Privacy Policy

01Data Collected

We collect information you provide when you create or use an account, including your name or nickname, username, email address, profile details and sign-in information. We collect the content and activity you choose to save, such as films, books, shows, rankings, trips, places, photos, notes, memories, searches, friendships, shared visits and reports.

If you use Pushups or Net Worth, we also collect the pushup counts and dates and monthly net worth totals you manually enter, linked to your account, to store and display your records.

Photos you choose to import may contain date and precise location information. We use that information to help organise photos and identify places. City and visit records can also contain approximate or precise locations you select or enter.

The app and its service providers process technical information needed to operate the service, including installation and push identifiers, app and device information, network request information, and operational or error records. On Android, Firebase Cloud Messaging can register an installation identifier when the app starts, even before you enable notifications. Allowing notifications separately controls notification delivery and registration with Crestora.

02How Data Is Used

We use information to provide and maintain Crestora, save and display your archive, organise photos and places, personalise rankings and recommendations, manage accounts and sharing, deliver requested notifications, respond to support and reports, and protect and troubleshoot the service. If you allow tracking on iPhone, we also measure which of our ads lead to downloads, as described under Advertising Measurement.

We do not sell your personal data or use your archive for advertising.

03Data Sharing

We use providers such as Supabase for authentication and app records, Cloudflare R2 for current photo storage, and Expo and Firebase Cloud Messaging for notification delivery. They process information needed to provide those services. Google or Apple sign-in is used when you choose the corresponding sign-in option.

Search and map features also send requests to external providers. Google Places receives place search terms and, for nearby searches, coordinates. Google Books and TMDB provide catalogue results. Android maps use MapLibre with OpenFreeMap; map, style and tile requests reveal the viewed region and technical network information to the delivery services. These providers may process information under their own terms and privacy policies. Web or other app versions may use additional map providers, including Mapbox.

If you allow tracking on iPhone, Meta receives the advertising measurement information described under Advertising Measurement.

Where city enrichment is enabled, public city and country names may be sent to OpenAI or image-search providers to obtain city information and images. That request does not include your private archive, account identity, diary text or uploaded photos.

Other people may see profile or archive content according to the feature and your visibility settings. Sharing or accepting a shared visit makes the selected content available to the intended participants. Previously shared or public content may already have been copied by others.

We may disclose information when required by law or to protect users, the service or the public. Provider processing and user-directed sharing are separate from selling data.

04Advertising Measurement

Crestora advertises on Facebook and Instagram. To learn which ads lead to downloads, the iPhone app includes Meta's software development kit from version 2.0.13. When you first open that version, iOS asks whether Crestora may track you. Meta measurement starts only if you choose Allow. Choosing Ask App Not to Track does not limit any Crestora feature, and you can change your answer at any time in iOS Settings under Privacy & Security, then Tracking.

If you allow tracking, the app tells Meta that Crestora was installed and opened. Meta receives an identifier the kit creates for your installation, technical app and device information such as app and iOS versions, device model, language, time zone, carrier and screen size, and network information such as your IP address. The identifier can distinguish your installation, so we do not describe it as anonymous. Meta uses this information to attribute installs to our ads and report the results to us.

We have turned off the kit's collection of Apple's advertising identifier, its automatic in-app event logging, and its optional screen-content and product-improvement collection. Our integration does not give Meta your name, email address, Crestora account, films, books, rankings, trips, places, photos or any other archive content.

Separately, whether or not you allow tracking, the iPhone app reports its first launch to Apple's SKAdNetwork. Apple then tells the ad network whether an ad led to the install, without a personal or device identifier. Crestora sends nothing to Meta in that step.

05Data Retention

We retain account and archive data while your account remains active so that you can use Crestora. Account deletion removes your sign-in account, linked profile and account-owned records covered by the deletion process, together with your owned photo files in our current photo storage.

Some shared-visit invitation history remains after account deletion, including sender and recipient account identifiers, place and date details, invitation status, and photo reference identifiers. This history records shared-visit permissions separately from a personal visit or photo. It is currently retained without a scheduled deletion date; it is not anonymous merely because an account has been deleted.

Backups, operational and security logs, and files or copies held by legacy hosts, other members or external services may also remain. Their retention depends on the applicable service and operational or legal requirements. Contact support@crestora.app about retained records or a deletion request.

06Notification and Map Provider Records

Expo states that notification contents are kept in memory or queues only as needed to hand them to Apple or Google. Firebase states that installation IDs are retained until its deletion API is called, with removal from live and backup systems within 180 days after that call. Crestora account deletion does not currently call that installation-deletion API.

OpenFreeMap states that normal server logs are deleted after seven days, with security-incident logs kept for no more than 30 days or until the investigation ends, whichever is earlier. Its error logs can contain an IP address and requested URL; its Cloudflare delivery provider also has its own processing practices. These periods are provider-specific and are not a retention schedule for your Crestora account or backups.

07Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. You can update your information in the app or contact us to exercise your rights.

08Account Deletion

You can request deletion in Crestora under Account, then Delete account. Type DELETE to confirm. You can also email support@crestora.app to request deletion without reinstalling or signing in to the app. Include the email address associated with your account so we can verify ownership.

Deletion is permanent once completed. If the app cannot complete required photo cleanup or account deletion, it reports an error and you can retry or contact support. The retained records and external copies described under Data Retention are not all erased by account deletion.

09Security

We use industry-standard technical and organizational measures to protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us.