Privacy Policy

Last updated: April 17, 2026

Overview

CribCruise ("the App") is designed with your privacy in mind. Listing discovery and photo evaluation happen entirely on your device. Social features (authentication, friends, and reactions) use a secure backend to enable sharing between users. We do not sell your data, serve ads, or use third-party tracking.

Account and Authentication

CribCruise offers two ways to sign in: Sign in with Apple, or email and password. Authentication is handled through Supabase, a secure backend service.

Sign in with Apple: When you sign in with Apple, we request:

Apple user identifier: A unique, anonymous ID provided by Apple.
Your name: Apple lets you choose whether to share your full name or hide it. If you share it, we store it as your display name so friends can recognize you. If you hide it, your display name is left blank.
Your email: Apple lets you choose whether to share your real email or a private relay email that forwards to you. Your email is stored in our authentication system (Supabase) and is used only for account management. We do not send marketing emails.

Email and password: When you sign in with email, we collect your email address and a password. Passwords are hashed and stored securely by Supabase — we never see or store your password in plaintext. Your email is used only for account management. We do not send marketing emails.

Data Stored on Our Servers

To enable social features, the following data is stored on our secure backend (hosted by Supabase):

User profile: Your account identifier (Apple user ID or email) and display name.
Friend connections: A record of which users are friends (mutual only).
Reactions: Emoji reactions you place on listing photos, visible to your friends.
Invite tokens: Tokens generated when you invite friends, used to establish connections.

Data Stored on Your Device

The following data is stored locally on your device and never transmitted to us:

Selected city: Your chosen city preference so the app remembers it between sessions.
Saved listings: Homes you save are stored on-device using Apple's SwiftData framework.
Cached listing data: Property listings are temporarily cached on your device to improve performance. This cache expires automatically after 24 hours.
Photo evaluation scores: On-device machine learning scores for listing photos. Never transmitted.

Location Data

CribCruise may request access to your device's location services to suggest your nearest city. Location data is processed entirely on your device and is never transmitted to external servers. You may deny location access and manually search for a city instead.

Data We Do Not Collect

CribCruise does not collect or store:

Analytics or tracking data
Advertising identifiers
Usage or behavioral data sent to third parties
Your browsing history or which listings you view

Third-Party Services

CribCruise uses Supabase for authentication and social features. Supabase processes data in accordance with its own privacy policy. We do not share user data with any other third parties. CribCruise retrieves publicly available property listing data to display in the app. The App does not use third-party analytics, advertising SDKs, or tracking frameworks.

Account Deletion

You can delete your account at any time from the Profile tab → Settings → Delete Account. Deleting your account immediately and permanently removes your profile, display name, friend connections, reactions, invite tokens, and authentication record from our servers. This action cannot be undone.

Children's Privacy

CribCruise does not knowingly collect information from children under 13. If we learn that a child under 13 has created an account, we will delete the account and associated data.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the App constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy, contact us at support@cribcruise.com.