crumbsPrivacy Policy
Who we are
Crumbs (“Crumbs”, “we”, “us”) is an iPhone app for adults 18+ to keep track of the people they’re dating. It is run by BizVizor LLC, a California company. Privacy questions: [email protected].
The short version
- Crumbs never reads your messages. It doesn’t connect to SMS, iMessage, WhatsApp or any other message app.
- Nothing is shared with or visible to the people you track.
- Your data is encrypted in transit. Encryption at rest: being confirmed. Our servers process your logs to run pattern detectors.
- We don’t sell your data or share it for advertising, and there are no advertising SDKs in Crumbs.
- You can delete your account in the app, and your data is removed from our database right away.
Who Crumbs is for
Crumbs is for adults 18 and over only. You confirm your age when you sign up, and the App Store age rating is set to match. If we learn that an account belongs to someone under 18, we may close it and delete its data.
What we collect
Your account
- Your email address. During the beta, email is the only way to sign up and sign in.
- Your password, stored only as a one-way hash, never in plain text.
- Your subscription state (free, trial or paid).
What you add
Everything in Crumbs is something you choose to enter:
- The people you add: a name or nickname, plus any optional details you choose.
- Quick logs: whether they texted or you texted, when, and an optional tone tag.
- Notes, plans and dates, and how a planned date turned out.
- Your 1–5 rating of how a date left you feeling.
- Money and time you log, and any budget you set.
- Your Vibe Check answers, journal entries, and your feedback on alerts.
- The status and intent you set for each person.
Crumbs never reads message text. Pattern detectors use only timing, direction and your own tags.
Photos
You can add a photo to a person. It stays on your phone only: Crumbs never uploads it to our servers. It is deleted from your phone with the person, when you sign out, and when you delete your account.
Device and usage data
- Your time zone, so weeks, months and quiet hours follow your day.
- If you turn on notifications, a device token so we can send them through Apple’s push service. Notifications are discreet by default, with no names on the lock screen unless you turn on full previews.
- Your IP address and request details, which our servers use to limit repeated sign-in attempts and to keep operational logs that run and secure the service.
Usage analytics
The app has a “Share usage analytics” switch in You → Privacy, on by default. Crumbs isn’t collecting usage analytics yet. If we start, it will be limited to counts of what you tap, never what you log, with no names, emails, notes, journal entries or message text. The switch will turn it off immediately. Before we turn analytics on, we’ll update this policy with the provider we use. Crumbs has no advertising SDKs and no advertising identifier.
Information about people you add
The people you add to Crumbs haven’t signed up for it. So Crumbs collects as little about them as possible: only a name or nickname is required, and anything else is optional and up to you. Before you add anyone, Crumbs asks you to add only what you’re comfortable storing. Labels for a person’s intent use neutral wording. Nothing you log is shared with or shown to the people you track. If you’re a person someone else has added and you have a request, write to [email protected]. We will review the request and respond, though we may not be able to identify entries because they are private to each account holder.
How we use it
- To run your account and show you your own data.
- To run pattern detectors on your logs. They are fixed rules, not AI; the first version uses no AI or language models.
- To send the emails listed below.
- If you turn on notifications, to send them to you.
- To manage your subscription.
- To keep Crumbs secure, such as limiting repeated sign-in attempts and checking new passwords against known breaches.
Emails we send
Today we send account emails only, not marketing email. They are:
- A 6-digit code to confirm your email address when you sign up.
- A password reset link when you ask to reset your password.
- A confirmation that your account was deleted.
- Security notices, such as repeated failed sign-in attempts, a sign-up attempt with your email when an account already exists, a new sign-in method added to your account, or a data export from your account.
Who we share it with
We don’t sell your data or share it for advertising. We use these service providers to run Crumbs, and they handle your data only for the purposes shown:
| Provider | What it handles | Purpose |
|---|---|---|
| Supabase | Everything stored in your account: your email, a hash of your password, the people and logs you add, spend, notes | Database |
| Render | Requests between the app and our servers | Hosting |
| Cloudflare | Domain lookups for yourcrumbs.com, and emails you send to our yourcrumbs.com addresses | DNS and email forwarding |
| SendGrid | Your email address and the content of the emails we send you | Sending account emails |
| RevenueCat | A pseudonymous app user ID (never your email) and your subscription state | Subscription status |
| Apple | Your purchase, handled by Apple under your Apple ID | Subscriptions and billing |
| Have I Been Pwned (Pwned Passwords range API) | The first five characters of a hash of your password, never the password | Checking a new password against known breaches |
Have I Been Pwned only ever sees part of a hash. Your password does not leave our server. Apple and RevenueCat run the subscription: your payment details stay with Apple. We may also disclose information when the law requires it. Our providers may process data in the United States and other countries where they operate.
How we protect it
- Data is encrypted in transit (TLS). Encryption at rest: being confirmed.
- On your phone, sign-in tokens are kept in the iOS Keychain.
- You can lock the app with Face ID or Touch ID.
- Access to user data is limited to what’s needed.
No system is perfectly secure, so we can’t promise that nothing will ever go wrong.
How long we keep it
We keep your account data until you delete your account. Deleting your account is covered below. Our service providers keep the data they handle under their own retention rules.
Your choices
Delete your account
You can delete your account in the app (You → Delete account → Delete my account). If you haven’t signed in recently, Crumbs asks for your password first. Deletion is immediate and permanent: your account, everyone you’ve added and everything you’ve logged are removed from our database, and all your sessions end. Photos on your phone are deleted too. We then send you an email confirming the deletion. Copies in our database provider’s backups are removed as the backups rotate on the provider’s schedule. If you have an App Store subscription, deleting your account does not cancel it: cancel it in your Apple ID settings.
Export
Export isn’t available in the app yet. To get a copy of your data now, email [email protected].
Notifications and analytics
You can switch notifications off in the app and in your iPhone settings, and switch “Share usage analytics” off in You → Privacy.
Your California privacy rights
If you live in California, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA) gives you these rights:
- Know what personal information we collect, use and disclose, and get a copy of it.
- Delete the personal information we hold about you.
- Correct personal information that is wrong.
- Limit the use of sensitive personal information. We use it only to run Crumbs for you.
- Not be treated differently for using these rights.
We do not sell or share your personal information, as those terms are defined in California law. To use any of these rights, email [email protected] from the email address on your account so we can confirm it’s you. You can also delete your account yourself in the app. We’ll respond within the time the law allows.
Do Not Track. Crumbs doesn’t track you across other websites or apps, and this website uses no analytics or cookies, so there is nothing for a Do Not Track signal to switch off.
Shine the Light. We don’t disclose personal information to third parties for their own direct marketing.
This website
This website has no sign-up form, analytics, cookies or third-party scripts, and its fonts are served from the site itself. The service that hosts it keeps ordinary server logs, such as IP addresses. Links to Instagram and TikTok take you to those services, and their own policies apply there.
Changes to this policy
If we change this policy, we’ll post the new version here with a new effective date. If a change is significant, we’ll also tell you in the app or by email before it takes effect.
Contact
Privacy questions and requests: [email protected].
BizVizor LLC
3400 Cottage Way, Ste G2 #6809
Sacramento, CA 95825