Privacy Policy

When you sign in

• Your phone number. Your account starts with a one-time code we text to it. Codes go to US and Canadian numbers only.
• Passkeys, if you save one. Your device keeps the private key and checks your face, fingerprint or PIN itself; we store only the passkey’s public key, its ID and a label like “Chrome on macOS”, and never see your biometrics.
• Your name, the one your friends know you by. You choose it after your first sign-in and can change it on the Me tab.
• An email address, if you add one when you join or on Me. We email it a code to confirm it’s yours. After that, signing in somewhere new can use a code by email instead of a text, friends who add you by that address find your profile, and a profile a friend saved under it joins your account.
• An Instagram handle, if you add one on Me. Friends who add you by it will find your profile. We can’t confirm that a handle is really yours, so we never use one to join two profiles together.
• Sign-in records. Each sign-in starts a session, and we note the IP address and browser type (user agent) it came from. A cookie keeps you signed in until 90 days after you last used ClubCrew.

When you use ClubCrew

• Crews: their names, who’s in them and who added whom.
• Plans: the event, who’s invited, who invited them and which crew the invite came through.
• Your answers: in, maybe or can’t make it, whether you have a ticket, when you first opened your invite link and when you answered. People on the plan can see these.
• Chat messages you post in a plan, with the time. Everyone on the plan can read them. ClubCrew also posts updates there, like who joined and who bought tickets for whom.
• Invites. When you invite people, we keep the invite text and who it’s for. ClubCrew doesn’t send invites by text or email yet: friends get the link from you.
• Ticket orders made through a plan: who bought, who for, the event, the ticket seller, the amount and our commission. Checkout is simulated during the beta. Nothing is charged, and we never ask for card details.

Technical data

• Phone number or email, and IP address, for limits. When a code is requested, we record where it’s going and the IP address the request came from. That lets us cap how many codes one number, address or network can get. Each text costs us money, and fake sign-ups are a common way to commit SMS fraud.
• Bot check. Pages where you can ask for a code (sign-in, onboarding, group links and Me) run Vercel BotID. It looks at signals from your browser to tell a person from an automated script. We only learn whether the request looked automated.
• Server logs. Vercel, which hosts ClubCrew, keeps standard request logs, such as IP address, browser type and the page requested, to run and secure the service.
• Cookies. We set only the cookies ClubCrew needs to work: your sign-in session, a guest pass when you answer an invite from its link without signing in (30 days), a short-lived one while a code is on its way (10 minutes), and one while a passkey sign-in is under way (5 minutes). No advertising or analytics cookies.

ClubCrew is built for inviting friends who aren’t on it yet. When someone adds you to a crew, they type a name for you and one of: your phone number, email or Instagram handle. We save that as a profile that isn’t anyone’s account yet (the app shows it as “not on the app yet”). We also record who added you and the crews and plans they added you to.

• We don’t collect anything else about you: no photos, no birthday, no address-book uploads, and we don’t look you up anywhere else.
• If two friends add the same number, email or handle, it’s one profile, not two.
• People in the crew see that name. They see your number or email shortened (like ••• 0101) unless they typed it themselves. Instagram handles show in full.
• People on a plan you’re invited to see your name and whether you’ve answered.
• If you were added by phone number and haven’t joined yet, your name appears on that plan’s group link, so you can tap it to claim your spot. Tapping it texts a sign-in code to the number your friend saved. People with the link see your name, never the number.
• We don’t text or email you because a friend added you. If a ClubCrew link reached you, a friend sent it. The one exception is the sign-in code above, which goes out when someone taps your name.

Finding or removing yourself

• Take it over. Sign in with the number a friend saved, or add and confirm the email they saved. The profile becomes your account, with its crews and invites already in it.
• Ask the crew’s owner. Whoever made a crew can remove anyone from it.
• Ask us to delete it. Email alex@product.inc with the number, email or handle. We’ll check it’s yours (for a number, with a code) and delete the profile and its place in every crew and plan. There’s no button for this in the app yet.
• Profiles saved only by Instagram handle can’t be taken over yet. Email us instead.
• We can’t yet stop your details from being added again. If that happens, tell us and we’ll remove them again.

• To sign you in and keep your account secure: your number, email, passkeys, codes and sessions.
• To make invites work: matching the details friends add to the right person, so your crews and invites are waiting when you join.
• To run your plans: showing crews, answers, tickets and chat to the people you’re planning with.
• To keep track of ticket orders and the commission we earn on them.
• To prevent abuse: limits, the bot check and logs help stop fraud, spam and attacks.
• To reply to you and to meet our legal obligations.

We don’t use your information for advertising, and we don’t build marketing profiles of anyone.

These companies process information for us, only to run ClubCrew:

• Twilio sends and checks sign-in codes. It gets your phone number.
• Vercel hosts the app and runs the bot check. Every request passes through it, including your IP address. Our servers run in Oregon.
• Neon hosts our database, on Amazon Web Services in Oregon. Everything described above is stored there.
• Resend sends sign-in codes by email. It gets your email address and the code. We turn off its open and click tracking.
• Ticket sellers. When you buy tickets through a plan, you buy from the seller, under its own terms and privacy policy. The seller may tell us a sale happened so we can earn a commission. We don’t give sellers your crews or your friends’ details.

We may also disclose information when the law requires it, to protect someone’s safety, or to a company that takes over ClubCrew. This policy would still apply to information collected under it.

We don’t sell personal information, and we don’t share it for cross-context behavioral advertising, as California law uses those words. That includes people friends added who aren’t on ClubCrew. We don’t use ad pixels, we don’t upload contact lists to ad platforms, and we don’t give personal information to other companies for their own marketing.

Mobile numbers and text-message consent are never shared with third parties or affiliates for marketing or promotional purposes.

The only texts ClubCrew sends are one-time sign-in codes, through Twilio. A code goes to a number when someone signs in with it, adds it on Me, or taps a name on a group link that was saved with that number. We don’t send marketing texts.

By entering your number and tapping Continue, you agree to receive a one-time sign-in code from ClubCrew by text (or by email, if you’ve confirmed one). One message per request. Message and data rates may apply. Reply HELP for help or STOP to opt out.

• Reply STOP to stop texts, and START to get them again. While you’re opted out, you may not be able to sign in with a code.
• Reply HELP, or email alex@product.inc, for help.
• Agreeing to texts isn’t a condition of buying anything.
• Carriers aren’t liable for delayed or undelivered messages.

• Your account: until you ask us to delete it. Within 30 days of that, we delete your profile, the numbers, emails and handles on it, your sign-in records, your messages and your place in crews and plans. We keep a ticket order record only if accounting rules or the law require it.
• Profiles friends made: until the person takes it over, someone removes it, or the person asks us to delete it. They don’t expire on their own yet. We plan to delete unclaimed profiles after the events they were invited to, and will update this page when we do.
• Sessions: until you sign out, or 90 days after you last used ClubCrew.
• Limit records (phone number or email, and IP address): the limits only look at the last 24 hours. Older records aren’t used for anything, but we don’t clear them out automatically yet.
• Emailed codes: we store only a scrambled (hashed) copy, and it expires after 5 minutes.
• Server logs at Vercel: for a limited time, under Vercel’s own retention rules.
• Deleted information can stay in our database provider’s backups for a short time before it’s gone.

California law gives California residents rights over their personal information. We give them to everyone:

• Know and access: ask what we hold about you and get a copy.
• Correct: change your name on Me, or ask us to fix anything else.
• Delete: your account, or a profile a friend made for you.
• Opt out of sale or sharing: we don’t sell or share, so there’s nothing to switch off. We honor Global Privacy Control signals anyway.
• Limit use of sensitive information: we use things like your chat messages only to run ClubCrew, never to infer things about you.
• Equal treatment: using these rights won’t change how ClubCrew works for you.

To make a request, email alex@product.inc. We’ll confirm it’s you, usually by texting a code to the number on your profile, and reply within 45 days. Someone you authorize in writing can make a request for you.

California’s “Shine the Light” law lets residents ask which companies we gave personal information to for their own direct marketing. The answer is none.

Some browsers send a “Do Not Track” or Global Privacy Control signal. ClubCrew doesn’t track you across other websites or apps, and doesn’t let other companies collect information about what you do on ClubCrew for advertising or to follow you across sites. So we treat every visit the same way, with or without the signal.

ClubCrew is for people 18 and over. We don’t knowingly collect personal information from anyone under 18, including children under 13. If you think someone under 18 has an account, or a friend added a profile for someone under 18, email alex@product.inc and we’ll delete it.

Connections to ClubCrew are encrypted (HTTPS). There are no passwords to steal: you sign in with a passkey or a one-time code, and our cookies are signed so they can’t be forged. Code requests are limited and bot-checked, and access to the database is limited to the people who run ClubCrew. Your information is stored in the United States. No system is perfectly secure. If a breach affects your information, we’ll tell you as the law requires.

When we change this policy, we’ll post the new version here and update the date at the top. If a change affects how we use information we already have, we’ll tell you in the app before it takes effect. See also our Terms.

ClubCrew is run by Product LLC. For questions, requests or complaints about privacy, email alex@product.inc.