Legal

Privacy Policy

Last updated: 7 October 2026

Version 2.0 · Effective 7 October 2026 · Last updated 7 October 2026

Draft: company registration details are still being added.

This policy explains what personal data Crew Socials ("we", "us") processes when you use the CrewSocials app and website, why, on what legal basis, who receives it, how long we keep it and your rights under the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).

1. Who we are

Operator and data controller: Crew Socials (trading as Crew Socials)
Registered address: [LEGAL CONFIGURATION ITEM: to be supplied before launch]
Tax ID (NIF/CIF): [LEGAL CONFIGURATION ITEM: to be supplied before launch]
Company registry: [LEGAL CONFIGURATION ITEM: to be supplied before launch]
Privacy contact: privacy@crewsocials.com(tap to email)

2. What we process and why

Each activity below has its own legal basis. We do not rely on consent unless it says so.

Activity	Data	Legal basis	Kept for
Account and crew verification	Name, work email, airline, crew role, base, password (hashed), sign-up IP and browser for rejected or reviewed sign-ups	Contract (art. 6(1)(b)); legitimate interest in keeping the network crew-only (art. 6(1)(f))	While your account exists. Rejected sign-ups: 24 months
Profile and social features	Photo, bio, languages, friends, hearts, crew tips, activities you host or join	Contract	While your account exists
City presence and layovers	Your city, layover dates, a location rounded to about 1 km	Contract; device location only with your device permission	Until the presence ends (automatic expiry)
Messages	Lounge, activity and direct messages, images you send	Contract	City lounge messages: 48 hours. Activity chats: removed a set number of days after the activity ends. Direct messages: while either account exists
Safety and moderation	Reports, the reported content, warnings, restrictions, appeals, moderator access logs	Legitimate interest (safety, abuse prevention); legal obligation where applicable	Up to 24 months after the case closes, longer only if needed for a legal claim
Reliability and attendance standing	No-show history, attendance confirmations, automated risk indicators	Legitimate interest (fair, safe meetups)	While your account exists
Booking link clicks	Which experience you opened, the activity and city, device type, browser details, phone language region, time	Legitimate interest (measuring affiliate referrals)	Up to 36 months for commission reconciliation
Notifications and email	Push token, email address, delivery logs	Contract; marketing email only with your choice and a one-click unsubscribe	Push tokens until sign-out. Email logs: 7 to 180 days by type
Error reports	Error message, app version, page path, browser, your account ID if signed in	Legitimate interest (keeping the app working)	90 days
Data export and deletion requests	Request records, IP and browser for security	Legal obligation; legitimate interest (security)	Export file: 24 hours. Request records: 24 months

3. Location in detail

Device location: when you allow it, your phone shares its position with the app. It is sent to our server only to work out your city, distances and nearby crew and activities.
What we store: the position is rounded to two decimal places (about 1 km) before it is saved, together with your city and layover window.
Who sees it: your travel visibility setting decides who can see your presence. Mutual friends may see more detail (such as timing); other crew see approximate information without schedule times. Your airline and crew role are shown with your presence.
How long: presence expires automatically. After 7 days a stale presence no longer appears to others.
Background: the app does not collect location in the background.
Outside services: to show weather, your phone sends a city's approximate coordinates (not your identity) directly to Open-Meteo. Map tiles are fetched through our own server.
You can turn device location off at any time in your phone settings and set your city manually.

4. Moderation and automated decisions

Messages in lounges and activity chats are visible to members of those spaces. Moderators may read reported messages and their surrounding context, but only inside a specific report or case; every access is logged. Messages are encrypted in transit but are not end-to-end encrypted.

We use automated signals (such as repeated no-shows or abuse patterns) to flag accounts. These can limit features like joining activities. You are told the reason, you can appeal, and you can ask for a person to review any automated decision (GDPR art. 22).

5. Who receives your data

Our service providers (processors), who act only on our instructions:

Lovable Cloud (database, sign-in, file storage, email delivery) and its infrastructure providers
Cloudflare (hosting, content delivery, bot protection on the website)
Lovable AI gateway and Google (generating City Guide text and images from place information; we do not send your profile, photos or messages)
Protomaps (map tiles, requested by our server) and Serper (place lookups from venue names)

Independent businesses with their own privacy policies:

Apple and Google, to deliver push notifications to your device
Open-Meteo, when your phone requests weather
Third-Party Booking Providers (currently Musement). When you tap a booking button, you leave CrewSocials. The link carries our affiliate ID, campaign tags naming where in the app you tapped, and your chosen currency. It does not carry your name, email or account ID. Anything you enter on the provider's site is handled by them.
Other crew, as described in section 3 and your privacy settings

We do not sell personal data and we do not show advertising. We may disclose data when the law requires it, to enforce our Terms, or to protect someone from serious harm.

6. International transfers

Some providers are based in, or may access data from, the United States or other countries outside the European Economic Area. Where that happens we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses with additional safeguards. You can ask us for details.

7. Account deletion

You can delete your account in Settings. You have 30 days to change your mind; then your profile, content and messages are removed. To prevent banned or rejected users from returning, we keep a blocked email or domain record and rejected sign-up records for the periods above, and moderation records needed for safety or legal claims.

8. Your rights

You can access, correct, delete, restrict or object to processing, and receive your data in a portable format. You can export your data and delete your account in Settings, or write to privacy@crewsocials.com(tap to email). Where we rely on consent, you can withdraw it at any time without affecting earlier processing. You can complain to the Agencia Española de Protección de Datos (AEPD), www.aepd.es, or to the authority where you live.

9. Security

Data is encrypted in transit, access is limited by role, and staff access to sensitive content is logged. Profile photos are served publicly by link so they load quickly; images sent in chats are private.

10. Children

CrewSocials is only for people aged 18 or over. We delete accounts we learn belong to minors.

11. Cookies and similar technologies

See our Cookie Policy.

12. Changes

We will tell you about material changes in the app or by email before they take effect. This policy is information about how we use data; it is not a request for consent.