This policy describes what information the Brew Crush app and brewcrush.com collect, how we use it, and the choices you have — including how to delete your account and data.
Information we collect
- Account information: username, email address, phone number, date of birth, gender, and a password (stored only as a salted hash). If you sign in with Google or Apple, we receive your name and email from that provider instead of a password.
- Profile information you choose to share: photos, bio, interests, occupation, relationship goals, lifestyle answers, and prompt responses. Your profile is visible to other Brew Crush users.
- Location: approximate location (city-level coordinates) used for distance-based matching and, if you enable it, Travel Mode. We do not track you in the background.
- Messages: text, photo, and voice messages you exchange with matches. Messages are visible only to you and the person you matched with (and to our moderators if one of you reports the conversation).
- ID verification (optional): if you request a verified badge, you submit a selfie and a photo of a government ID. These images are used only for the manual review and are automatically deleted after the review is approved or rejected — only the verification result is kept.
- Payment information: subscriptions and purchases are processed by Stripe, Apple, or Google. We never see or store full card numbers.
- Usage and device data: app activity (likes, matches, log-ins), device push tokens for notifications, and standard server logs including IP address.
How we use it
- To run the service: matching and discovery (including distance and compatibility scoring), chat, notifications, and subscriptions.
- To keep the community safe: enforcing blocks, reviewing reports, preventing spam, fraud, and abuse, and verifying identity when you request it.
- To communicate with you: verification codes, security alerts (for example a 2FA login code or password-reset code), and support replies.
- We do not sell your personal information, and we do not show third-party ads.
Who we share it with
Only service providers that make the app work, and only what they need:
- Stripe (card payments), Apple and Google (in-app purchases)
- Twilio (SMS verification codes), SendGrid (email delivery)
- Google Firebase (push notifications), Cloudflare (site and API delivery)
We may also disclose information if required by law, or to protect the safety of our users (for example, responding to a valid legal request about a safety report).
How long we keep it
- Account and profile data: for as long as your account exists.
- ID-verification images: deleted immediately after review (see above).
- Server logs: rotated on a short schedule.
- After account deletion: your profile, photos, messages, matches, and interests are permanently deleted (see below). We may retain limited records where reasonably necessary for safety, fraud prevention, dispute resolution, or legal compliance — for example a record that a reported account was actioned.
Deleting your account and data
You can delete your account two ways:
- In the app: Profile → Settings → Delete account.
- On the web (no app needed): visit brewcrush.com/delete-account. We email a confirmation code to the address on the account; entering it permanently deletes the account.
Deletion is permanent and includes your profile, photos, messages, matches, likes, interests, and stored payment references. Active subscriptions are cancelled as part of deletion (billing already processed by Apple/Google follows their refund policies).
Your choices
- Edit or remove profile information and photos at any time in the app.
- Control notifications in the app and in your device settings.
- Block or report any user; blocked users cannot see or contact you.
- Request a copy of your data or ask a privacy question via support.
Age requirement
Brew Crush is for adults 18 and older. We do not knowingly collect information from anyone under 18; accounts found to belong to minors are removed.
Security
All traffic is encrypted in transit (TLS). Passwords are stored as salted bcrypt hashes. Photos are served only through short-lived signed URLs. Access to production systems is restricted and logged.
Changes to this policy
If we make material changes, we will update this page and note the new effective date above. Continued use of Brew Crush after a change means you accept the updated policy.
Contact
Questions about privacy or your data? Reach us through the support page.