Effective September 27, 2026
Privacy Policy
CrowMate is designed to help you build a movement habit without advertising or cross-app tracking.
1. Who this policy covers
This policy explains how CrowMate ("CrowMate," "we," "us," or "our") handles information when you use the CrowMate mobile application, website, and support channels. The service is intended for people aged 13 or older.
2. Information you provide
- Account information: the Apple or Google provider identifier, email address, and basic name information your selected provider supplies. CrowMate does not receive your Apple or Google password.
- Profile information: display name, birth date, country, gender, height, typical routine, preferred height unit, daily step target, Crow appearance, app theme, and time zone.
- Ranking reports: the ranking member you report, ranking week, reason you select, and optional details you provide. Reports are linked to the reporting account, kept private from other members, and sent to an internal manual-review queue.
- Support information: the topic, message, email address, and any attachment you choose to send through your email or sharing app. CrowMate does not silently upload a selected support photo.
3. Information collected when you use CrowMate
- Movement and progress: daily step count, target, local date, observation time, streaks, levels, and unlocked or selected Crow styles.
- Device and app information: a random installation identifier, platform, app version, operating-system version, locale, time zone, and synchronization timestamps.
- Movement-integrity observations: Core Motion's activity class and confidence, changes between daily movement records, source-time offsets, local-date consistency, and whether Apple App Attest validated an app request or was unavailable. These observations are internal analytics. Heuristic observations do not remove steps, change rankings, hide an account, or establish that a person cheated.
CrowMate accesses steps only after Motion & Fitness permission is granted. The current app does not request GPS location.
Signed-in members with eligible recorded steps automatically appear in weekly Global and Your Country rankings. Other members can see their display name, country, and recorded weekly step total, but not their email address, birth date, or other profile details.
4. Website analytics and cookies
If you accept analytics on this website, we use Google Analytics 4 to measure page views, outbound link clicks, and how visitors reach the site, including campaign parameters in a link. Google Analytics may collect page URLs, approximate location, browser and device information, and an identifier stored in first-party cookies such as _ga. Google processes this information for us to provide usage reports. We do not send CrowMate account, health, or step data to this website analytics property.
The Google Analytics tag does not load unless you accept analytics. You can decline or change your choice at any time using Cookie settings in the website footer. Declining does not limit access to the site. Learn more about how Google handles data.
5. Why we use information
We use the information above to create and secure your account; synchronize your profile and history; calculate and show movement progress; personalize your Crow and daily target; analyze movement-integrity signals without automated penalties; route ranking reports for manual review; prevent abuse; provide support; maintain service reliability; comply with law; and enforce our Terms of Use.
We do not sell personal information. We do not use it for third-party advertising, data-broker enrichment, or tracking you across other companies' apps or websites.
6. Service providers
- Supabase: authentication and hosted database storage in the United States.
- Apple: Sign in with Apple authenticates the account; Core Motion supplies on-device step readings and activity classifications; App Attest supplies cryptographic app-instance evidence on supported devices; and StoreKit manages purchases.
- Google: Sign in with Google authenticates the account when you choose that option.
- Google Analytics: optional website visit and outbound-link measurement when you accept analytics cookies.
- Resend: delivery of private internal ranking-review notification emails.
These providers may process information only for the services they supply to us and under their own legally required privacy obligations.
7. Storage, retention, and deletion
Supabase is the source of truth for synchronized account data. CrowMate also keeps an account-scoped on-device cache so recent movement history and pending data can work during temporary network interruptions. Small preferences remain on the device.
We keep account data while your account is active and only as long as reasonably necessary to provide and secure CrowMate, meet legal obligations, resolve disputes, or enforce agreements. Authentication and security records retained by our providers expire under their applicable retention schedules.
You can choose Account → Delete Account in the app and type DELETE. Successful deletion permanently removes the authentication account and synchronized profile, registered device, daily movement, movement-integrity observation, app-attestation, and account-linked ranking-report records, then clears the account's local app data. You may also request help at hello@crowmate.com.
8. Your choices and rights
You can edit profile information in the app, disable Motion & Fitness access in iOS Settings, sign out, or delete your account. Depending on where you live, you may also have rights to access, correct, delete, restrict, or receive a copy of your personal information. Email hello@crowmate.com to exercise a right. We may need to verify that the request concerns your account.
CrowMate does not discriminate against anyone for exercising a privacy right. Because we do not sell or share personal information for cross-context behavioral advertising, there is no sale or advertising-sharing opt-out to process.
9. Children
CrowMate does not permit account creation by children under 13 and does not knowingly collect their personal information. If you believe a child under 13 has provided information, contact us so we can investigate and delete it.
10. Security and international use
We use access controls, encrypted network connections, row-level database security, account-scoped storage, and abuse prevention. No system can guarantee absolute security. CrowMate initially stores hosted account data in the United States, so information may be processed outside your country.
11. Changes and contact
We may update this policy as the product or law changes. We will update the effective date and provide additional notice when a change materially affects your rights.
Privacy questions and requests: hello@crowmate.com.