and stores program documents, counts website visits and takes Android waitlist sign-ups.
- Web3Forms: when you use our contact form, Web3Forms receives your name, email address, topic, and message. When you send program documents, it receives your name, email address, program details, notes, review request, and the names of your files, but not the files themselves. When you ask to hear when the Android app is available, it receives your email address. We also keep your Android notification email and submission date in our own database and private admin dashboard for up to three years, so we can send the release notification. You can ask us to remove your request. When you register interest in Accrue for Programs, it receives your name, email address, role, organization, program details, what you use today, any message, and whether you asked for updates. Web3Forms forwards these to us at admin@getaccrue.app and stores each submission under the form's current three-year retention setting. When you ask for the live demo, the same details are also kept in Cloud Firestore, and Resend, our email provider, receives your email address to send you the link. Do not include client or clinical information.
These providers may process information in the United States and other places they operate. We may also disclose information when the law requires it, to protect rights, safety, or the service, or as part of a merger, sale, or reorganization.
Visiting our website
Our marketing website uses a first-party analytics script and a random browser cookie, which expires after 30 days, to estimate unique visitors. We store only a hashed version of this random identifier, visit dates and counts for up to 30 days, without linking them to your account, email address or records. We do not retain IP addresses for this counter or send these counts to an outside analytics provider. Our marketing pages also use PostHog web analytics, which keeps a random identifier in your browser and records page views and page exits; automatic click capture and session recording are off, and visitors are not identified. Neither of these marketing measurements runs in the signed-in app, program-document upload or demo workspace. The signed-in web app has its own PostHog usage events, described above under Who helps us, and they are separate from these scripts. We skip both when your browser sends Global Privacy Control or Do Not Track, and turning off visitor measurement here stops both. You can also .
The web app and your browser
The web app stores your records and sign-in state in your browser so it loads quickly. It uses no advertising cookies. It also keeps a random analytics identifier in your browser's local storage for the PostHog usage events described above. Clearing your browser data removes that local copy, but not your synced records.
Connected tools
In web settings, under Settings, Account, API keys, you can create an API key that lets a tool you choose use your synced records. You choose Read only or Read and write. A Read only key can read your synced records and exports of your entries but cannot change anything. A Read and write key can also add, change, and delete your entries, and add and change your sites, supervisors, and activities. Anyone with an active key can do what its permissions allow, so share a key only with tools you trust and choose Read only unless a tool needs to change records. Changes made with a key reach your devices through sync like any other edit. The API does not return your reminder notes or supervisor contact details. A connected tool handles what it receives under its own policies, and revoking a key stops future access but does not remove copies already received or undo changes the key already made. We store a key’s name, permissions, expiration, the time zone and first weekday of the browser that created it, and usage details, not the key itself.
Program documents
Our program documents page is for handbooks, calendars, forms, and similar material about a training program. Do not send student records, client information, or anything that names a student or client. If we receive it, we may delete it.
Each file is checked on our own server with ClamAV, an open-source virus scanner, and for unsafe content such as macros. Files are not sent to an outside scanning service. A file that fails the check is deleted right away, and we keep only a record of its name and why it was refused.
Files that pass are stored on our server until we download them, and deleted from the server 30 days after that, or after 90 days if they are never downloaded. We keep the copies we download for as long as we use them to support that program, and you can ask us to delete them. Our server holds your network address in memory for up to an hour to limit repeated uploads and does not save it.
Security
We use reasonable technical and organizational safeguards, including access controls on synced records. No system is completely secure, and we cannot guarantee that information will never be accessed, lost, or disclosed.
Retention and deletion
We keep your account and synced records while your account is active. You can delete your account under Settings, Account, Delete account. We then delete your synced records, your sign-in, and local records on that device, and backups at our providers may persist for a limited time. Deleting your account does not cancel a subscription: cancel a web subscription in web settings, an App Store subscription in your Apple Account, and a Google Play subscription under Payments and subscriptions in Google Play. Providers such as Apple, Google, RevenueCat, and Stripe may keep transaction records as their own legal, tax, and fraud-prevention obligations require, and analytics and diagnostic data are kept for limited periods. On Android the app keeps its records outside the phone’s cloud backup, and signing out removes them from the phone after the server has confirmed it holds every change.
Your choices
You can review and edit your records, export them, revoke API keys, delete your account, and manage your subscription. Depending on where you live, you may have other rights, such as to access, correct, or delete information or to know what we hold. Email us to make a request. We will not treat you differently for using them, and we may need to verify it is you.
Who Accrue is for
Accrue is intended for adults in professional training in the United States. It is not for anyone under 18. If we learn we hold information from someone under 18, we will delete it.
Changes
We may update this policy and will change the date above. For material changes we will give notice in the app or by email.
Contact
Room to Grow LLC, 325 W Washington St #2950, San Diego, CA 92103. Privacy questions: admin@getaccrue.app.