Privacy Policy

This policy explains what personal data CrestLabs (“we”, “us”) collects, why, and how we protect it. It covers our website crestlabs.dev and the mobile apps we publish on Google Play (“the Apps”). If you have any questions, email [email protected].

1. Who we are

CrestLabs is a web and mobile app development studio. We are the data controller for personal data collected through our website and Apps. [CONFIRM: legal business name, trading address and, if applicable, company / registration number.]

2. Information we collect on our website

Information you give us

• Contact form: your name, email address, optional WhatsApp number, project type, budget range and message.
• Email and WhatsApp: any details you choose to share when you contact us directly.

Information collected automatically

• Hosting logs: our hosting provider (Cloudflare) processes technical data such as IP address, browser type and pages requested to deliver and secure the site.
• Analytics: we use Google Analytics, Microsoft Clarity and Ahrefs Web Analytics to understand how visitors use the site, such as pages viewed, time on page, device and browser type, approximate location and how you arrived. Microsoft Clarity also records anonymised mouse movements, clicks and scrolling to help us improve the design; it masks text you type into forms. Google Analytics and Clarity use cookies or similar technologies. Ahrefs Web Analytics does not use cookies.
• Your choices: you can block or delete cookies in your browser settings, or opt out of Google Analytics with Google’s browser add-on. [CONFIRM: if you add a cookie consent banner, describe it here.]

3. Information collected by our Apps

Our Apps are designed to collect as little data as possible.

• Data you enter stays on your device. Content you create in an App (for example habits, budgets, notes or settings) is stored locally on your device. We do not receive or see it. [CONFIRM for each App.]
• No accounts. The Apps do not require you to create an account or sign in. [CONFIRM]
• No advertising. The Apps do not show ads or use advertising identifiers. [CONFIRM]
• Crash and diagnostics data: [CONFIRM: whether any App uses a crash-reporting or analytics SDK (e.g. Firebase Crashlytics or Google Analytics for Firebase). If so, list the data collected, such as device model, OS version and anonymous crash logs, and the provider.]
• Photos and files: where an App lets you choose a photo or file, it is processed on your device for the feature you selected. [CONFIRM: whether any image is sent to a server for processing, and if so, how long it is kept.]
• Purchases: if an App offers in-app purchases, payments are handled by Google Play. We do not receive your payment card details. [CONFIRM]
• Device backups: Android may back up App data to your Google account under your device’s backup settings. This is controlled by you and Google.

Each App’s Google Play listing includes a Data safety section that summarises what it collects. If that section and this policy ever differ, please contact us.

4. How we use your information

• To reply to your inquiry and provide quotes.
• To deliver projects and support you have asked for.
• To keep our website and Apps working, secure and free of abuse.
• To meet legal, tax and accounting obligations.

We do not sell your personal data, and we do not use it for advertising.

5. Legal bases

Where UK or EU data protection law applies, we rely on: your consent (when you contact us); steps taken at your request before entering a contract, and performing a contract; our legitimate interests in running and securing our services; and legal obligations. [CONFIRM]

6. Who we share data with

We only share data with service providers that help us run our business, such as:

• Cloudflare (website hosting and security).
• Google (Google Analytics), Microsoft (Clarity) and Ahrefs (Web Analytics) for website analytics.
• [CONFIRM: form service, e.g. Formspree or Web3Forms] (receiving contact form messages).
• [CONFIRM: email provider] (business email).
• WhatsApp / Meta (if you choose to message us on WhatsApp).
• PayPal, Venmo, Payoneer and Remitly (processing payments, including Visa and Mastercard payments [CONFIRM: card processor]). We never see or store your full card details.
• Google (Google Play distribution and, where used, Firebase services).

These providers may process data outside the UK or EEA. Where they do, appropriate safeguards such as standard contractual clauses are in place. We may also disclose data if required by law.

7. How long we keep data

We keep inquiry messages for up to [CONFIRM: e.g. 24 months] after our last contact, and client project records for as long as needed for legal and accounting purposes. App data stored on your device stays there until you delete it or uninstall the App.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how we use it. To make a request, email[email protected]. You can also complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

9. Deleting App data

Because App data is stored on your device, you can delete it at any time by clearing the App’s data in your device settings or uninstalling the App. If you have any questions about data linked to an App, email[email protected] with the App name and we will respond within 30 days.

10. Children

Our website and Apps are not directed at children under 13, and we do not knowingly collect personal data from them. [CONFIRM against each App’s target audience setting in Google Play Console.]

11. Security

Our website is served only over HTTPS. We use reputable providers and limit access to personal data to what is needed. No method of transmission or storage is completely secure, but we work hard to protect your data.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed.

13. Contact

CrestLabs
Email: [email protected]
[CONFIRM: postal address]