CrewCam privacy

Effective October 30, 2026. CrewCam is operated by Alex Landers. Questions: landers@rtmc.net.

Information used to run CrewCam

Clerk handles account identifiers, sign-in credentials and sessions. CrewCam stores your profile name, nickname and avatar; optional private contact details; crew membership and invitations; shared photos and captions; reactions and viewing receipts; points; notification settings; device registrations and time zone; and delivery/retry identifiers. Optional profile contacts are not an upload of your address book and are not shown to other members.

The camera works without an account. Camera-local photos and videos stay on your device unless you choose to save, export or share them. CrewCam requests camera, microphone, add-only Photos and optional notification permissions for their relevant features. This release shares photo Drops, not video Drops or social comments.

Sharing and service providers

Shared photos are available to authorized members of your invite-only crew. New members see only photos shared after joining. Incoming Drops remain covered until you open them. CrewCam is not end-to-end encrypted: its authenticated services process and store information to operate the app.

Convex provides app data and private media storage. Clerk provides authentication; Apple and Google process sign-in if you choose their login methods. OneSignal and Apple deliver optional push notifications. Push registration includes an APNs token, opaque device/account identifiers and device time zone. Notifications may include a sender name, crew name and reaction emoji, but not photos, captions or comment text. Providers may process technical information such as IP address, device/network information and approximate location for service operation and security. Their security logs and backups follow their own retention practices.

CrewCam has no advertising, cross-app tracking, GPS collection or sale of personal information. Optional Clerk SDK telemetry is disabled. Photos are not sent to an external automated content-scanning service.

Device copies and deletion

Received photos are not automatically saved to your Photos library. After a confirmed full viewing, your device can keep an independent in-app copy. Your own shared photos may be cached on your device, with a 300 MB cache limit. Thumbnails and unfinished send/retry data may also be stored locally. Account-scoped in-app copies are protected and excluded from device backups; there is no promise of restoring them on another device.

You can delete your own shared photo or delete your account in the app. Account deletion removes the account's server profile, private details, original shared photos and associated activity/provider identities through retryable work. Crew ownership transfers to an eligible remaining member. A crew's shared identity photo remains with that crew.

Deleting an account does not erase independent copies already saved by recipients after viewing; the contributor's name/avatar become Former member when recipients reconnect. Explicit Delete photo removes recipient in-app copies on reconnection. Copies exported or saved to the Photos library are outside CrewCam's remote control. Account-free camera files and your Photos library are not erased by account deletion.

Anonymous removal markers reconcile returning devices. Completed deletion-status/security hashes expire after 24 hours. Unattached uploads normally have a one-hour cleanup fallback. In-flight deletion/provider cleanup may take longer when a service is unavailable.

Reports and blocks

A report shares the reporter, reported account, crew/optional photo reference, chosen reason and optional details privately with CrewCam for review. Reporting does not open a Drop or create a separate image evidence copy. Report details expire 30 days after creation and are removed with either related account; deleting underlying content can make evidence unavailable.

Blocking hides content and stops new interactions/alerts between the pair across crews, without deleting other members' copies. You can unblock in Settings. If a blocked account is deleted, a surviving block owner keeps only an opaque target token labeled Former member until unblocking or deleting their own account, so saved copies do not reappear. No deleted name/avatar/provider identity is kept in that token.

Your choices and contact

You can edit your profile, hide photos for yourself, report or block a member, delete your photos/account, mute a crew, change notifications, sign out, and control device permissions. CrewCam is not directed to children under 13. If you believe a child has provided information or need privacy help, contact landers@rtmc.net. We use support information you provide to respond and investigate. Material changes will be reflected in this policy.