Privacy Policy
Effective Date: March 23, 2026
Last Updated: March 23, 2026
This Privacy Policy describes how Crewmates ("Crewmates," "we," "us," or "our") collects, uses, and discloses your information when you use our website, applications, and related services (collectively, the "Service"). It also explains your choices regarding your information.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not access or use the Service.
1. Information We Collect
We collect information in three ways: information you provide directly, information generated through your use of the Service, and information collected automatically.
Information You Provide
- Account Information. When you create an account, we collect your name and email address through Google OAuth or email-based authentication. We also store display preferences you set, such as your chosen display name, avatar color, and avatar initials.
- Crew Content. This includes all content you create within a crew: habits and habit completions, to-do lists and to-do items, calendar events and event check-ins, notebook entries, activity feed events, and emoji reactions. Crew Content is the core of the Service and is described further in Section 3.
- Crew Information. When you create a crew, we store the crew name, subtitle, timezone, and a unique join code used to invite other members.
- Communications. If you contact us for support or provide feedback, we may retain the content of those communications.
Information Generated Through Use
- Activity Data. When you use the Service, we generate records of your actions — such as completing a habit, checking into a calendar event, or joining a crew. These activity events are logged to power features like the Activity Feed, crew streaks, and future features such as Wrapped recaps.
- Presence Data. We collect real-time presence information to power the "Who's Active Today" feature, which shows your crewmates whether you have been active in the app today.
Information Collected Automatically
- Log and Device Data. When you access the Service, we automatically collect information such as your IP address, browser type, operating system, device identifiers, referring URLs, and pages visited.
- Cookies and Similar Technologies. We use cookies and similar technologies to maintain your session, remember your preferences, and understand how you use the Service. Our authentication system relies on cookies for session management. For more information, see Section 8.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide and operate the Service, including authenticating your identity, enabling crew creation and membership, powering the dashboard and its feature blocks, and delivering real-time updates.
- To enable social accountability features, including computing personal and crew streaks, populating the Activity Feed, displaying the "Who's Active Today" indicator, and supporting emoji reactions. These features are central to the Service and are described further in Section 3.
- To improve and develop the Service, including understanding usage patterns, diagnosing technical issues, and informing product decisions.
- To communicate with you, including responding to support requests and sending service-related notices (such as security alerts or changes to this policy). We do not currently send marketing emails, but if we do in the future, you will be able to opt out.
- To protect the Service, including detecting and preventing fraud, abuse, and security incidents.
- To comply with legal obligations, including responding to lawful requests from public authorities.
3. How Your Crew Sees Your Information
Crewmates is a social accountability tool. The core purpose of the Service is to make your goals, habits, and progress visible to the people you choose to pursue them with. This section explains what your crewmates can see.
What Is Visible to Your Crewmates
When you join a crew, all members of that crew can see:
- Your display name, avatar color, and avatar initials.
- Habits you create within the crew, including whether and when you complete them.
- Calendar events you create within the crew, and whether you check in to events.
- To-do lists and to-do items you create within the crew, including completion status and due dates.
- Notebook entries you create within the crew.
- Your activity in the crew's Activity Feed (such as logging a habit, joining the crew, or completing a to-do).
- Emoji reactions you leave on activity feed items.
- Whether you have been active in the app today (the "Who's Active Today" indicator).
- Your contribution to the crew's streak (consecutive days where all members completed their habits).
What Is Not Visible to Your Crewmates
- Your email address.
- Your activity in other crews you belong to. Each crew is an independent, isolated space.
- Your account settings and authentication details.
- Log data, device information, and other technical data collected automatically.
You Control Your Crew Membership
You choose which crews to join. You can leave any crew at any time. Joining a crew is an affirmative choice to share your activity within that crew with its members. If you do not want certain people to see your habits, progress, or activity, do not join a crew with them.
4. How We Share Your Information
We do not sell your personal information. We share your information only in the following circumstances:
With Your Crewmates
As described in Section 3, Crew Content is visible to all members of the crew in which it was created. This sharing is a core feature of the Service, not a side effect.
With Service Providers
We use third-party service providers to help us operate the Service. These providers process your information on our behalf and are contractually obligated to use it only for the purposes we specify. Our current service providers include:
- Supabase — database hosting, authentication, and real-time data synchronization.
- Vercel — application hosting and content delivery.
- Google — OAuth authentication provider.
We may add additional service providers over time (such as analytics, error monitoring, or email delivery services). We will update this policy when we do.
For Legal Reasons
We may disclose your information if required to do so by law, or if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights or safety, prevent fraud, or respond to a government request.
In Connection With a Business Transfer
If Crewmates is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. Specifically:
- Account Information is retained for the duration of your account.
- Crew Content is retained for the duration of the crew's existence. If you leave a crew, your historical contributions (such as past habit completions and activity events) are preserved for the benefit of the crew's remaining members. Your display name remains associated with this historical data.
- Log and Device Data is retained for a limited period for security and diagnostic purposes.
If you wish to delete your account and associated data, please contact us at privacy@crewmates.net. We will process deletion requests in accordance with applicable law. Please note that some information may be retained where we have a legitimate legal basis to do so (for example, to comply with legal obligations or resolve disputes).
6. Data Security
We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS.
- Encryption of data at rest in our database.
- Row-Level Security policies in our database, ensuring that users can only access data within crews they belong to.
- Authentication via Google OAuth, with session tokens managed securely.
No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.
7. International Data Transfers
Our service providers may process your data in various jurisdictions, including the United States. By using the Service, you consent to the transfer of your information to jurisdictions that may have different data protection laws than your country of residence.
Where required by applicable law, we use appropriate safeguards for international data transfers, such as standard contractual clauses.
8. Cookies
We use cookies to operate the Service. The cookies we use fall into the following categories:
- Essential Cookies. These are required for authentication and session management. Without them, you cannot use the Service. They are set by our authentication provider (Supabase) and persist for the duration of your session.
We do not currently use advertising cookies or third-party tracking cookies. If we introduce analytics cookies in the future (for example, through a service like PostHog), we will update this policy and, where required by law, obtain your consent before placing non-essential cookies.
9. Your Rights and Choices
Depending on where you live, you may have certain rights regarding your personal information. These may include:
- Access. You can request a copy of the personal information we hold about you.
- Correction. You can update your display name, avatar, and other profile information directly through the Service. For other corrections, contact us.
- Deletion. You can request that we delete your personal information, subject to certain exceptions (such as data we are required to retain by law).
- Portability. You can request a copy of your data in a structured, commonly used format.
- Objection and Restriction. Where we process your data based on legitimate interests, you may have the right to object or request that we restrict processing.
To exercise any of these rights, please contact us at privacy@crewmates.net. We will respond within the timeframe required by applicable law.
For Users in the European Economic Area (EEA) and United Kingdom
We process your personal information on the following legal bases:
- Performance of a contract — to provide the Service to you when you create an account and use the platform.
- Legitimate interests — to improve the Service, ensure security, and understand usage patterns, where these interests are not overridden by your rights.
- Consent — where required by law, such as for the placement of non-essential cookies.
You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.
For Users in California
Under the California Consumer Privacy Act (CCPA), California residents have additional rights, including the right to know what personal information we collect and how we use it, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@crewmates.net.
10. Children's Privacy
The Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@crewmates.net.
11. Third-Party Links and Integrations
The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with your information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. If we make material changes, we will notify you through the Service or by other appropriate means before the changes take effect.
Your continued use of the Service after any changes to this policy constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Crewmates
Email: privacy@crewmates.net
This privacy policy was last reviewed on March 23, 2026.