Cruv Privacy Policy

Information We Collect

• Account information: email address, display name, authentication provider, and Firebase user identifier when you create or use an account with email, Google, or Apple. We also store a profile image if your sign-in provider sends one.
• App activity: saved wineries, saved events, day plans, ratings, searches, listing and event opens, directions or website-link actions, and related timestamps. Plans require an account. Earlier versions of the app kept a guest's day plans on the device until sign-in, then merged them into that account.
• Plans, visits, and friends: the plans you create or join, with their stops and times; your check-ins (visited or skipped); the wineries you mark as visited and the notes you add to them; the stamps and badges you earn; your friends and friend requests; the people you block; and the problems you report about a listing.
• Invites and QR codes: email addresses you enter to invite someone. We send the address to our email provider, Resend, to deliver the invite, and Resend keeps the sent email for its log period. Cruv itself keeps only a coded fingerprint of the address, to attach the invite and honor unsubscribes. The app also uses the camera, on your phone only, when you scan a QR code.
• Owner and business content: claim contact details and evidence, business profile data, photos, event details, and moderation records you submit.
• Technical information: app version, device and operating-system information, IP address, diagnostics, crash data, and basic usage events when Firebase Analytics or Crashlytics collection is enabled in the release build. If you allow notifications, the push registration id of your device and its time zone, so reminders and alerts reach that device at a sensible local time.

Location Information

With your permission, the mobile app uses your device's precise location while you use discovery features, to show nearby wineries and events. Current versions of the app work this out on your device and do not send your location to our servers. We do not store it on your profile or use it for advertising. The map in the app is Google Maps, which handles location under Google's terms. If you deny permission, the app starts from a default area.

How We Use Information

• Provide winery discovery, details, events, saved items, ratings, and accounts.
• Share aggregate, non-identified counts with a claimed business (how often its listing or events are opened, saved, or added to a day plan) so owners can see interest in their page. These counts are not tied to your name or account in the owner dashboard.
• Show your plans to the people on them and, if you choose, your passport to your friends (see What Other Cruv Users Can See).
• Send the notifications you allow: plan reminders, activity from friends and the people you plan with, and alerts about new events at wineries you saved.
• Review ownership claims, listing updates, photos, and event submissions.
• Review problems reported about listings, and keep the community safe, including when someone writes to us about a person or a listing.
• Secure, troubleshoot, measure, and improve the app and owner portal.
• Respond to support, privacy, safety, and legal requests.

We do not sell personal information. We do not use personal information for cross-context behavioral advertising, and the app and website do not display third-party ads.

What Other Cruv Users Can See

Nothing you add to Cruv is public: there are no public profiles and no feed.

• People on your plans see your display name, the plan, its stops, and who checked in. People you send a friend request to see your display name, and so does anyone who opens your friend link or scans your QR code in the app. Someone you invite by email sees your display name in the email and, for a plan, the plan's name and day.
• Show my passport to friends is on by default. While it is on, your friends (people who accepted your friend request, or whose request you accepted) see your wine regions with the year, your states, and your badges; no one else does. They never see the wineries, dates, or notes you enter, your Visited list, your ratings, or your email. To stop sharing, turn off Show my passport to friends under Profile in the app; your friends then see none of it.
• Anyone who holds a plan invite link sees the inviter's first name, the plan's name, its day, and how many people are on it.

Service Providers

We use service providers to operate Cruv, including Google Analytics 4 for website page views when you accept optional cookies, and Google Firebase for authentication, databases, storage, server functions, analytics, and crash reporting; Google services for maps, Google sign-in, and Google Play distribution; Apple for Apple sign-in and App Store distribution; Firebase Cloud Messaging (Google) to deliver the push notifications you allow (it receives your device's push registration id and the notification); Resend to send account and notification emails and the invite emails you ask us to send (it receives the recipient's email address and the message); and Geocodio to turn business addresses submitted through the owner portal into map coordinates (it receives the address only, not your account details). Apart from what other Cruv users see at your direction (above), we share personal information only with providers whose terms with us require them to protect it at least as well as this policy describes. Opening a winery website or directions app sends you to a separate service that controls its own data practices.

Cookies and Local Storage

The website uses local browser storage, cookies, or similar technology for Firebase authentication, security, and your cookie preference. Declining optional cookies does not disable sign-in storage. Accept may load analytics cookies. Details are in the Cookie Policy.

Do Not Track and other companies. cruv.app does not respond to browser Do Not Track signals. Google may collect information about your activity on Cruv over time and across other websites and apps: on cruv.app through Google Analytics, only if you accept optional cookies, and in the app through Firebase Analytics and Crashlytics. You can stop Google Analytics on cruv.app by declining optional cookies or with the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout). We do not use this information to show you ads, and Cruv shows no ads.

Data Retention

We retain account and user-generated information while your account is active and as needed to provide the service. Claim, moderation, security, transaction, backup, and diagnostic records may be retained after deletion when reasonably necessary for fraud prevention, dispute resolution, legal compliance, and service recovery. We delete or de-identify information when it is no longer needed for these purposes.

Plan invites, plans you were added to but did not join, and friend links expire shortly after the plan or the link ends, and are then deleted. A QR code works for a few minutes and is deleted soon after. Email invites and requests expire after a limited time and are then deleted, with the coded fingerprint of the address. If an address unsubscribes, or our email provider can no longer deliver to it, we keep its coded fingerprint so we do not email it again. A device's push registration is removed after a period without use. Reports about listings are kept until they are resolved and for a limited time after.

Account Deletion

You can delete your Cruv account and the personal data tied to it.

In the app: sign in, open Profile, and choose Delete Account. You will need to confirm and sign in again. Deletion is permanent.

If you cannot use the app (for example you uninstalled it), email support@cruv.app from the address on the account and ask us to delete the account and its data. We may need to verify that you control that email. We will complete the same deletion we run in the app.

What we delete: your login, profile (including display name and any profile image), saved wineries and events, day plans in the cloud, day plans stored on the device where you delete the account, ratings, your claim submissions in the live product, owner-submitted drafts, events you created (including published events), related moderation tasks, and photos you uploaded. Also:

• the plans you own, with their stops, check-ins, and invites (they are deleted for everyone on them);
• your place and your check-ins in plans that others own;
• your friends and friend requests, plans you were added to, what your friends see of your passport, your friend links and QR codes, the email invites you sent, the friend requests sent to your email address, and the blocks you made or others made on you;
• your stamps, badges, visited wineries and their notes;
• your notification settings and your devices' push registrations.

Reports about listings: problems you reported about a listing are kept without your identity until they are resolved, so the fix is not lost.

What we keep: published winery listings in the public catalog (your name and photos you uploaded are removed from those pages); catalog photos we imported; records we may retain for security, fraud prevention, backups, diagnostics, or law, as described under Data Retention; and, if you had turned off invite emails, the coded fingerprint of your address, so they stay off. Usage and crash events already sent to Firebase Analytics or Crashlytics may remain with those providers under that same section. Owner interest counts are not labeled with your name; some totals may still reflect past activity.

Deleting Cruv does not delete your Google or Apple account. We do not offer a way to delete only some account data and keep the account.

Your Choices and Rights

In the app you can turn each kind of notification on or off (plan reminders, friends and activity, event alerts), turn Show my passport to friends off at any time (friends then see none of it), hide your passport from one friend, choose who can send you friend requests, turn off invite emails (Email me when someone adds me), block someone, and report a problem with a listing. Every invite email has an unsubscribe link, which works without an account. Removing a friend or blocking someone is not announced to them.

You can deny location permission, sign out, and change permissions in device settings. To delete your account and the personal data tied to it, see Account Deletion. To request access, correction, or another privacy right available where you live, email support@cruv.app from the address associated with your account. We may need to verify your identity. You may appeal a denied request by replying to our decision.

Security and International Processing

We use access controls, moderated publication, and encrypted network connections to protect information. No system is completely secure. Our providers may process data in the United States and other countries where they operate.

Abuse protection: cruv.app uses Google reCAPTCHA, through Firebase App Check, for security, fraud, and abuse prevention: it helps tell real visitors from automated traffic by checking device and browser signals. It runs on every page and is necessary for security, so it does not depend on your cookie choice. Google processes this information on our behalf as our service provider.

Age Requirement

Cruv is for adults 21 and older, and the app asks you to confirm your age. Cruv is not directed to children. We do not knowingly collect personal information from anyone under 21, and if we learn that we have, we delete it. If you believe someone under 21 gave us personal information, contact support@cruv.app.

Changes and Contact

We may update this policy and will post the revised effective date here. Questions or requests can be sent to support@cruv.app.