CR4VE Privacy Policy

Effective date: 2026-01-14

This Privacy Policy explains how CR4VE collects, uses, and shares personal data when you use the Service. CR4VE is operated by It Junior Software Ltd, Ireland.

Contact: hello@itjunior.dev

Address: 34a Patrician Villas, Stillorgan, A94VW74 - Ireland

1. Data controller

CR4VE is the data controller for the personal data described in this policy.

2. Personal data we collect

We collect data you provide and data generated by your use of the Service:

• Account data: Auth0 subject identifier, handle, display name
• Profile data: avatar, bio, preferences, tags, and other profile fields you choose to share
• Content: messages and media you send
• Location: your approximate or precise location (to show nearby users and when you choose to share a location in chat)
• Device and usage data: basic device identifiers, app version, and logs for security and support
• Safety data: reports, blocks, and moderation decisions
• Billing data: app store purchase status, product identifiers, and receipt metadata (we do not receive your full payment card details)
• Local device storage: cached chats and authentication tokens stored on your device

We do not use analytics providers at this time.

3. How we use your data

We use your data to:

• Provide core app features (profiles, chat, nearby grid)
• Show nearby users and online presence
• Moderate content and handle reports
• Maintain security and prevent abuse
• Support you when you contact us

4. Legal bases (GDPR)

We process personal data under the following legal bases:

• Contract: to deliver the Service you request
• Legitimate interests: to keep the Service safe and reliable
• Consent: for optional features like location sharing (where required)
• Legal obligations: to comply with applicable law

5. Sharing and processors

We share data with service providers who process data on our behalf:

• Auth0 (authentication)
• Cloudflare R2 (media storage)
• Expo (mobile app services and notifications)
• Hetzner (hosting infrastructure)

Payment processing is handled by the Apple App Store and Google Play Store, which act as independent controllers for your payment data. We receive purchase status and receipt metadata from them to enable subscriptions.

We require processors to protect your data and use it only to provide services to CR4VE.

We do not sell your personal data.

6. International transfers

Some processors may process data outside the EEA (for example, infrastructure or support providers). Where required, we use appropriate safeguards such as Standard Contractual Clauses.

7. Cookies

CR4VE does not use advertising cookies at this time. We may use strictly necessary cookies (for example, to keep you signed in) if and when we introduce a web portal. If we add optional cookies or analytics in the future, we will update this policy and request consent where required.

8. Retention

We retain data while you maintain an account or as needed for safety, security, and legal obligations. You can request deletion of your account, which will remove your profile and associated data, unless retention is required by law or for safety investigations.

Typical retention (may vary by legal need):

• Account/profile data: kept until you delete your account.
• Messages and media: kept until deleted by you or both chat participants, or until account deletion, unless needed for safety/legal reasons. If you clear a chat, it is removed from your view; messages are permanently deleted only once both chat participants have cleared them.
• One-time media: media marked as one-time is deleted shortly after it is viewed; minimal metadata may remain for safety and fraud prevention.
• Blocking: when you block someone, chats and related interactions between you and that user are deleted from our systems, except where we must retain data for safety or legal reasons.
• Location history: kept only as long as needed for nearby and safety features, and not kept longer than necessary for service operation.
• Security and audit logs: retained for a limited period for security and abuse prevention.
• Reports and moderation records: retained for at least 28 days and for the duration of investigations and a reasonable period afterward. We periodically purge reports older than 28 days unless they are needed for safety or legal investigations.
• Reports may include message snapshots from the reported chat (for example, the last 50 messages) and can be retained even if the chat is later deleted or a user is blocked.
• Local device storage: cached data remains on your device until you log out, clear app storage, or uninstall the app.

9. Your rights (EU/EEA)

You have rights to:

• Access your personal data
• Correct inaccurate data
• Delete data (subject to legal/safety limits)
• Restrict or object to processing
• Data portability
• Withdraw consent where processing is based on consent

To exercise your rights, contact hello@itjunior.dev.

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC): https://www.dataprotection.ie/

10. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

11. Security

We use technical and organizational measures to protect your data, including access controls and secure storage. No system is perfectly secure; please use strong credentials and keep your device secure.

If you believe your account or data has been compromised, contact us at hello@itjunior.dev.

12. Children's privacy

CR4VE is not intended for anyone under 18. We do not knowingly collect data from minors.

13. Changes to this policy

We may update this policy from time to time. Material changes will be communicated within the Service or by email.

14. Contact

Questions or requests: hello@itjunior.dev. We do not have a designated Data Protection Officer; use this contact for all privacy inquiries.