Privacy Statement
Last updated: October 14, 2026
1. What we collect
Account data (email address, name and profile image from your sign-in provider), content you create (tasks, notes, chat messages), and basic technical data (device type, approximate location if you allow weather lookups, error logs).
2. How we use it
To provide and secure the Service, show your tasks and calendar, answer your questions through the AI assistant, and improve reliability. We do not sell your personal information.
3. Service providers
Supabase (authentication and database), Cloudflare (hosting and AI inference via Workers AI), Google (optional sign-in) and Open-Meteo (weather, receives only coordinates). Each processes data on our behalf under its own terms.
4. AI processing
Messages you send to Crystal are processed by Cloudflare Workers AI to generate a reply. We do not use your content to train models.
5. Retention
We keep your data while your account is active and delete it within 30 days of an account deletion request, except where law requires otherwise.
6. Your rights
Depending on where you live (for example under the GDPR or CCPA/CPRA) you may access, correct, delete or export your data, and opt out of sale or sharing. Contact us to exercise these rights.
7. Security
Data is encrypted in transit, and database row-level security restricts each account to its own records.
8. Children
The Service is not directed to children under 13.
9. Contact
privacy@crystal.app (placeholder, to be replaced before launch).