UPDATED 24 September 2026

Privacy

Your photos belong with your crew. Here is what CrewRoll processes and why.

Who is responsible

CrewRoll is operated by Ankit Upadhyay. Contact support@crewroll.app for privacy questions or requests.

Your account and trips

We process your name, email address, sign-in provider and account identifier to authenticate you and help people recognise you. Your sign-in provider may also supply a profile picture. Clerk handles sign-in, verification emails and sessions, including device information, IP addresses and approximate location inferred from those addresses for account security. CrewRoll stores trip names, dates, membership and approval history, device identifiers and public keys, sharing progress, and your Terms acceptance. These support the service and protect accounts from misuse.

Photos and permissions

Full photo access lets the app detect eligible new camera photos during an active trip and save originals shared with you. CrewRoll does not upload your entire library. Photos and previews are encrypted on the device before upload; only authorised trip members have the keys to read them. Cloudflare temporarily stores encrypted copies for delivery. The service can process related metadata such as identifiers, timestamps, file type, encrypted file size, checksums and delivery status.

Original photos can include camera metadata, including capture time and location. Your trip members receive those originals. CrewRoll does not request your device’s live location. You can change photo permission in your phone’s settings; restricting it can stop automatic sharing or saving.

Service providers and security

Clerk processes account and authentication data. Cloudflare runs our website, API and encrypted object storage; Supabase hosts our service database. Expo delivers app updates and processes operating-system information, a random installation identifier and update or crash diagnostics. Network providers process information such as IP addresses and request details to deliver and secure the service. If enabled, push notification services process device tokens. These providers may process data outside your country. We do not sell personal data, show advertising, or use photos for advertising or AI training.

Our application logs exclude photo contents, access tokens, private keys, report text and signed photo URLs. We use encrypted connections and access controls. No service can promise absolute security.

How long data stays

Temporary encrypted originals are scheduled for removal after recipients confirm saving, or at the trip’s hard expiry, seven days after its scheduled end. Cleanup retries during outages. These copies are a delivery buffer, not a backup. Account and trip records remain while your account is active unless you delete it.

Account deletion normally finishes within minutes; allow up to seven days if a provider is unavailable. Completed deletion receipts remain for 30 days and contain only a random request identifier and status. A one-way hash of a deleted account identifier remains for 90 days to prevent old sessions or delayed messages recreating the account. Rate-limit records expire after a day. Safety reports remain while investigated and are removed 90 days after resolution; limited records may need to be retained for a legal obligation or a substantiated safety incident.

Deletion and your choices

Open Account → Delete account in CrewRoll, or use our account deletion page without the app. We remove your account, memberships, device credentials and associated temporary copies. Trips you host end. Photos already saved in your library or someone else’s library remain there; deleting an account cannot recall them. In-app deletion also clears CrewRoll’s private local data on that phone. For other phones, uninstall the app to remove its local files.

You can edit your name, sign out, change permissions, report a photo or member, and block people. Contact support@crewroll.app to request access, correction, deletion or to exercise other rights available where you live. We may verify account ownership first.

Children and changes

CrewRoll is not directed at children. Do not use it if you cannot lawfully consent to its use; obtain a parent or guardian’s permission where required. Report suspected child exploitation immediately through Support. We may update this policy and will identify the new effective date. Material changes requiring consent will be presented in the app.