Privacy Policy

Last updated: 21 September 2026

1. Who we are

Crowd is an app for making friends through small, in-person plans. It is run by Simon Riley, an individual based in California, United States, trading as Little Menace Studios ("we", "us"). We are responsible for the personal information described here.

Contact: littlemenacestudios@gmail.com

2. What we collect

Your account

Your email address and, if you sign in with Apple or Google, an identifier from that provider. If you use Apple's Hide My Email, we receive a relay address instead.
Your password, if you sign up with email. It is stored only as a secure hash by our database provider.

Your profile

Name, username, date of birth, gender, photos and captions, bio and prompts, voice note, interests, languages, occupation, and when you are usually free.
Optional details you choose to add, such as lifestyle choices, zodiac sign and religion. Religion is sensitive information; it is only ever there because you added it, and you can remove it at any time.
Your country, city and neighbourhood, and whether you are new in town.

Your location

If you allow location access, your device's location while you use the app. We store it so we can show you people and plans near you.
Other members never see your exact location. They see your city or neighbourhood and an approximate distance.

What you do in Crowd

Messages, photos, videos, voice messages and GIFs you send in chats and groups, and stories you post.
Plans you host or join, suggestions you make in chat, attendance, check-ins and the private feedback you give after a plan.
Fist bumps, friendships, groups, blocks and reports.
Profiles displayed to you in Discover, stored privately for 30 days with daily cleanup to reduce repetition. Hidden-profile choices stay until you restore them or delete your account; other members cannot see who viewed or hid them.
When you were last active, and whether you are online now (shown only to friends).

Purchases

Whether you have Crowd+, and when it renews or ends. Payment is handled by Apple or Google; we never see your card details.

Device and diagnostics

A push notification token for your device, and your notification preferences.
Your app version, operating system and device type.
Error reports when the app crashes or something fails: the error message, where in the code it happened, and your app and OS version. We do not attach what you were typing.

Usage measurement

A small, fixed set of events, such as finishing sign-up, whether Discover found anyone near you, and whether hosting a plan succeeded. These contain no messages, search terms or locations. Individual events are deleted after 30 days; only daily totals are kept, for up to 12 months.

3. How we use it

To run Crowd: create your account, show your profile, find people and plans near you, deliver messages and notifications, and run plans and groups.
To keep people safe: review reports, enforce our rules, prevent abuse and investigate misuse.
To provide Crowd+ and check your subscription status.
To fix problems and understand whether Crowd is helping people meet, using the diagnostics and usage measurement above.
To contact you about your account, safety matters or changes to these terms.

We do not sell your personal information, and we do not share it with anyone for advertising. Crowd currently shows no ads. If that changes, we will update this policy and ask for your permission where the law requires it before any advertising identifier is used.

4. Legal bases (UK and EEA)

If you are in the UK or the European Economic Area, we rely on:

Contract: to provide the service you signed up for.
Legitimate interests: keeping members safe, preventing abuse, fixing errors and improving Crowd, balanced against your rights.
Consent: for location access, notifications and optional sensitive details such as religion. You can withdraw consent at any time in your device settings or by editing your profile.
Legal obligation: where the law requires us to keep or disclose information.

5. Who can see your information

Other members see your profile, your photos, your age, your city or neighbourhood and an approximate distance.
People you message see your messages. Members of a group see what you post there.
Friends can see whether you are online. People you have blocked, or who blocked you, cannot.
Our moderators see reports, including a copy of any reported message taken at the time of the report.

6. Service providers

We use a small number of providers to run Crowd. They process information only on our instructions:

Supabase: our database, sign-in, file storage and server functions. Data is stored in Canada.
Apple and Google: sign-in, push notification delivery (Apple Push Notification service and Firebase Cloud Messaging) and in-app purchases.
Expo: delivers push notifications to Apple and Google.
RevenueCat: records your subscription status.
Google Maps Platform: when you search for a place, what you type is sent to Google to suggest locations.
GIPHY: when you search for a GIF, your search text is sent to GIPHY.

We may also disclose information if the law requires it, or to protect someone from serious harm.

7. International transfers

We are based in California, United States, and our data is stored in Canada. If you use Crowd from elsewhere, your information is transferred to those countries. Where the law requires it, we rely on appropriate safeguards for those transfers.

8. How long we keep it

Your account and profile: until you delete your account.
When you delete your account, we delete your profile, photos and other files, direct messages, friendships, plans you hosted and your login. Messages you posted in group chats stay in the group without your name.
Reports you made or that were made about you are kept, with your identity removed, so that deleting an account cannot erase evidence of abuse.
Error reports: 30 days. Usage events: 30 days, then daily totals only, kept for up to 12 months.
Copies in our provider's backups are overwritten on its normal backup cycle.

9. Your choices and rights

Delete your account at any time from your profile settings: App settings, then Delete Account. This does not cancel a Crowd+ subscription; cancel that in your App Store or Google Play subscriptions.
Edit or remove profile details at any time.
Turn off location or notifications in your device settings.
Block or report anyone from their profile or a chat.

Depending on where you live (including the UK, the EEA and several US states such as California), you may have the right to access, correct, delete or receive a copy of your information, to object to or restrict some uses, and not to be discriminated against for using these rights. Email littlemenacestudios@gmail.com and we will respond within 30 days. You can also complain to your local data protection authority.

10. Security

Information is encrypted in transit. Access to data is limited by per-member rules in our database, and staff access to reports requires a moderator role. No system is perfectly secure, so please use a strong password and tell us about anything suspicious.

11. Age

Crowd is for people aged 18 and over. We do not knowingly collect information from anyone younger. If you believe someone under 18 is using Crowd, report them in the app or email us and we will remove the account.

12. Changes

If we change this policy, we will update the date above, and tell you in the app if the change is significant.

13. Contact

littlemenacestudios@gmail.com