Privacy policy

Last updated October 26, 2026

Here’s what we collect, why, who sees it, and what you can do about it. Short version: we use your info to run Crewd, keep it decent, and get more guys on it. We don’t sell it.

Who’s responsible

Michael Delgado, Crewd Space, In den Schafgärten 2, 60437 Frankfurt am Main, Germany (“we”). Email: [email protected]. Because we’re based in Germany, the EU General Data Protection Regulation (GDPR) applies to everything we do with your data, wherever you live.

What we collect

• Waitlist: your name, email, ZIP code and the city it puts you in, what you’d want to do, anything you write in, whether you’d host, and which invite link brought you.
• Your account: first name, email, gender, birth date, ZIP code and the city it puts you in (other members see only the city), the categories you pick, your one-liner, and when you accepted the terms.
• Your face photo: stored privately and shown only to approved members in your city (and in a city you’re visiting) and to our admins. We check it by eye. We don’t scan faces or make face templates.
• What you do on Crewd: plans you host, join or ask to join (and your one line to the host), the oath you tick on each plan, whether you showed up, your answer to “Would you hang with these guys again?”, posts, replies, votes and polls on the Wall and on plan boards, your crews, reports you file or that are filed about you, strikes and time-outs.
• Rank: your XP, level and Solid guy status. Your first name, photo and XP show on your city’s rankings.
• When you’re usually free: the times you pick. Nobody sees them. We use them to tell you when a few guys line up, and Crewd Pro hosts see only anonymous counts of 3 or more (“7 guys into Sweat are usually free weekend mornings”).
• Visits: the city and days you visit. Members there see that you’re visiting.
• Notifications: your notification settings and, if you turn on push, your device’s push subscription.
• Calendar feed: if you use it, a private link that shows your plans in your calendar app. Anyone with the link can see it, so keep it to yourself.
• Payments: if you pay for Crewd Pro or a venue plan, Stripe handles the payment. We keep your subscription status and dates, never your card number.
• Venues: the business name, city (from its ZIP code), address, website, map link, description, logo, billing email, pins, and counts of views and crews (never names).
• Technical: a sign-in cookie, and the logs our hosting keeps (IP address, browser, time) to keep Crewd running and secure.

Why, and on what legal basis

• To run Crewd for you (your account, plans, crews, the Wall, notifications you asked for, Pro and venue subscriptions): to perform our contract with you (GDPR Art. 6(1)(b)).
• To keep it safe and decent (photo review, reports, strikes, time-outs, bans, keeping banned people out, fraud prevention, security logs): our legitimate interest in a safe community and your safety (Art. 6(1)(f)).
• To keep a record of what you agreed to (the terms, the oath on each plan, the venue terms), and records of reports and bans: our legitimate interest in proving it and defending legal claims (Art. 6(1)(f)).
• To tell you when your city opens and send city news: your request when you join the waitlist (Art. 6(1)(b)), and you can unsubscribe any time.
• To suggest guys and plans you’d like, from what you’re into, when you’re free and how plans went: our legitimate interest in making Crewd useful (Art. 6(1)(f)).
• Taxes and accounting: our legal obligations (Art. 6(1)(c)).
• Ads and analytics: only with your consent, if we ever turn them on (Art. 6(1)(a)). See cookies below.

Automatic decisions

Some things happen automatically by fixed rules: three no-shows or late cancels in 60 days start a time-out, two separate selling reports start one, and Solid guy status comes from your last 10 plans. They don’t have legal effects, but they matter, so you can always ask a person to look at one by emailing [email protected], tell us your side, and have it reversed if it was wrong.

Who sees what

• Approved members in your city see your first name, photo, one-liner, rank, show-up rate and the plans you’re going to.
• A plan’s exact address and group chat link are shown only to its host and the guys going, unless the host makes the address public (say, for a public gym or range).
• Members never see who reported them, and venues never see who went to their events, only counts.
• We use service providers who process data only for us, under data processing agreements: Supabase (database, sign-in and file storage), Vercel (hosting), Stripe (payments, as its own controller for payment data), and our email provider. If we turn on ads, Meta and Google, only with your consent.
• We share data with authorities only when the law requires it or to protect someone from serious harm.
• We don’t sell your personal information, and we don’t “share” it for cross-context behavioral advertising.

Data in the US

Crewd serves the US, so your data is stored and processed in the United States. For data covered by the GDPR, transfers rely on the EU-U.S. Data Privacy Framework where a provider is certified, and on the European Commission’s Standard Contractual Clauses otherwise.

How long we keep it

• Your account data: until you delete your account. Then it’s deleted within 30 days, and backups roll off within 90.
• Waitlist data: until you ask us to delete it or delete your account. Unsubscribing stops the emails right away.
• Records of what you agreed to (the terms and each plan’s oath): for 3 years after your account ends (the usual time limit for legal claims), then deleted automatically, and longer only while a claim is open.
• Reports you filed stay, without your name. Reports, strikes and time-outs about you are deleted with your account. If you delete it while you’re banned, suspended or in a time-out, a scrambled form of your email is kept so the account can’t simply be made again.
• Payment and tax records: as long as tax law requires (up to 10 years in Germany).

Cookies

Crewd uses only the cookies it needs to keep you signed in and remember your language. Those don’t need consent. If we ever add ads or analytics cookies or pixels, we’ll ask first, and they stay off until you say yes.

Your rights

• You can ask for a copy of your data (Download my data in You does it at once), and to correct, delete, restrict or move it. You can object to what we do based on legitimate interest, and withdraw any consent at any time.
• Delete your account any time in You. Turn off the Thursday email and other notices in You → Notifications.
• If you live in a US state with a privacy law (like California, Colorado, Texas or Virginia), you have the rights it gives you, including to know, delete and correct, and we won’t treat you differently for using them.
• Email [email protected] for anything else. You can also complain to a data protection authority: ours is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Wiesbaden, or the one where you live or work in the EU.

Security and age

• We protect your data with access controls, encryption in transit, and private storage for photos. No system is perfect; we’ll tell you if a breach puts you at risk.
• Crewd is for people 21 and older. We don’t knowingly collect data from anyone younger and delete it if we find out.

Changes

We’ll post changes here and tell you about the ones that matter. See also the terms and the imprint.