Privacy Policy

Who we are

Appcrush is run by Appcrush, operated by Flora Tong. We're the controller of the personal data described here. Reach us at hi@appcrush.app.

What we collect

Everyone with an account

• Email address, a hashed password (we never see the password itself), your role, and when you accepted our terms.
• Invite or promo codes you use, and credits you earn.
• Messages you send in Appcrush chat and the files you attach, and when they were read. We also record your time zone and when you were last online, which the people you're messaging can see.
• Orders: what was paid, held, refunded or paid out, and every status change, revision request and dispute.

Creators

• Profile: display name, photo, country, city, age range, languages, headline, bio, phones and editing tools, video styles and niches.
• Social links, follower count, rates, and the portfolio videos and images you upload.
• Applications you send, including your message and quote, and reviews developers leave you.
• Videos you deliver, stored privately. The developer sees a watermarked preview until they approve and you're paid.
• Payout details: your Stripe payout account ID and status, or for manual payouts the payout country, method and the account email for it. If US tax rules require it, we also collect tax information (W-9 or W-8BEN: legal name, address and tax ID) through an online form.

Developers

• Display name, studio and website.
• Jobs you post: app name, link and icon, the brief, budget, requirements and deadline.
• Who you shortlist and hire, and the reviews you write.
• Billing details you give us or Stripe when you pay. We don't see or store full card numbers.

Anyone

• What you send through the contact form: name, email, who you are, the topic and your message.
• Emails you send us, and our replies.
• Technical data: IP address, browser and device details, and pages requested, in server logs and for rate limiting. Page analytics are aggregated and don't use cookies.

How we use it, and why

For visitors in the UK and EU, the legal basis for each use is in brackets.

• Running your account, showing profiles and jobs, matching creators to jobs, and sending the emails that go with it, such as applications, hires and approvals (contract).
• Coordinating payments and payouts, and handling disputes (contract).
• Keeping tax and payment records, and answering lawful requests (legal obligation).
• Reviewing creator profiles, preventing fraud, spam and abuse, rate limiting, and keeping the site secure (legitimate interests).
• Automatically checking chat messages, file names and dispute reasons for email addresses, phone numbers, outside links and requests to pay off Appcrush, and hiding them. When something is hidden, or a message is reported, we keep the original text so our team can review it and act on repeated attempts (legitimate interests: keeping payments and their protection on the platform).
• Answering messages, fixing bugs and improving Appcrush from aggregated usage (legitimate interests).
• Anything optional we ask you to agree to separately (consent, which you can withdraw at any time).

Match scores and “Appcrush picks” are automated suggestions to help developers choose. The developer always makes the hiring decision. We don't make decisions with legal or similarly significant effects about you by automated means alone.

What's public

Some things are public on purpose, because that's how the marketplace works:

• Approved creator profiles: everything on the profile, including name, photo, country, city, age range, languages, socials, follower count, rates, portfolio, reviews and job stats. Drafts and profiles under review are not public. Payout details and tax forms are never public.
• Open jobs and the poster's developer profile: display name, studio and website.

Applications are seen only by the developer of that job. Search engines may index public profiles and open jobs.

Who we share it with

We don't sell your personal data or share it for targeted advertising. We share it with the services that run Appcrush for us, under contracts that limit them to doing that work:

When a developer hires a creator, we share what each needs to do the work, such as contact emails. We may also disclose data if the law requires it, to protect people's safety or rights, or as part of a sale or reorganization of Appcrush, in which case this policy keeps applying to it.

Cookies and local storage

We don't use advertising or tracking cookies. The site keeps a few items in your browser's local and session storage so it works:

All of these are strictly necessary or remember a choice you made. Clearing your browser data removes them.

How long we keep it

• We keep your account data while your account is open.
• When you delete your account, we hard-delete your data. Where other people have records that involve you, such as a hire, an application or a review, we anonymize your part instead, so their history still makes sense (for example, “Deleted creator”).
• Payment and payout records and tax forms are kept for 7 years, because tax law requires it, even after you delete your account.
• Messages and emails are kept as long as we need them to deal with what they're about.
• Server logs and rate-limit counters are short-lived and expire on their own.

Your rights and choices

You can edit your profile, export your data, or delete your account from Settings. For anything else, email hi@appcrush.app. We answer requests within 30 days. We may need to confirm it's you first, and we won't treat you differently for using these rights.

Everyone

You can ask to access, correct, export or delete your personal data, or object to how we use it, wherever you live.

California (CCPA/CPRA)

California residents have the right to know what personal information we collect, use and disclose, and to access, correct and delete it. We don't sell or share personal information, as those terms are defined in California law, and we use sensitive information (account logins, and tax IDs for payouts) only for the purposes the law permits. You can use an authorized agent to make a request.

UK and EU (GDPR)

You have the right to access, correct, erase or restrict your data, to data portability, to object to processing based on legitimate interests, and to withdraw consent. You can also complain to your local data protection authority.

International transfers

Appcrush is run from the United States, and our service providers process data in the US and other countries. When data moves from the UK or EU, we rely on our providers' standard contractual clauses or other safeguards the law allows.

Security

Data is encrypted in transit, access to account data is limited by per-user database rules, and payout and tax details are seen only by the people at Appcrush who handle payouts. No system is perfectly secure. If a breach affects your data, we'll tell you as the law requires.

18+ only

Appcrush is only for people 18 and older, and we don't knowingly collect data from anyone younger. If you think someone under 18 has an account, tell us and we'll delete it.

Changes to this policy

If we change this policy in a way that matters, we'll email account holders and update the date at the top before the change takes effect.

Contact

Privacy questions and requests: hi@appcrush.app.