Privacy Policy

1. What we collect

Information you provide directly:

• Account info: name, email, and password (your password is never stored or visible to us — it's handled by our authentication provider).
• Profile info (optional): phone number, profile photo, bio, and social media handles (Instagram, TikTok, X/Twitter, LinkedIn, website).
• Listing info: title, city, neighborhood, price, dates, description, amenities, and photos for any place you list.
• Messages: the text and photos you send to other users through Crash.
• Saved listings: which listings you've bookmarked with the save/heart button.
• Reports: if you report another user, we keep the reason you gave and which conversation it relates to.

2. How we use your information

• To create and manage your account, and let you sign back in.
• To display your listings and public profile (name, photo, bio, socials) to other users.
• To deliver messages between you and the people you're chatting with.
• To let you find your saved listings later.
• To review reports and keep the platform safe.
• To respond to support requests.

3. Who can see your information

We don't sell your personal information. Here's specifically who can see what:

• Other users can see your name, profile photo, bio, and social links (this is public, shown on your host profile page). Your email and phone number are private and are not shown to other users.
• Messages are only visible to you and the other person in that specific conversation — not to other users, and not searchable or visible elsewhere on the site.
• Site administrators (a small number of designated Crash staff accounts) can access account details, listings, and reports for moderation and safety purposes — for example, to investigate a report or remove content that violates our terms.
• Service providers: your data is stored and processed by our infrastructure providers — Supabase (database, file storage, and authentication) and Vercel (web hosting) — solely to run the service. We don't use any third-party analytics or advertising trackers.
• We may share information if required by law.

4. Cookies and tracking

Crash uses your browser's local storage to keep you signed in between visits. We do not currently use cookies for tracking, third-party analytics, or advertising pixels of any kind.

5. Data retention and deletion

We keep your information as long as your account is active. You can permanently delete your account at any time from Account settings — this is a real, immediate deletion: it removes your login (you can't sign back in with it), your profile, your listings, and your message history. This cannot be undone.

6. Your choices

You can update your profile info, unsave a listing, delete individual listings, or delete your entire account from the account settings page. You may also contact us to ask what data we hold about you.

7. Security

Your data is protected by database-level access rules that restrict who can read or change what — for example, only you can read your own email/phone, only the two people in a conversation can read its messages, and only designated admin accounts can access moderation tools. Data is encrypted in transit. No online service is completely secure, so we encourage you to use a strong, unique password and report suspicious activity.

8. Children's privacy

Crash is not intended for users under 18. We do not knowingly collect personal information from children. If we learn that a child under 18 has provided us with personal information, we will delete it.

9. Changes to this policy

We may update this privacy policy as the service evolves. We will notify users of material changes through the app or by email. Continued use after changes means you accept the updated policy.

10. Contact us

Questions about privacy or data practices can be sent to support@crashhousing.com.