Privacy Policy
This Privacy Policy explains what information Crew ("we," "us," or "our") collects, how we use it, who we share it with, and the rights you have over your data when you use the Crew mobile application and related services (the "Service").
1. Information we collect
We collect three categories of information:
Information you provide
- Account data. Phone number or email, password (stored hashed), display name, username, and avatar.
- Profile data. Date of birth, sex, height, weight, fitness goals, dietary preferences, and similar inputs collected during plan setup.
- Content you create. Workouts, daily logs, photos, notes, supplements, and crew chat messages.
- Support correspondence. Messages you send through the Help & Support screen.
Information collected automatically
- Device data. Device model, operating system version, app version, language, time zone, and a randomly generated device identifier.
- Usage data. Screens viewed, actions taken, feature interactions, and crash diagnostics. We use this to understand how the app is used and to fix bugs.
- Push tokens. When you enable notifications, we collect the Apple/Google push token associated with your device so we can deliver reminders and crew alerts.
Information from third parties
- Apple In-App Purchase. When you subscribe, Apple shares the receipt and subscription status with us. We do not see your full payment instrument.
2. How we use information
We use the information we collect to:
- Provide, operate, and improve the Service.
- Generate personalized fitness plans and progress insights.
- Send notifications (daily reminders, crew updates, milestones) you have opted into.
- Verify your account, prevent fraud, and enforce our Terms.
- Comply with legal obligations and respond to lawful requests.
- Communicate with you about updates, security issues, and support.
We do not sell your personal information.
3. Sharing
We share information only in the following situations:
- With your crew. Content you post in a crew (workouts, messages, photos) is visible to crew members.
- Service providers. We use vetted vendors for hosting, analytics, push notification delivery, and crash reporting. These providers process data on our behalf and are bound by confidentiality obligations.
- Apple. Subscription transactions are processed by Apple under their own privacy policy.
- Legal compliance. We may disclose information when required by law, subpoena, or to protect the rights, property, or safety of Crew, our users, or others.
- Business transfers. If Crew is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.
4. Data retention
- Active accounts. We retain your data for as long as your account is active.
- Pause. When you pause your account, your data is retained but hidden from other users until you sign back in.
- Deletion. When you request account deletion, your data enters a 30-day grace period during which you can restore the account by signing back in. After 30 days, personal data is anonymized or deleted, except where retention is required by law (for example, financial records related to subscriptions).
- Backups. Residual copies may persist in encrypted backups for up to 90 days after deletion before being purged.
5. Your rights
Depending on your jurisdiction, you may have the following rights:
- Access. Request a copy of the personal data we hold about you.
- Correction. Update inaccurate or incomplete information directly in the app.
- Deletion. Delete your account and associated personal data from the in-app settings.
- Portability. Request an export of your data in a machine-readable format.
- Objection / restriction. Object to or restrict certain processing.
- Withdraw consent. Revoke consent you previously gave (for example, push notifications, analytics) without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, use the Data & Privacy screen in the app or contact us through Help & Support.
6. Security
We use technical and organizational safeguards designed to protect your information, including encryption in transit (TLS), encryption at rest for sensitive fields, hashed passwords, and access controls on our infrastructure. No system is perfectly secure; if we discover a breach affecting your data we will notify you as required by law.
7. Children
Crew is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us through Help & Support and we will delete it.
8. International transfers
Crew is operated from servers that may be located in jurisdictions different from yours. By using the Service you understand that your information may be transferred to and processed in those jurisdictions, which may have different data protection laws than your home jurisdiction. We use contractual safeguards to protect data when it is transferred internationally.
9. Third-party services
The Service may include links to third-party websites or services. This Privacy Policy does not apply to those third parties; review their privacy practices before sharing information with them.
10. Changes to this Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email. The version date at the top reflects the most recent update.
11. Contact
For questions about this Privacy Policy or how we handle your information, use the Help & Support screen in the app.