Skip to content

Legal

Privacy Policy

Last updated September 25, 2026

1. Introduction

This policy explains how Crews (“Crews,” “we,” “our” or “us”) collects, uses and protects your information when you use heycrews.com and the Crews app (the “Platform”). We collect only what we need to run the Platform, and we never sell your personal data.

2. Information we collect

2.1 Information from Google sign-in

You sign in to Crews with your Google account. When you do, Google shares your name, email address and profile photo with us. We never see or store your Google password.

2.2 Information you provide

  • Profile: display name, avatar, bio and, if you choose to add it, your birthday. Sharing your birthday with your crews is opt-in.
  • Crews and events: crews you create or join, events you create, and your RSVPs.
  • Messages and posts: chat messages, threads, reactions, polls and poll votes, photos, memory posts, and challenge entries and votes.

2.3 Information collected automatically

  • Push subscriptions: if you turn on notifications, your browser gives us a push subscription (an endpoint and encryption keys) so we can deliver notifications to that device.
  • Analytics: we use Umami, a privacy-focused analytics tool that does not use cookies and does not track you across websites. It gives us aggregate numbers such as page views, referrers and device types.
  • Technical data: like most websites, our hosting providers process basic technical information such as IP address, browser type and operating system to deliver and secure the Platform.

3. How we use your information

  • To provide the Platform: crews, calendars, events, chat, memories, leagues and challenges
  • To send in-app and push notifications you have enabled, such as new events, event changes, messages and mentions
  • To keep the Platform secure and prevent fraud and abuse
  • To understand, in aggregate, how the Platform is used so we can improve it
  • To comply with legal obligations

We do not use your data for advertising, and we do not send marketing email.

4. Who can see your information

4.1 Other members

  • Your profile (name, avatar, bio) is visible to members of crews you belong to.
  • Your messages, reactions, photos and memory posts are visible to members of the crew or event where you share them.
  • Your RSVP to an event is visible to people who can see that event.
  • Your birthday is shown to your crews only if you choose to share it.
  • Public crews and the memory posts they submit to challenges may be visible to members of other crews, for example in league tables and challenge voting.

4.2 Service providers

We rely on a small number of providers to run the Platform:

  • Supabase: database, authentication and file storage. Your account, content and photos are stored with Supabase.
  • Google: sign-in.
  • Umami: cookieless, privacy-focused analytics.
  • Browser push services: push notifications are delivered through the push service run by your browser's vendor (for example Google, Mozilla or Apple).

4.3 Legal requirements

We may disclose information if required by law, or where necessary to protect the safety of our users or the Platform.

5. Storage and security

  • Data is encrypted in transit (HTTPS) and at rest by our storage provider.
  • Access to your data is restricted by database-level access rules, so members only see content from crews and events they have access to.
  • Our providers may store and process data in the United States and other countries.

6. Your rights and choices

  • Access and correction: view and edit your profile at any time in the app.
  • Deletion: ask us to delete your account and data.
  • Copy of your data: ask us for a copy of the personal data we hold about you.
  • Notifications: turn push notifications off in the app or in your browser settings.
  • Birthday: stop sharing or remove your birthday at any time.
  • Objection and restriction: object to or ask us to restrict certain processing.

To make a request, email [email protected].

7. Cookies and local storage

We use only what the Platform needs to work: cookies and local storage that keep you signed in, and local storage for preferences such as light or dark theme. Our analytics do not use cookies. You can clear these at any time in your browser settings, though you will be signed out.

8. Data retention

  • We keep your data for as long as your account is active.
  • After you delete your account, residual copies may remain in backups for up to 90 days.
  • We may keep some information longer where the law requires it.

9. Children

Crews is not intended for anyone under 13. We do not knowingly collect personal information from children. If you believe a child has given us personal data, please contact us and we will delete it.

10. Third-party links

Content shared on the Platform may link to other websites. Their privacy practices are their own, so please review their policies.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page. Continuing to use the Platform after a change means you accept the updated policy.

12. EU, UK and California residents

If you are in the European Union or United Kingdom, you have rights under the GDPR, including the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. If you are a California resident, you have the right to know what personal information we collect and to request its deletion. We do not sell or share personal information for cross-context behavioral advertising.

13. Contact

Questions about this policy? Email [email protected] or visit heycrews.com. See also our Terms of Service.