Back to Home

Privacy Policy

Effective Date: February 10, 2026 · Last Updated: February 10, 2026

1. Introduction

CrewMate ("we", "our", "us") is a crew management application for sailors and skippers, operated by CrewMate. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the CrewMate mobile application (iOS and Android), the CrewMate web application at app.crewmate-app.com, and the CrewMate website at crewmate-app.com (collectively, the "Service").

By creating an account or using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Data Controller

The data controller responsible for your personal data is:

CrewMate
Email: privacy@crewmate-app.com

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

  • Email address — used for authentication, account recovery, and important service notifications
  • Full name — displayed to other crew members within your trips
  • Password — stored in hashed form; we never store or have access to your plaintext password
  • Language preference — to display the app in your preferred language

3.2 Trip and Crew Data

When you use CrewMate to organize trips, we collect:

  • Trip details — trip name, vessel name, dates, destinations, and status
  • Crew membership — which users are part of which trips and their roles (captain, crew, guest)
  • Checklists — items you create and their completion status
  • Expense records — amounts, descriptions, who paid, and how costs are split between crew members
  • Announcements and polls — messages, votes, and reminders you create for your crew
  • Route waypoints — latitude and longitude coordinates for planned routes
  • Safety briefings and handover notes — text content you create for crew safety

3.3 Documents and Media

You may optionally upload:

  • Documents — boat registration, insurance papers, crew IDs, and other files you choose to share with your crew
  • Photos — boat handover documentation, profile pictures, and trip-related images

These files are stored securely and are only accessible to members of the trip they are associated with.

3.4 Location Data

With your explicit permission, we collect:

  • Approximate location — used to provide weather forecasts and route planning features

Location access is optional. You can use CrewMate without granting location permissions, though weather and route features may be limited. You can revoke location access at any time through your device settings.

3.5 Payment and Subscription Data

When you subscribe to CrewMate Pro:

  • Subscription status — your current plan (Free, Pro Monthly, Pro Yearly), subscription status, and expiration date
  • Transaction identifiers — anonymous purchase identifiers from the app store or payment processor

We do not collect or store your credit card number, bank account details, or any direct payment information. All payments are processed securely by:

  • Apple App Store (for iOS purchases)
  • Google Play Store (for Android purchases)
  • RevenueCat (our subscription management platform, which coordinates with app stores)

These third-party payment processors handle all financial transactions under their own privacy policies and PCI DSS compliance.

3.6 Automatically Collected Data

When you use the Service, we automatically collect:

  • Device information — device type, operating system version, and app version
  • Usage data — features used, screens visited, and interaction patterns (anonymized)
  • Crash reports — technical logs when the app encounters an error, to help us fix bugs

4. How We Use Your Information

Purpose Data Used Legal Basis (GDPR)
Provide the Service (trips, checklists, expenses, etc.) Account data, trip data, crew data Contract performance
Display your name to crew members Full name, email Contract performance
Process subscriptions and manage Pro access Subscription status, transaction IDs Contract performance
Provide weather forecasts and route planning Location data Consent
Send important service notifications Email, push token Legitimate interest
Fix bugs and improve the app Crash reports, usage analytics Legitimate interest
Prevent fraud and abuse Account data, usage patterns Legitimate interest

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

5.1 With Your Crew Members

When you join a trip, other members of that trip can see your name, role, expenses you've logged, checklists, and other trip-related content. This sharing is essential to how CrewMate works as a crew coordination tool.

5.2 With Service Providers

We use trusted third-party services to operate CrewMate:

Provider Purpose Data Shared
Supabase (EU) Database and authentication Account data, trip data
RevenueCat Subscription management User ID, subscription status
Hetzner (Germany) Server hosting All service data (encrypted at rest)
Vercel Website hosting No personal data (static site)
Expo / EAS App delivery and updates Device type, app version

5.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request.

6. Data Storage and Security

  • Hosting location — Our servers are hosted by Hetzner in Germany (EU). Your data is stored within the European Union.
  • Encryption in transit — All data transmitted between your device and our servers is encrypted using TLS/HTTPS.
  • Encryption at rest — Database data is encrypted at rest using AES-256.
  • Authentication — Passwords are hashed using bcrypt. Authentication tokens expire after 7 days.
  • Access control — Row-level security policies ensure you can only access data for trips you are a member of.
  • Backups — Automated daily backups with point-in-time recovery.

7. Data Retention

  • Active accounts — We retain your data for as long as your account is active.
  • Deleted accounts — When you delete your account, we delete your personal data within 30 days. Anonymized trip data (expense totals, checklist counts) may be retained for other trip members' records.
  • Inactive accounts — Accounts with no activity for 24 months may be flagged for deletion. We will notify you by email before deleting an inactive account.
  • Payment records — Transaction identifiers are retained for up to 7 years as required by tax and financial regulations.

8. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights:

  • Access — Request a copy of all personal data we hold about you
  • Rectification — Correct inaccurate personal data
  • Erasure ("Right to be forgotten") — Request deletion of your personal data
  • Restriction — Request that we limit processing of your data
  • Portability — Receive your data in a structured, machine-readable format
  • Objection — Object to processing based on legitimate interests
  • Withdraw consent — Withdraw consent at any time (e.g., location access)

To exercise any of these rights, contact us at privacy@crewmate-app.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

9. Children's Privacy

CrewMate is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we discover that a child under 16 has created an account, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at privacy@crewmate-app.com.

10. Cookies and Tracking

The CrewMate website (crewmate-app.com) does not use cookies or third-party tracking scripts.

The CrewMate web application (app.crewmate-app.com) uses only essential cookies required for authentication (session tokens). We do not use advertising cookies or third-party analytics trackers.

11. International Data Transfers

Your data is primarily stored in the EU (Germany). Some of our service providers (RevenueCat, Expo) are based in the United States. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Notify you via email or an in-app notification for material changes

Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: privacy@crewmate-app.com
Website: crewmate-app.com