Privacy Policy

Effective date: 4 August 2026

The short version

crosd is built so that your photos and your map never leave your phone. We read only the location and time metadata written into your photos, on your device. When you choose to compare with someone, only irreversible place-time hashes are exchanged — never coordinates, never images.

What we collect

• Photo metadata (on device only). Latitude, longitude and timestamp are read from your photo library to build your trace. The images themselves are never opened for content, uploaded, or shown to anyone. Your trace (the map of places) is stored only on your device.
• Place-time hashes. If you enable comparisons, one-way hashes of quantised place-time cells are stored in our database (Google Firebase, EU region) so that an invited person can compare with you. Hashes cannot be turned back into your map by the other person.
• Account data. If you sign in with Apple or Google we store your user ID and the display name you choose. Anonymous use is supported; then we store only a random identifier.
• Purchase state. Subscriptions are processed by Apple through the App Store and RevenueCat. We never see your payment details.

What we never collect

• Your photos, or anything visible in them
• Your live location — crosd never uses GPS tracking
• Your contacts list — matching, when enabled, happens on your device against hashed numbers
• Advertising identifiers — crosd contains no ads and no third-party trackers

Comparisons and consent

Nothing is compared until the other person explicitly accepts. Each side learns only the places and times you were both in, to the precision you chose (25 m–1 km, 30-minute windows). Declining an invite shares nothing further. Hidden places are removed from your data before any comparison and are never disclosed to exist.

Deletion

Settings → Data → Delete my trace removes your trace from the device and your hashes from our servers. Deleting your account removes your identifier, so no future comparison can name you. You can also email us for deletion.

Data processors

Google Firebase (authentication and database, EU multi-region eur3), Apple App Store and RevenueCat (subscriptions). Each processes data only as needed to provide the service.

Children

crosd is not directed at children under 13 and we do not knowingly collect their data.

Changes

We will post any changes to this policy on this page and update the effective date.

Contact

Questions or requests: tahtaciburak@gmail.com