Privacy Policy

Crewda (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use the Crewda mobile application and related services (together, the “Service”).

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

Who we are: The Crewda Service is operated by Nikata Technologies Private Limited, India, under the Crewda brand. Nikata Technologies Private Limited is the controller of personal data described in this Policy for the Service.

1. Information we collect

• Account and profile: When you sign up or sign in, we process your phone number (for verification via our authentication provider), profile details you choose to provide (such as name, interests, languages, optional description, avatar image, date of birth where required for eligibility), and a unique user identifier tied to your account.
• Sign-in and authentication flows: Phone sign-in uses Google Firebase Authentication. Depending on device, carrier, and platform requirements, verification may present an in-app browser, embedded web view, or system browser for security checks such as reCAPTCHA or related fraud-prevention flows. Data submitted in those steps is processed by Google under Firebase Authentication terms and Google’s privacy documentation.
• Location (shown to others for trust): If you allow location access or provide location-related information, we may collect or derive location data to operate features such as crews (meets) near you. Your city (or equivalent broad locality)—not your precise address, exact neighbourhood, or detailed “area” pin—is what we intend to show to other users for trust and transparency (for example on your profile or where knowing someone’s general region helps participants feel comfortable meeting). Exact coordinates, precise map pins, or specific venue details appear only where you explicitly choose to share them as part of creating or joining a crew, as the product describes. You can change location permissions in your device settings.
• Optional facial verification: Certain advanced features are optional and may ask you to complete face-oriented verification before they are enabled—for example creating a crew (meet) where other users are invited to attend at a real-world location. You do not have to use those features.

How it works on your device

Live face detection and liveness checks run entirely on your device using Flutter ML Kit plugins—Flutter packages that integrate Google’s ML Kit on-device APIs (Android/iOS native SDKs under the hood). That processing happens locally on the phone or tablet—it is not performed on Crewda’s servers or in the cloud as part of the live detection step. Once liveness detection is passed, an appropriate verification image is captured automatically on the device (you are not asked to tap a shutter or “take photo” for that step). That image constitutes face-related personal data.

Storage and use of the verification photo

The verification image is stored in our secure databases. It is used for fraud prevention and integrity in connection with the Service, and may be relied upon where necessary for legal compliance—for example if we need to respond to fraud or misuse attributed to a user. We do not use it for advertising or unrelated profiling. When you request account deletion, verification images linked to your account are handled as described in Section 4 (including deletion within one week when no fraud-related retention applies).

• Camera access (system permission): If you grant camera access on your device, Crewda uses the camera only when you choose flows that need it—for example profile or avatar photos, photos you capture through in-app camera features (such as moments where offered), and optional selfie-based facial verification as described under Optional facial verification above.
• Content you create: Text and images you submit (for example crew descriptions, chat messages, photos for your profile or moments, and support messages) are processed to provide the Service.
• User-generated content and UGC checks: Crew titles/descriptions, chat messages, profile text/images, support messages, reports, block actions, moderation outcomes, and related metadata may be processed so we can run best-effort safety checks, enforce these Terms, investigate abuse or illegal crews, prevent blocked or expelled users from rejoining where product rules apply, and keep the Service safer. These checks may include on-device automated text checks, in-app reporting/blocking tools, and manual review where needed.
• AI-generated crew images: Some crew/meet cover images are generated by AI or related image-generation services based on the crew activity/theme. These images are for representational purposes only and may not show the actual participants, venue, host, or exact activity scene.
• Device and technical data: We may collect device identifiers, app version, operating system, crash diagnostics, and similar technical data to keep the Service secure and reliable.
• Analytics and identifiers: We use Firebase Analytics (Google) to measure feature usage, reliability, attribution, and product improvement. This may include app-instance identifiers, device and OS attributes, resettable Android advertising or ad services identifiers where made available by Google Analytics/Firebase SDKs, and events tied to how you use the app. We do not use these identifiers for personalised advertising, ad targeting, selling data, or tracking you across unrelated third-party apps or websites. Any such collection is subject to Google’s policies, Firebase documentation, and your device privacy controls (including Apple’s App Tracking Transparency where applicable). Facial verification images are not used for analytics targeting.
• Push notifications: If you opt in, we use a push token to send you notifications related to the Service (for example crew activity or messages). You can turn off notifications in your device or app settings where available.

2. How we use information

We use the information above to:

• Create and manage your account; authenticate you; display your profile to you and, where the product is designed for it, to other users (for example in crews, chats, or guest lists).
• Show city-level locality to other users for trust as described under “Location (shown to others for trust)” in Section 1—not your precise residential location or fine-grained area unless you explicitly share meeting details in the product.
• Run optional facial verification: live detection and liveness on-device via Flutter ML Kit plugins (Google ML Kit under the hood); once liveness passes, an appropriate verification image is captured automatically; store it in secure databases and use it for fraud prevention, integrity, and legal compliance where a user’s fraud or misuse must be addressed. Retention and deletion—including after account deletion—are described in Section 4.
• Enable optional advanced features that carry higher integrity risk—such as creating meets where other users travel to a real-world location—only after you choose to complete verification where we require it for those features.
• Operate phone sign-in, Firebase Authentication (including any browser-based verification steps), and related fraud protections described in Section 1.
• Operate core features: crews (meets), bookmarks, direct and group chat, notifications, and safety or integrity features (for example restricting accounts that violate our rules).
• Measure app usage, reliability, attribution, and feature performance through Firebase Analytics, including resettable identifiers where provided by Google Analytics/Firebase SDKs for those analytics purposes.
• Run best-effort UGC and safety checks on profiles, crew titles/descriptions, chats, reports, and blocks; investigate abuse; remove or restrict abusive or illegal crews/content; and enforce blocks, expulsions, suspensions, or other safety actions.
• Generate or display representative AI cover images for crews/meets based on activity/theme details, and make clear that such images are illustrative and not proof of actual participants, venues, hosts, or event conditions.
• Improve, secure, and troubleshoot the Service; detect abuse, fraud, or violations of our Terms; and comply with legal obligations.

We do not sell biometric or facial templates and do not use facial verification data for behavioural advertising.

3. How we share information

We do not sell your personal information. We may share information only in these situations:

• Service providers and subprocessors: We rely on Google Firebase / Google Cloud as primary processors for hosting and operating the Service. Depending on features you use, this may include Firebase Authentication (including phone sign-in), Cloud Firestore, Cloud Functions, Cloud Storage, Firebase Cloud Messaging (push notifications), Firebase Analytics, Firebase App Check, and related infrastructure or security products configured for Crewda. We may use additional subprocessors (for example crash reporting or tooling bundled via Flutter plugins) under agreements appropriate for processors. Their processing is governed by their respective privacy notices, including Google’s Firebase / Google Cloud privacy documentation.
• Facial verification: The app uses Flutter ML Kit plugins—Flutter integrations built on Google’s ML Kit native SDKs—so live detection and liveness run on your device as described in Section 1. The verification image captured automatically after liveness passes may be transmitted to and stored in our secure databases (hosted with our cloud infrastructure providers, such as Google Firebase / Google Cloud where we operate the Service). Google’s terms and privacy notices apply to ML Kit as delivered through those on-device integrations.
• AI/image-generation providers: Where we generate representative crew/meet cover images, activity/theme prompts and related non-sensitive context may be processed by AI or image-generation providers. We do not intend these images to identify actual users unless we say so explicitly in the product.
• Legal and safety: We may disclose information if required by law, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, safety, or property of users, us, or others. This can include information connected to reports, blocks, moderation outcomes, abusive or illegal crews, fraud, threats, harassment, exploitation, or other serious misuse.
• Business transfers: If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to appropriate safeguards.

4. Data retention

We retain information for as long as your account is active and as needed to provide the Service, comply with law, resolve disputes, and enforce our agreements. Some data may persist in backups for a limited period.

Account deletion: When your account deletion is requested from Profile → Delete account inside the Crewda app (our preferred path, so we can verify ownership) or through https://crewda.in/requestdelete/ (published deletion page with the same process overview and a fallback web request form if you cannot access the app), all personal data associated with your account will be deleted, ordinarily within one week of that request. Limited residual copies may persist briefly in encrypted backups and then age out on our normal backup cycle.

Exceptions (including facial verification): We cannot complete deletion within that timeframe—or must retain certain items longer—where fraud activity attributable to your account has been detected or is under investigation, or where we are required by law or legitimate regulatory or compliance obligations to keep records (for example to preserve evidence or respond to lawful authority). In those cases, relevant information—including facial verification images and related verification metadata—may be retained only as long as necessary for fraud prevention, investigation, or compliance. Where neither fraud-related retention nor legal retention applies, facial verification data tied to your account is deleted together with your other account data within one week as part of the account deletion process.

Facial verification photos while your account is active: Verification images are kept in secure databases so we can meet fraud-prevention and integrity obligations and legal compliance where misconduct must be evidenced or reported as required by law.

UGC and safety records: Reports, blocks, moderation signals/outcomes, removed or restricted content, and records linked to abusive or illegal crews may be retained as long as needed to investigate reports, enforce our Terms, prevent repeat misuse, protect users, or comply with law. We keep this retention limited to what is reasonably necessary for those purposes.

5. Security

We use industry-standard measures to protect data in transit and at rest. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. Contact us via Section 10 (including Write to Us and https://crewda.in/support/). You can control location and notification permissions through your device settings. Optional facial verification can be avoided by not using features that require it. You can report users/crews and block users in the app where those features are available. Abuse, harassment, and illegal crews are not permitted under our Terms. Account deletion: use Profile → Delete account in the app, or submit via https://crewda.in/requestdelete/ if you cannot use the app, and complete any confirmation steps we require; ordinarily all data associated with your account will be deleted within one week, except where Section 4 describes fraud-related or legally required retention (including possible retention of facial verification material only for those purposes).

7. Children

The Service is not intended for users under the age of 18 (or the minimum age required in your region). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can delete it.

8. International transfers

Your information may be processed in countries other than where you live. Where required, we take steps to ensure appropriate safeguards apply.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy in the app and may change the “effective” date above. Continued use of the Service after changes means you accept the updated policy, except where applicable law requires additional consent.

10. Contact

Nikata Technologies Private Limited operates Crewda and handles privacy enquiries:

• In-app: Write to Us (app menu).
• Web support: https://crewda.in/support/
• Account deletion: Profile → Delete account in the app (preferred), or https://crewda.in/requestdelete/ (fallback web form). Timelines and exceptions in Section 4.

Additional contact channels may appear in Apple App Store or Google Play listings for Crewda.

11. U.S. state privacy notices

Certain U.S. states grant consumers privacy rights (for example access, deletion, copies of personal information). We do not sell personal information as explained in Section 3. To exercise applicable rights, use Section 10. Rights may be limited where we must retain information under Section 4 (for example fraud, legal compliance, or security).