1. Who this policy covers
This Privacy Policy applies to the Krew mobile application, the mykrew.online website, and related Krew services (together, the “Service”). “Krew,” “we,” “us,” and “our” refer to the operator of the Service.
2. Information we collect
Account and profile information
We collect the phone number used to register or sign in, country code, one-time-code verification records, name, username or handle, profile photo, biography, profile-space information, privacy settings, and time zone where provided or generated.
Content and communications
We process content you create or share, including messages, photos, videos, audio, documents, reactions, posts, stories, comments, circles, chat themes, and associated timestamps and delivery/read status. Content is shared with the people and groups you choose.
Contacts
If you affirmatively agree to contact matching and grant contacts permission, Krew accesses your phone contact list and transmits normalized contact phone numbers to Krew's server at mykrew.online. The server compares those numbers with registered Krew accounts so the app can identify people you may already know, return matching Krew account details to you, and keep those matches updated. Contact names remain on your device and are not transmitted. Submitted address-book numbers are processed for matching and are not saved as a separate contact list. Krew does not sell this data or share it with advertisers or unrelated third parties. You can decline this feature or revoke contacts permission in device settings.
Location
If you choose to share a current or live location, we process precise or approximate coordinates, accuracy, place label, sharing duration, and update timestamps to deliver that location to the selected chat. Krew does not use location for advertising. Live-location processing stops when you end sharing or its timer expires, subject to delivery and retention described below.
Camera, microphone, calls, and media
With your permission, Krew uses the camera and microphone for captured media, voice messages, and voice/video calls. Call setup information and call status are processed to connect calls. Audio and video call media are processed in real time; Krew does not intentionally record call media as a server-side recording.
Device, notification, and technical information
We process push-notification tokens, device platform and app version, IP address, request timestamps, connection and delivery information, and diagnostic or security logs needed to operate, secure, troubleshoot, and prevent abuse of the Service.
3. How we use information
- Register and authenticate accounts using one-time codes.
- Provide profile spaces, chats, calls, posts, stories, circles, media, location sharing, notifications, and presence features.
- Deliver content to intended recipients and synchronize it across sessions.
- Protect users, investigate abuse, enforce our Terms, and maintain service integrity.
- Debug failures, improve reliability, and understand aggregate service performance.
- Comply with law and respond to valid legal requests.
4. Legal bases
Depending on your location, we process information to perform our contract with you, based on your consent (including device permissions), for our legitimate interests in operating and securing Krew, and when required by law. You may withdraw permission through Krew or device settings, but some features will then be unavailable.
5. When information is shared
We share information only as needed with: (a) users and groups you choose; (b) service providers acting for us, including cloud hosting and storage, content delivery, push notifications, SMS/OTP delivery, and communications infrastructure; (c) authorities where legally required or necessary to protect rights and safety; and (d) a successor in a merger, financing, reorganization, or sale, subject to appropriate protection.
Current infrastructure may include Amazon Web Services for cloud media storage, Google Firebase Cloud Messaging for notifications, and Brevo for OTP/SMS delivery. These providers process limited information needed to perform their services under their own terms and safeguards.
6. Storage and security
Krew uses HTTPS/TLS for network transport, access controls, authentication tokens, and other technical and organizational safeguards. Message text is encrypted before database storage. Media may be stored in controlled cloud storage and served through restricted or time-limited links where configured.
7. Retention and deletion
We retain account information while your account is active and retain content for as long as needed to provide the Service, honor user-selected disappearing controls, maintain security, resolve disputes, and meet legal obligations. Technical logs and backups may remain for a limited period before routine deletion. Content previously delivered to another user may remain on that user’s device, and information may be retained where law, fraud prevention, or safety requires it.
You can request deletion of your Krew account and associated data using our account-deletion page. We may verify ownership before acting on a request.
8. Your choices and rights
You can edit profile details and privacy settings, revoke contacts/camera/microphone/location/notification permissions, stop live-location sharing, delete eligible content, and request access, correction, deletion, restriction, objection, or portability where applicable law provides those rights.
9. Children
Krew is not directed to children under 13, or the higher minimum age required in a user’s country without valid parental authorization. If you believe a child provided information contrary to applicable law, contact us so we can investigate and delete it.
10. International processing
Your information may be processed in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers.
11. Changes to this policy
We may update this policy as Krew changes. We will post the revised version here, update the date above, and provide additional notice when required.
12. Contact
For privacy questions or requests, email privacy@mykrew.online. Please do not send passwords, passcodes, or one-time codes.