CrayCray Privacy Policy
Effective 14 November 2026
CrayCray is a private app for a few invited people. It has no accounts, passwords, advertising, analytics or tracking, and nothing about you is sold or shared.
What the server keeps
When you join with an invite link, the CrayCray server gives your device a random token. The server keeps:
- that token, and when the device joined and was last seen;
- a name for the device (made from your browser or app type, such as “iPhone app”, until you change it);
- your browser’s or app’s user agent;
- the dive sites you star, and which of your devices you have linked together.
These are used only to let you in and to show you your starred sites on each of your devices. Like any web server, it also briefly logs the IP address of each request.
What stays on your device
- Location. If you allow it, CrayCray uses your location once to set a home point, so it can show dive sites near you. The home point stays on your phone and is never sent to the server. You can set it on the map instead.
- Settings and saved forecast. Your distance, view choices and the last forecast are kept on your phone so the app works without signal. The device token is kept in the iOS Keychain.
Deleting your data
“Forget this phone” under You removes everything CrayCray keeps on that phone. To have the server’s records for your devices deleted, email the address below.
Children
CrayCray is not directed at children.
Changes
If this policy changes, the new version will appear here with a new effective date.
