Privacy Policy

crwded is operated by Innominal Technologies Limited, the data controller responsible for your personal information. References to "we," "us," or "our" in this policy refer to Innominal Technologies Limited. References to "crwded" or "the service" refer to the crwded mobile application and crwded.app website.

We collect information you provide directly to us, including: • Account information: Name and email address from Google or Apple Sign-In. For Apple Sign-In, Apple provides your name only on first sign-in. A profile photo is included if your Google or Apple account provides one. • City: The city you select during profile setup, used to match you with nearby groups. You can change it at any time from Settings. • Activity preferences: Your interests, availability, and group size preferences collected during the onboarding assessment • Usage data: Meetups attended, RSVPs, ratings given, and messages sent within groups • Device information: Push notification tokens and crash reports (sent via Sentry) • Waitlist signups: If you join the waitlist on this website, we collect your email and optional city

We use the information we collect to: • Match you with compatible groups based on your city and preferences • Schedule and propose meetups at convenient times and locations • Send push notifications about upcoming meetups and group activity • Generate activity and venue suggestions using AI (Google Gemini) • Improve our matching algorithm and activity recommendations • Communicate with you about your account and our services • Monitor app stability and diagnose crashes via Sentry • Understand how visitors use this website via Google Analytics (only if you accept the cookie banner) Legal basis for processing (GDPR Art. 6): we process your data under (a) your consent for push notifications, analytics cookies, and assessment data, (b) contract performance for account and matching services, and (c) legitimate interests for fraud prevention and platform safety.

We use Google Gemini AI to process your onboarding assessment responses and generate activity/venue suggestions. Your assessment responses are sent to Google Gemini via our server. Google's data processing is governed by Google's privacy policy and their AI commitments. We do not use AI for automated decision-making that significantly affects you — all matching is recommendation-based and you choose whether to act on it. You can skip the assessment during onboarding; default preferences will be used instead.

We do not sell your personal information. We share information only: • With other group members: Your name (and photo, if set) is visible to members of groups you join • With service providers: Google Gemini (AI), Google Maps/Places (location and venues), Expo (push notifications), Sentry (crash reporting), Supabase (backend infrastructure), Cloudflare (bot protection on this website), and Google Analytics (website usage, only with your consent) • When required by law: To comply with legal obligations or respond to valid legal requests • To protect rights: To enforce our terms or protect users' safety crwded does not use advertising or ad networks — there are no ads in the app or on this website.

We use these third-party services, each with its own privacy policy: • Google OAuth & Apple Sign-In for authentication • Google Gemini for AI assessment processing and activity suggestions • Google Maps & Places API for city selection and venue data • Expo Push Notifications for delivering push notifications • Sentry for crash reporting and error monitoring • Supabase for backend infrastructure, authentication, and database services • Cloudflare Turnstile for bot protection on the waitlist form on this website • Google Analytics (GA4) for website usage analytics — only loaded after you accept the cookie banner on this site

crwded is based in Montreal, Quebec, Canada. Your data is processed by third-party providers (Google, Sentry, Supabase, Cloudflare) whose servers may be located outside Canada — typically in the United States and Europe. We rely on standard contractual clauses, provider-level data transfer agreements, and applicable Canadian federal/provincial privacy laws (PIPEDA, Law 25) to ensure appropriate safeguards. By using crwded, you consent to these transfers. For transfers outside Canada, we ensure an adequate level of protection as required by Law 25 (Sections 16 and 17 of the Act respecting the protection of personal information in the private sector).

We retain your information for as long as your account is active. You can request account deletion at any time from Settings. Account deletion is immediate and permanent — when you delete your account, we: • Permanently delete your profile, auth identity, preferences, group memberships, RSVPs, push tokens, and assessment history • Anonymize your message history (messages remain but are no longer associated with your identity) • Delete any groups left with zero active members Waitlist signups on this website are retained until you ask us to remove them. To request data export or deletion, contact privacy@crwded.app.

If you are in the EU, UK, or EEA, you have the right to: • Access and receive a copy of your personal data • Rectify inaccurate personal information • Erase your personal data ("right to be forgotten") • Restrict or object to processing • Data portability — receive your data in a structured, machine-readable format • Withdraw consent at any time (without affecting processing before withdrawal) • Lodge a complaint with your local data protection authority To exercise these rights, contact privacy@crwded.app. We respond within 30 days. We do not engage in automated decision-making or profiling that produces legal effects.

If you are a California resident, you have the right to: • Know what personal information we collect and how it is used • Delete your personal information • Opt-out of the sale or sharing of your personal information • Non-discrimination — we will not discriminate against you for exercising your rights We do not sell your personal information. Categories of data we collect: identifiers (name, email), commercial information (activity preferences), internet activity (messages, RSVPs, website usage), and geolocation data (city). To exercise these rights, contact privacy@crwded.app. Authorized agents may submit requests on your behalf with written permission.

crwded is based in Montreal, Quebec, Canada. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25 (Act modernizing legislative provisions respecting the protection of personal information). Under PIPEDA and Law 25, you have the right to: • Access and obtain a copy of your personal information • Correct inaccurate personal information • Withdraw consent for the collection, use, or disclosure of your personal information • Be informed of the purposes for which your personal information is collected • Require that your personal information be destroyed when it is no longer needed • Object to the use of your personal information for automated decision-making Law 25 additionally provides: • The right to be informed if your personal information is used for automated decision-making (we do not use automated decisions that produce legal effects) • The right to have your personal information deleted when collection is no longer justified • The right to be notified of a privacy breach involving a risk of serious injury To exercise these rights, contact privacy@crwded.app. We respond within 30 days. You may also lodge a complaint with: • Commission d'accès à l'information du Québec (CAI): cai.gouv.qc.ca • Office of the Privacy Commissioner of Canada (OPC): priv.gc.ca

crwded is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will promptly delete that information. Contact privacy@crwded.app if you believe a minor has registered.

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of the service after changes constitutes acceptance of the new policy.

If you have questions about this privacy policy, please contact us at: Innominal Technologies Limited Email: privacy@crwded.app Data deletion: delete@crwded.app Data Protection Officer: privacy@crwded.app