In short
- Your projects, conversations, files and library stay on your computer. We don't upload them.
- Your account keeps your email address, your game progress and your studio settings, so you can play on any computer.
- With the official model access, your crew's requests pass through our relay to model providers. We don't store their content.
- We don't sell your data and there are no ads.
1. Who we are
Crewloft is made by an independent developer, who is responsible for your data under this policy (the "controller"). Contact: support@playcrewloft.com.
2. What stays on your computer
Crewloft runs your AI crew on your own computer. These never reach our servers:
- your projects, files and folders, conversations, tasks, meeting records and library;
- your own API keys, kept in a local file only you can read (your crew can't read it either);
- the content of anything your crew reads or writes.
When your crew uses a model, the text it needs is sent to that model, through our relay with the official access (section 4) or straight to the provider with your own key.
3. What we collect
Account
- Your email address, a display name (the part before the @), and your language.
- If you sign in with Google or GitHub: the account identifier they give us.
- Sign-in sessions, so you stay signed in.
Game and studio
- Your Bricks, Gold, items, goal progress, Monthly Pass and daily gift status.
- Your studio's layout, look, name and tutorial progress, so they follow you between computers.
- Game events: their type, when they happened and a number (for example "a meeting was held, with 5 people"). Never their titles or content.
- Your time zone, to work out when your day starts.
Purchases
- Order records: what you bought, the amount, the time and the status. Your card or Alipay details go to Creem, not to us.
Official model access
- For each request: the model, the number of tokens, the cost, your IP address and your key's name. Not the content of the request or the reply.
Anonymous usage statistics
- The app sends a fixed list of usage events (such as "a meeting started") to PostHog's EU servers. They contain no content from your projects or conversations.
Security and support
- IP addresses, to prevent abuse and to limit request rates. Sign-up and sign-in pages use Cloudflare Turnstile to keep bots out.
- The emails you send us.
4. The official model access
With the official access, your crew's model requests go to our server, which checks who you are and forwards them to a third-party model provider. The text of requests and replies is passed through without being written to disk or logged. Only the usage details listed above are kept.
The model provider receives the request in order to answer it, under its own terms. If you'd rather choose the provider yourself, use your own API key; then requests go straight to that provider and never pass through us.
5. How we use it
- To run your account, sync your game and studio, and deliver what you buy (contract).
- To prevent fraud, cheating and abuse, and to keep Crewloft secure (legitimate interests).
- To understand which parts of the game are used, from anonymous statistics (legitimate interests).
- To answer your messages, and to keep records the law requires, such as for tax (legal obligation).
We don't sell your personal data, we don't use it for advertising, and we don't use your projects or conversations to train AI models.
7. International transfers
We and our providers work in several countries, so your data may be processed in countries other than the one where you live. Where the law requires it, we rely on appropriate safeguards for these transfers.
8. How long we keep it
- Account, game and studio data: while your account exists.
- Email sign-ups never verified are deleted after 7 days.
- Order records: as long as tax and accounting laws require, even after the account is deleted.
- Model access usage records and server logs: only as long as needed for billing, security and abuse prevention.
9. Your choices and rights
Depending on where you live, you can ask to see, correct, export or delete your personal data, or object to how we use it. Write to support@playcrewloft.com from your account's email address and we'll reply within 30 days.
To delete your account, send the same kind of email. We delete your account, game and studio data and your official access key, keeping only what the law requires us to keep.
If you're in the EU or UK, you can also complain to your data protection authority.
11. Children
Crewloft is not meant for children under 13. If you believe a child under 13 has given us personal data, contact us and we'll delete it.
12. Security
Connections are encrypted, sessions expire, sign-in is protected against bots and password guessing, and the keys that pay for the official access never leave our server. No system is perfectly secure, so please also keep your own computer and accounts safe.
13. Changes
We'll update this policy as Crewloft changes. The date at the top shows the latest version, and we'll tell you about important changes in the app or on this site.
This policy is written in English. Translations are for convenience; if they differ, the English version applies.