Privacy policy

Croze is a cocktail app for iPhone, published by Rainshadow Software LLC, Washington, USA (“we”). This policy covers the Croze app and the croze.app website. Croze is in development; when what the app does with your data changes, this page changes first.

What we collect

Your account

Your email address, and a password that our authentication provider stores only as a hash. When you sign up with email, we send a six-digit code to that address to confirm it, and we send another if you reset your password.

If you sign in with Google, we receive your email address and the name on your Google account; we never see your Google password. If you sign in with Apple, we receive your email address and, if you choose to share it, your name. Apple’s Hide My Email works normally.

Your profile

A name, a handle and an optional bio of up to 160 characters. We fill in a starting name and handle from your sign-in (your Google name, or the part of your email address before the @); you can change them.

What you make and do

Specs (your own recipes) and specialty ingredients, lists, pairings and the line you write for them, reviews and replies, likes, who you follow, and who you block. We also keep the activity and notification records these create, such as “Ana liked your list”.

Reports

If you report someone, we store your report, the reason you chose, and whom it concerns, so we can review it.

On your phone only

Your answer to the age question, your haptics setting, and the sign-in session the app needs to keep you signed in. These stay on the device.

What we do not collect

Croze does not ask for or read your location, contacts, photos, camera, microphone or health data, and it does not use advertising identifiers. There are no ads, and we do not sell your data or share it with data brokers.

The app contains no analytics or crash-reporting software. If that changes, this section will name the provider and say what it receives before a build that includes it is released.

Croze does not send push notifications. Notifications appear inside the app only.

How we use it

To run your account and show what you make to the people you choose; to deliver in-app notifications; to keep blocked people out of your way; to review reports and remove content or accounts that break the rules; and to answer you when you write to us. Nothing else.

What other people can see

Croze is social, and much of what you make is meant to be seen. Each spec, list and specialty ingredient you make has one of three settings, and Public is the default when you create one.

• Public, to anyone. Your name, handle, bio and counts; whom you follow and who follows you; your Public specs, lists and specialty ingredients; your pairings and their reasons and your reviews, where the drinks they concern are Public; and your likes on Public things. Anyone can read these, including people without the app: drinks, lists and profiles have public pages on croze.app (at /d, /l and /u) that anyone with the link can open and that link previews can show.
• Link only. A spec, list or specialty ingredient set to Link only is left off your profile, feeds and search, but anyone who has its link can open it.
• Private. Only you can see it.
• Only you, always. Your email address, your notifications, the people you have blocked, and the reports you have filed.

Signed-in users who follow you see your Public activity on their Home tab. Changing something from Public to Link only or Private takes it out of profiles, feeds and search straight away; pages already open on someone’s screen, and link previews other apps have saved, are outside our control.

Who handles it for us

• Supabase: database and authentication. Your data is stored in the United States (us-west-2) and access is enforced in the database itself with row-level security.
• Google: sign-in, only if you choose Sign in with Google.
• Apple: sign-in, only if you choose Sign in with Apple, and app distribution through TestFlight and the App Store.
• Cloudflare: hosts croze.app and serves its pages.

Each receives only what it needs to do that job.

The website

croze.app sets no cookies, runs no analytics, and loads nothing from anyone else: its fonts, images and styles come from croze.app itself. The public pages at /d, /l and /u show what people have made Public or shared by link, read from our database at the moment you open them and held in Cloudflare’s cache for a few minutes. As our host, Cloudflare handles the technical details of each request, such as your IP address, under its own policy.

Deleting your account

You can delete your account in the app at any time: You → Settings → Delete account. It takes effect immediately, with no email and no waiting period, and it cannot be undone.

Deletion removes your sign-in, your profile, and everything you made or did: specs, specialty ingredients, lists, pairings, reviews and replies, likes, follows, blocks, activity, notifications and the reports you filed. Your Public things disappear from Croze and from croze.app with it; a cached croze.app page can take up to five minutes to clear.

Reports other people filed about your profile may be kept as a moderation record. If you cannot open the app, email us from the address on the account and we will delete it for you.

How long we keep it

As long as your account exists, and no longer. Deleted data can persist in our database provider’s routine backups until they expire on its schedule.

Age

Croze is about cocktails and is for people of legal drinking age. Before you can use it, the app asks whether you are 21 or older, and it stops there if you are not. We do not knowingly collect data from anyone under 21; if you believe someone under 21 has an account, write to us and we will remove it.

Your rights

You can see, correct and delete your data in the app. To ask for a copy of it, or for anything else, including requests under the GDPR or the CCPA, email us from the address on the account and we will reply.

Changes

When this policy changes, the date at the top changes with it. If a change affects what we collect or who can see it, we will say so in the app’s release notes.

Contact

Rainshadow Software LLC, Washington, USA. Questions and data requests: hello@rainshadowhq.com.