Last updated: 21 August 2026
Crumbs ("Crumbs", "we", "us") is a daily storytelling app where you can write and share one short story each day. This policy explains what personal data we collect when you use the Crumbs iOS app and our servers, why we collect it, and the rights you have over it.
Crumbs is operated by [legal name and address of the operator]. We are the data controller for the personal data described in this policy. You can reach us at [email protected].
We only collect what the app needs to work. We do not use third-party analytics, advertising SDKs, or trackers.
Account data (from Sign in with Apple). When you sign in with Apple, we receive a stable Apple account identifier, and — if you choose to share them — your email address and name. If you use Apple's "Hide My Email" feature, we only receive the private relay address.
Profile data you provide. Your chosen username, display name, bio, avatar photo, preferred reading languages, and your setting for whether to show NSFW (not-safe-for-work) stories.
Content you create. The stories you publish (title and text), and the time you published them. When you publish a story we automatically detect its language so it can be shown to readers who selected that language; this detection runs on our own servers — your text is not sent to any third party for it — and the detected language code is stored with the story.
Social activity. Who you follow, the stories you bookmark, the users you block, and the stories you report. Blocks and reports are used for safety and moderation.
Technical data. When your device talks to our servers, we process your IP address and standard request logs, and we issue an authentication token to keep you signed in. Logs are kept only as long as needed for security and operations.
Tips. If you support Crumbs with a tip, the purchase is processed entirely by Apple through the App Store. We do not receive or store your payment details.
We do not use your data for advertising, we do not profile you, we do not make automated decisions about you that have legal or similarly significant effects, and we do not sell personal data.
Crumbs is a public platform. Your username, display name, bio, avatar, streak, and published stories are visible to other Crumbs users. Your email address and language/NSFW settings are never shown to other users.
We share personal data only with:
If our hosting involves transferring data outside the European Economic Area, we rely on an adequacy decision or the EU Standard Contractual Clauses.
Your account data, profile, stories, and social activity are kept while your account exists. When you delete your account (Settings → Delete Account), your account, stories, bookmarks, follows, and blocks are permanently deleted from our systems. Server logs and backups are retained for a limited period and then deleted or overwritten.
Under the GDPR you have the right to access, rectify, and erase your personal data, to restrict or object to processing, and to data portability. You can edit your profile and delete your stories or your entire account directly in the app; for anything else, email [email protected] and we will respond within one month.
You also have the right to lodge a complaint with a supervisory authority — in Hungary, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, www.naih.hu) — or with the authority of the EU member state where you live.
If you live in a US state with a consumer privacy law (such as California), you have comparable rights to access, correct, and delete your personal information. We do not sell your personal information and we do not share it for cross-context behavioural advertising.
Crumbs is not for children under 13, or under 16 where local law sets a higher age for consenting to data processing without parental approval. We do not knowingly collect data from children below these ages; if you believe a child is using Crumbs, contact us and we will delete the account.
Traffic between the app and our servers is encrypted in transit, access tokens are revoked when you log out, and access to production data is restricted. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the data we hold.
If we change this policy in a way that meaningfully affects you, we will notify you in the app or by email before the change takes effect. The date at the top always reflects the latest version.
Questions, privacy requests, or concerns: [email protected].