Privacy Policy

Last updated: 17 September 2026

This Privacy Policy explains how CRW+ collects, uses, stores, shares, and deletes personal data when you use the CRW+ mobile application and related services. CRW+ is currently operated by the CRW+ development team. For privacy questions or requests, contact [email protected].

1. Who controls your data

CRW+ is currently operated by the CRW+ development team. Until a formal business entity is established, privacy requests should be directed to [email protected]. Before commercial launch, CRW+ should update this section with the full legal identity and postal address of the data controller where required by applicable law.

2. Who can use CRW+

CRW+ is intended for users aged 13 or older. If the law where you live requires a higher age to consent to online services or requires consent from a parent or legal guardian, you may use CRW+ only if those requirements are met. CRW+ is not intended for children under 13.

3. Personal data we collect

Depending on the features you use, CRW+ may collect:
• Account data: first name, last name, email address, password credentials in protected form, and @username.
• Optional profile data: age, weight, height, country, city, profile photo, and other profile information you choose to provide.
• Google sign-in data: only the basic account information needed to authenticate you and create or access your CRW+ account.
• Workout data: workout type, start and end time, duration, distance, pace, speed, calories, steps, results, and related workout statistics.
• Location data: precise GPS location and route information while an active workout is running, when you give permission.
• Connected health and fitness data: data you choose to authorize from Apple Health/HealthKit or Android Health Connect, which may include workouts, heart rate, steps, calories, distance, and other fitness-related data necessary for CRW+ features. CRW+ does not intentionally request sleep, menstrual cycle, or similar reproductive-health data.
• User content: published workouts, results, event information, club information, profile photos, reports, and content visibility settings.
• Safety feature data: the location included in an SOS message when you activate the SOS feature.
• Communications and preferences: marketing-email consent, notification preferences, support requests, and reports submitted to moderators.

4. How we use your data

We use personal data to provide and secure your account; record and display workouts; calculate fitness statistics; operate leaderboards; allow you to create or join clubs and events; provide privacy controls for workouts; enable optional health-platform integrations; send service notifications; send marketing emails only where you have opted in; operate reporting, blocking, moderation, and anti-NSFW protections; provide the SOS feature; prevent abuse and maintain service security; and comply with applicable legal obligations.

5. Location and route data

CRW+ requests precise location only when needed for workout tracking. Location tracking is not intended to run continuously outside an active workout. Depending on your settings, workout routes may be stored on CRW+ servers or kept only on your device through an available 'local only' option. You can choose visibility controls for workouts, including hiding them or sharing them only with friends where that feature is available.

6. Health and fitness integrations

Connecting Apple Health/HealthKit or Android Health Connect is optional. CRW+ requests only the permissions needed for the features you choose to use. Health and fitness data obtained through these integrations is used only to provide fitness-related functionality to you and is not used for targeted advertising, sold, or used to build advertising profiles. You can revoke health-data permissions through your device settings or the relevant health platform.

7. Public and social features

Your @username and any information you choose to publish may be visible to other CRW+ users. Depending on your settings, published information may include workout results, leaderboard statistics, clubs, events, and profile information. You are responsible for choosing appropriate privacy settings before publishing content. CRW+ may provide controls such as private, friends-only, or public visibility depending on the feature.

8. Profile photos and moderation

Users may upload profile photos. CRW+ uses basic automated anti-NSFW protections and also allows users to report profile photos and other content. Automated protections are not guaranteed to detect every inappropriate image. Moderators may remove content or accounts that violate CRW+ rules.

9. Clubs and events

Club and event creation may be subject to moderator approval. Events listed in CRW+ are currently informational and are not sold by CRW+. If an event displays a price, that price is information supplied by the organizer about a payment that may be collected separately or on site. CRW+ does not process those event payments and is not responsible for the organizer's payment handling, refunds, cancellations, or performance.

10. SOS feature

If you activate SOS, CRW+ may prepare or trigger a pre-written SMS to the trusted contact you selected, including your current or last available location, and may stop the active workout. CRW+ does not provide emergency dispatch services and does not guarantee delivery of an SMS or availability of mobile, GPS, or network services. In an emergency, contact the appropriate local emergency number.

11. Marketing emails and push notifications

CRW+ may send push notifications related to account activity, workouts, clubs, events, safety, and service operation. Marketing emails are sent only where you have opted in. You can withdraw marketing consent using the unsubscribe link in a marketing email or the marketing preference switch in the app. Withdrawing marketing consent does not prevent necessary service or security messages.

12. Sharing and service providers

CRW+ does not sell your personal data. Data may be processed by service providers only where needed to operate CRW+, such as infrastructure, authentication, email delivery, push notifications, security, domain/network services, and future payment processing. CRW+ uses Cloudflare in connection with its domain/network services and operates its own backend hosted in Poland, European Union. If Stripe is introduced for CRW+ subscriptions or other payments, Stripe will process payment information under its own privacy terms and CRW+ will update this Policy before that feature is launched.

13. International users and transfers

CRW+ is available globally, while its backend is hosted in Poland, European Union. If personal data is transferred outside the European Economic Area, CRW+ will use safeguards required by applicable law where necessary. Users outside the EU should understand that their data may be processed in the EU.

14. Data security

CRW+ uses reasonable technical and organizational measures designed to protect personal data, including secure network transport and access controls. No internet service can guarantee absolute security. You are responsible for keeping your password and device secure.

15. Data retention

Data associated with an active account is retained for as long as needed to provide CRW+ and for the purposes described in this Policy. When you request account deletion, the account and associated user data are scheduled for permanent deletion. Residual copies in technical backups may remain for up to 7 days before permanent removal, unless longer retention is required by applicable law or is strictly necessary to establish, exercise, or defend legal claims, prevent fraud, or address security incidents.

16. Account deletion

You can request deletion from within CRW+ using the account settings flow and confirming the request, including by email where required by the flow. You can also use https://crw-plus.com/delete-account. Deleting an account removes the account and associated content, including workouts, posts, clubs, and events created by that account, subject to the limited backup period described above.

17. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, to receive a portable copy where legally required, and to withdraw consent where processing is based on consent. You may also have the right to complain to a data-protection authority. To exercise a privacy right, contact [email protected]. CRW+ may need to verify your identity before completing a request.

18. Legal bases for users in the EEA, UK, and similar jurisdictions

Where required, CRW+ relies on one or more of the following legal bases: performance of a contract to provide requested app features; consent, including for optional health integrations, precise location, and marketing; legitimate interests such as security, moderation, abuse prevention, and service improvement where those interests are not overridden by your rights; and compliance with legal obligations. Health-related data may receive additional protection under applicable law and is processed only where an appropriate legal condition applies.

19. Changes to this Policy

CRW+ may update this Privacy Policy when features, providers, or legal requirements change. Material changes may be communicated in the app or by email where appropriate. The 'Last updated' date will be changed when this Policy is revised.

20. Contact

Privacy and support contact: [email protected]