Privacy

What Crewside holds about you, who else touches it, how long we keep it, and how to have it deleted. In plain language, and describing the app as it actually works.

Who holds your data

ALPHA Counsel and Coaching UG (haftungsbeschränkt), Berlin. Full company details, including the postal address and a phone number, are in the Impressum. Write to support@crewsideapp.com about anything on this page.

What we hold about you

If you are on the waitlist and nothing more, we hold:

• your email address
• the city you named when we asked where Crewside should launch first
• which language the form was in, and which version of the consent text you agreed to
• when you asked to join, when you confirmed, whether you have unsubscribed since and when, and the housekeeping timestamps every row carries
• as proof of consent, we log, only at the moment of the confirmation click, the time, IP address and user agent (Art. 7(1) GDPR). The IP address is stored exactly as we received it, neither shortened nor hashed.
• the one-time codes in the confirm and unsubscribe links, kept only as hashes, and the time the confirm code expires

Separately, so that the form cannot be used to send mail to strangers, every submission writes a SHA-256 hash of the sending IP address, with a timestamp, into a rate-limiting table. Rows older than a day are cleared out as later submissions come in. It is a hash rather than the address itself, but an unsalted hash of an IP address can be undone by anyone willing to try every address, so we treat it as data about a person rather than call it anonymous.

If you have an account in the app, we also hold:

• your email address
• your first name and last name
• your airline, as you typed it
• the layovers you add: the airport, and the times you arrive and leave
• which city rooms you are in, and when you joined them
• optionally, and only if you fill them in: your home base airport, the languages you speak, and your crew position. You can leave all three empty.
• safety reports: the ones you file, and the ones other members file about you. A report holds what was reported, the free text written to explain it, the room it happened in, and what the reviewer decided, including the note they wrote.
• who you have blocked, and who has blocked you
• your standing with us: whether the account is in good order, suspended, or ended, and until when
• a record of the decisions we take on an account: who acted, what they did, when, and the reviewer's own note from a work ID review

We do not ask for your phone number and there is no field for one. We do not ask for your date of birth. We do not ask for your employee number, your roster, or your flight history.

Your work ID and your selfie

This is the most sensitive thing we ever touch, so it gets its own section rather than a line in a list.

To prove you are crew you upload a photo of your airline work ID and a selfie. A person looks at them, decides, and that is the end of it. Specifically:

• both images are encrypted while they sit on our server, not merely stored
• both images are deleted the moment a decision is made, whether you are approved or not. Nothing about them is kept for reference.
• if nobody reviews your upload within 30 days, the images are deleted automatically and the submission is closed
• only a reviewer can open them, through one access-controlled screen, and only while a decision is still outstanding
• they are never used to train anything, and never shown to another member

What survives the review is the outcome, not the evidence: that your account is verified, when, and until when. Verification lasts twelve months and then has to be done again.

What other people in the app see

Members of a city room see your first name, your airline, and the languages and crew position if you filled them in. They do not see your last name and they do not see your email address. Neither of those is ever sent to the chat service at all.

Who else touches your data

We keep this list short on purpose, and we would rather name a company than describe it vaguely.

• Stream runs the city chats. It receives your first name, your airline, your languages and crew position if set, an internal account id, and a true or false flag for the founder badge, which is set for one account only. Its servers for our app are in the EU.
• Firebase Authentication, part of Google, holds your email address and password so you can sign in. This one runs in the United States, so your sign-in details are held outside the EU.
• Brevo sends the emails: confirm your address, tell you that you are verified.
• Hetzner, a German hosting company, rents us the server everything else runs on.
• Supabase stores the website waitlist. If you never joined the waitlist, it holds nothing about you.
• Sentry receives crash reports from the app. It is set to send errors only, with no name, no email and no account id attached.

We do not sell your data, we do not pass it on for anyone else's marketing, and there is no advertising in the app, so there is nothing to profile you for.

How long we keep things

• work ID and selfie: until the decision, or 30 days unreviewed, whichever comes first
• a city room: it closes when the layover window it was built for has passed, and it stops accepting anyone new
• your account and your layovers: deleting your account does not remove the row. Your email address and your name are blanked and your layovers are cancelled, and what is left is kept. It is set out in full under Deleting your account, below.
• safety reports, blocks, and the record of decisions taken on an account: kept, and kept after the account is deleted
• your waitlist row: unsubscribing stops the emails and marks the row unsubscribed. It deletes nothing. Ask us and we delete the row itself.

Deleting your account

You can do it yourself, from Settings in the app, without asking us and without explaining why. When you do, we immediately blank your email address and name, cancel your layovers, delete any work ID images that still exist, and delete your chat account together with your messages at Stream and your sign-in record at Google. We keep an internal record that the deletion happened, so that we can prove it was done. The Stream and the Google deletions happen at other companies and can fail; when one does, we record which one and finish it by hand.

We would rather be exact about the rest, because the word delete suggests more than happens. Your row stays, marked as deleted, with the name and email address blanked and the languages emptied. What stays on it is your airline, your home base and crew position if you gave them, when you joined, your verification history, and your standing with us. Your layovers stay as cancelled entries, with their airports and their times. So does the record of which rooms you were in, and any safety reports and blocks. If that is not what you expected, write to support@crewsideapp.com and we will tell you exactly what is on your row.

To ask what we hold about you, or if something on this page does not match what you expected, write to support@crewsideapp.com. A person reads that address.

Last updated 20 August 2026.