Privacy Policy

Last updated June 5, 2026

Crossed is a presence app: it shows who is actually in the same place as you, like a gym, a café, or a park, and lets you send one quiet, private signal. If two people signal each other, it's mutual and you reveal. This policy explains what we collect, why, and the control you have. We collect the minimum needed to make the room work, and we never sell your data.

Who we are

Crossed ("Crossed", "we", "us") is an independent app built in New York City. For any privacy question or request, email iboatli@gmail.com.

What we collect

You give us

• Phone number. Used to create and secure your account (SMS verification) and, only after a mutual match where you both choose to share it, to reveal a way to reach each other.
• Profile details. Your first name, last-name initial, date of birth (to confirm you're 18+ and for age preferences), gender, who you're interested in, and your match preferences.
• Photos. Profile photos you add, from your camera or photo library. Basic on-device checks run to confirm a photo contains a face.
• Saved places and signals. The venues you save and the quiet signals you send.

Collected automatically

• Location. Used to determine which room you're in so you can appear to (and see) others present at the same venue. You're hidden by default and control your visibility. Precise location is used to match you to a venue; we don't publish your exact coordinates to other users.
• Device & usage data. App interactions, device type, and identifiers, via Firebase Analytics and Crashlytics-style diagnostics, to keep the app working and understand which features help. Analytics is configured without advertising identifiers (no IDFA).
• Push token. If you enable notifications, a device push token so we can notify you of a mutual or a shared number.

How we use it

• To run the core experience: show who's present in a venue, deliver your private signals, and reveal mutual matches.
• To verify your identity and age, and to keep accounts and the community safe.
• To send you notifications you've opted into (a mutual, a shared number, arriving/leaving a venue).
• To prevent abuse, enforce our rules, and respond to reports and blocks.
• To fix bugs and improve the product.

We do not use your data for third-party advertising, and we do not sell or rent your personal information.

What we share

• With other users: only what the product is designed to reveal: a monogram and minimal presence signal while you're in a room, and, after a mutual match, the details you both agreed to share (e.g. first name, and a contact channel like your phone number if you enabled it). Your phone number is never shown unless it's mutual and you chose to share it.
• With service providers: Google Firebase (authentication, database, storage, messaging, analytics, and App Check) processes data on our behalf to operate the app. Apple processes data when you download or use the app via the App Store and push notifications.
• For legal reasons: if required by law, or to protect the rights, safety, and security of our users and Crossed.

Safety & your controls

• Hidden by default. You choose when you're visible in a room.
• Block & report. You can block anyone and report behavior; blocks are enforced server-side and reported content is reviewed.
• Mutual-only reveal. No one learns you signaled them unless they signaled you too.
• Notification controls. Turn any notification type on or off in Settings.

Your rights & account deletion

You can delete your account at any time from Settings → Delete my account. Deletion is immediate and irreversible: it removes your profile, photos, presence, signals, matches, and your authentication record. Depending on where you live, you may also have rights to access, correct, or export your data. Email iboatli@gmail.com and we'll help.

Data retention

We keep your information while your account is active. When you delete your account, we delete your personal data promptly, except limited records we're required to keep for legal, security, or anti-abuse reasons. Diagnostic logs are retained for a short period and then discarded.

Security

Data is encrypted in transit. Access to backend functions is gated by Firebase App Check (device attestation) and authentication, and sensitive reveals (like a phone number) are server-enforced and only released for confirmed mutual matches. No system is perfectly secure, but we work to protect your information and minimize what we hold.

Children

Crossed is for adults. You must be 18 or older to use it. We don't knowingly collect data from anyone under 18; if you believe a minor is using Crossed, contact us and we'll remove the account.

International

We're based in the United States and process data there. If you use Crossed from outside the U.S., you consent to your information being processed in the U.S. by us and our service providers.

Changes

We'll update this policy as the app evolves and revise the date above. Material changes will be surfaced in the app or by notification.

Contact

Questions or requests: iboatli@gmail.com.