Privacy Policy

1. Information We Collect

Information you provide

When you sign up for Crewa, we may collect:

• Account information: Name, email address, phone number, and password
• Profile information: Running pace, preferred running times, neighborhood/location
• Verification data: Government-issued ID and selfie photo (for identity verification)
• Communications: Messages you send through the app or to our support team

Information collected automatically

When you use Crewa, we automatically collect:

• Device information: Device type, operating system, unique device identifiers
• Usage data: Features you use, runs you join or create, interactions with other users
• Location data: General location (city/neighborhood) to match you with nearby runners
• Log data: IP address, browser type, access times, and referring URLs

2. How We Use Your Information

We use your information to:

• Provide our service: Match you with compatible running partners based on pace, schedule, and location
• Verify identity: Confirm you are who you say you are, keeping our community safe
• Send transactional messages: Deliver account verification codes, security alerts, run confirmations, and match notifications via SMS and email
• Improve Crewa: Understand how people use the app and make it better
• Communicate with you: Send run reminders, match notifications, and important updates
• Ensure safety: Detect and prevent fraud, abuse, or unsafe behavior
• Comply with legal obligations: Meet our legal and regulatory requirements

3. SMS/Text Message Communications

Consent to Receive SMS

By providing your mobile phone number and creating a Crewa account, you expressly consent to receive text messages from Crewa at the phone number you provided. Your consent is not a condition of purchase. These messages may include:

• Account verification: One-time passcodes (OTP) to verify your identity when logging in or creating your account
• Security alerts: Notifications about unusual account activity or security concerns
• Run reminders: Notifications about upcoming runs you've joined
• Match notifications: Alerts when you have a new running partner match
• Safety notifications: Important alerts related to your scheduled runs or running partners

Message Frequency

Message frequency varies based on your account activity. You may receive:

• Verification codes only when you log in, sign up, or perform account security actions
• Run-related notifications based on runs you create or join (typically 1-3 messages per scheduled run)
• Match notifications when new compatible running partners are found (frequency depends on your activity)

On average, active users receive approximately 5-15 messages per month, though this varies based on individual usage.

Opting Out of SMS

You can opt out of receiving SMS messages at any time by:

• Replying STOP to any SMS message you receive from Crewa
• Updating your notification preferences in the app settings
• Contacting us at hi@crewa.app

After opting out, you will receive a confirmation message. You can opt back in at any time by replying START or updating your settings in the app.

Message and Data Rates

Message and data rates may apply. Crewa does not charge you for SMS messages we send, but your mobile carrier's standard messaging and data rates may apply depending on your phone plan. Please contact your mobile carrier for details about your messaging plan.

Supported Carriers

SMS messages are supported by most major carriers in the United States and Canada, including but not limited to AT&T, Verizon, T-Mobile, Sprint, Rogers, Bell, and Telus. Carriers are not liable for delayed or undelivered messages.

SMS Help

For help with SMS messages, reply HELP to any message or contact us at hi@crewa.app.

4. Information Sharing

We do not sell your personal information. Ever.

We may share your information only in these limited circumstances:

• With other users: Your first name, pace, and general location are visible to potential running partners. Your full profile is shared only when you join a run.
• Service providers: We work with trusted third parties who assist us in operating our service, including:
  • Cloud hosting and infrastructure (Amazon Web Services)
  • SMS and email delivery services (Amazon SES, Amazon SNS)
  • Identity verification services
  • Analytics providers
  These providers are bound by strict data protection agreements and process your data only as instructed by us and in accordance with this Privacy Policy.
• Legal requirements: We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of Crewa, our users, or others.
• Business transfers: If Crewa is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

We retain your personal information only as long as necessary to provide our services and fulfill the purposes described in this policy:

• Account data: Retained while your account is active and for 30 days after deletion to allow for account recovery
• Verification data: ID verification images are securely deleted within 90 days of successful verification. Verification status (verified/not verified) is retained with your account.
• Messages: In-app messages between users are retained for 12 months from the date sent
• SMS/Email logs: Records of transactional messages sent are retained for 12 months for troubleshooting and compliance purposes
• Usage logs: Anonymized or deleted after 24 months

We may retain certain information for longer periods if required by law, for legitimate business purposes (such as fraud prevention or resolving disputes), or to enforce our agreements.

When you delete your account, we will delete or anonymize your personal information within 30 days, except as required for legal compliance or legitimate business purposes as described above.

6. Data Security

We take security seriously and implement industry-standard measures to protect your data:

• Encryption of data in transit (HTTPS/TLS) and at rest (AES-256)
• Secure cloud infrastructure (AWS) with regular security audits
• Limited employee access to personal data on a need-to-know basis
• Regular security assessments and vulnerability testing
• Multi-factor authentication for administrative access
• Automated monitoring for suspicious activity

While we strive to protect your information, no system is 100% secure. We encourage you to use a strong, unique password for your Crewa account and keep your phone number up to date for account verification.

7. Your Rights

You have control over your data. Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Data portability: Receive your data in a portable format
• Opt-out of SMS: Stop receiving text messages by replying STOP or updating your preferences
• Opt-out of marketing: Unsubscribe from marketing emails at any time via the unsubscribe link in each email
• Withdraw consent: Where we rely on consent to process your data, you may withdraw it at any time

To exercise any of these rights, contact us at hi@crewa.app. We will respond to your request within 30 days.

California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to opt-out of the sale of your personal information. As stated above, we do not sell your personal information.

Canadian Residents

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You may contact our Privacy Officer at hi@crewa.app to exercise your rights or file a complaint.

8. Cookies & Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Understand how you use Crewa (analytics)
• Improve performance and user experience

We use the following types of cookies:

• Essential cookies: Required for the app to function properly (authentication, security)
• Analytics cookies: Help us understand how users interact with Crewa
• Preference cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using some features of Crewa.

9. Children's Privacy

Crewa is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal data, please contact us immediately at hi@crewa.app and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email or in-app notification at least 7 days before changes take effect
• For material changes, request your acknowledgment or consent where required by law

We encourage you to review this policy periodically to stay informed about how we protect your data. Your continued use of Crewa after changes become effective constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

We aim to respond to all privacy inquiries within 30 days.

Crewa
Toronto, Ontario, Canada
hi@crewa.app