Privacy Policy

1. Who we are

OctoCrux is operated by 0xBuooy Pte. Ltd. (“OctoCrux”, “we”, “us”, or “our”), a company incorporated in Singapore. This Privacy Policy explains what personal data we collect, how we use and protect it, and the choices and rights you have under the PDPA.

0xBuooy Pte. Ltd.
UEN: 202244810D
68 Circular Road, #02-01, Singapore 049422

2. Scope

This policy covers the OctoCrux mobile app, the official Hosted Service (our operated deployment of the Summariser service), and this website. It does not cover third-party websites you open in the Reader, nor a Summariser service you choose to host yourself — in that case the data goes to your own infrastructure and we never receive it.

OctoCrux is local-first and has no account system. We do not ask for your name, email address, or contact details to use the app.

3. Data stored on your device

The following stays on your device and is not transmitted to us as part of normal use:

• Your Feeds and their auto-detected titles.
• Article metadata (title, canonical URL, published date, feed-native id, owning Feed).
• Read/unread state and generated Summaries.
• App settings, including any Service URL you configure.

Article bodies are never persisted. Full Articles are fetched live in the Reader.

4. Data sent to the Hosted Service when you Summarise

The Hosted Service is contacted only when you ask to Summarise. For each Batch you trigger, the app sends:

• Each selected Article’s id, canonical URL, and title;
• an Authorization bearer credential (the Hosted credential) that identifies your install to the service.

Article bodies are not sent — the Hosted Service fetches each Article’s page itself, extracts readable text, prompts a model, and returns Summaries. We use this data to provide Summaries, operate and secure the service, prevent abuse, and diagnose failures.

5. Subscriptions and Summary balance

Purchases and your Summary balance are handled through RevenueCat and Apple. When you buy or restore, RevenueCat may process purchase information, product identifiers, subscription state, an App User ID, device information, and diagnostic events needed to operate purchases and maintain your Summary balance. Apple processes the payment under its own terms; we never receive your full payment card details.

The App User ID is anonymous — it is not linked to a real-world identity by us. The Hosted Service resolves it from your authenticated credential to read and spend your Summary balance; it does not store the balance itself.

6. The Reader

When you open a full Article, OctoCrux loads the Article’s original web page in the in-app Reader. That website is operated by a third party and may collect data according to its own privacy policy. We do not control those publishers.

7. This website

This marketing website is static. It sets no advertising or cross-site tracking cookies. Fonts are self-hosted, so visiting these pages does not leak your IP address to a third-party font provider. If we add privacy-respecting, cookieless aggregate analytics in future, we will update this section before doing so.

8. Purposes for which we use personal data

Where we do handle personal data, we use it to:

• provide and maintain the Summarise feature and your Summary balance;
• operate, secure, and improve the Hosted Service and prevent abuse;
• diagnose and fix failures; and
• comply with legal obligations.

Consistent with the PDPA’s Purpose Limitation and Notification Obligations, we collect, use, and disclose personal data only for purposes a reasonable person would consider appropriate in the circumstances and that we have made known to you.

9. Consent

By installing OctoCrux and choosing to Summarise via the Hosted Service, you consent to the handling of data described here. You may withdraw consent at any time by ceasing to use the Hosted Service — for example, by switching to your own Service URL or uninstalling the app. Withdrawing consent may mean we can no longer provide certain features.

10. Disclosure and overseas transfer

We rely on the following processors, some of which store or process data outside Singapore. We take reasonable steps to ensure they provide a standard of protection comparable to the PDPA (the Transfer Limitation Obligation):

Processor	Purpose
Cloudflare	Hosting and serving the Hosted Service and this website
RevenueCat	Subscription management and Summary balance
Apple	App distribution and in-app purchases
Model provider(s)	Generating Summaries from extracted Article text

We do not sell personal data. We do not use Article content, Feeds, or Summaries for third-party advertising.

11. Protection and retention

We make reasonable security arrangements to protect personal data in our control against unauthorised access, collection, use, disclosure, or similar risks (the Protection Obligation). Hosted Service traffic is encrypted in transit and authenticated with your bearer credential.

We retain personal data only for as long as necessary for the purposes above or as required by law, after which it is deleted or anonymised (the Retention Limitation Obligation). Operational logs are kept for a limited period for security and debugging.

12. Your rights under the PDPA

You may, subject to the PDPA:

• Access — request information about personal data we hold and how it has been used or disclosed;
• Correct — request correction of an error or omission;
• Withdraw consent — as described in section 9.

Because the app is local-first, most of your data already lives on your device and is under your control — uninstalling removes it. For data held by the Hosted Service, contact our DPO below. We will respond within the timeframes required by the PDPA.

13. Children

OctoCrux is rated 4+ but is intended for a general technical audience and is not directed at children. We do not knowingly collect personal data from children.

14. Data breaches

In the event of a data breach likely to result in significant harm or affecting a number of individuals at or above the prescribed threshold, we will notify the Personal Data Protection Commission and affected individuals as required by the PDPA.

15. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated “Last updated” date on this page. Continued use after changes constitutes acceptance.

16. Contact our Data Protection Officer

For any privacy question, access or correction request, or complaint, contact our Data Protection Officer:

Data Protection Officer
0xBuooy Pte. Ltd.
Email: [email protected]
68 Circular Road, #02-01, Singapore 049422

If we cannot resolve your concern, you may lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC).