crowdstaxCROWDSTAX: APPS BREAK FREE
Privacy Policy
Effective September 11, 2026 · Last updated September 11, 2026
This Privacy Policy explains how Crowdstax (“we,” “us,” or “our”) handles information for Crowdstax: Apps Break Free, its iPhone app, and its public website at apps.crowdstax.com (together, the “Service”). Contact us at support@crowdstax.com with privacy questions or requests.
This is the app’s standalone privacy policy. Crowdstax’s separate product-discovery website at www.crowdstax.com has its own Privacy Policy. Visiting that website is governed by that policy; you do not need to read it to understand the app’s practices described here.
1. Information we collect
- Account and sign-in information. When you use Sign in with Apple or Google, we receive the provider account identifier, email address, and any basic profile information supplied with your authorization, such as a name or profile picture. Apple may supply a private relay email address. Our authentication provider, Supabase Auth, stores your account and session information. We do not receive your Apple or Google password. If you choose the email-link sign-in option, we use the email address you provide to authenticate you.
- Watchlists and preferences. We store the apps you watch, watch creation times, price-drop and version-update preferences, and any target prices you set. We also store notifications associated with your account, their delivery state, and whether you have read them.
- Notification and installation information. If you opt into push notifications, we store your Apple push notification token, an app-generated installation identifier, the push environment, and registration timestamps. These identify where to deliver your selected alerts, not the contents of other apps on your phone.
- Public App Store information and requests. Searching and opening apps involves requests for App Store information. Signed-in searches and app views can cause public metadata about those apps to be added to our catalog. We store public app identifiers, developers, categories, current prices, versions, and observed changes. Authenticated requests and rate-limit counters can be associated with your account.
- Technical and support information. Requests to our hosting, authentication, and database services may produce IP address, device/browser, timestamp, error, authentication, and security logs. If you contact support, we receive your email address, message, and any information you choose to include.
The current app does not request access to your contacts, photos, precise location, or other installed apps. Google sign-in requests only basic identity scopes: openid, email, and profile. It does not request access to Gmail, Google Drive, or your contacts.
2. How we use information
We use this information to authenticate you, maintain your account and watchlist, retrieve app details, check watched apps for price or version changes, apply your alert preferences, deliver and display notifications, respond to support requests, troubleshoot failures, prevent abuse, and comply with applicable legal obligations. Your saved watchlist is associated with your account so it can be restored when you sign in.
Browsing public app information does not require an account. Saving watches and receiving account-specific alerts do. Declining push permission does not prevent you from using other available app features.
3. Google user data
We use information received through Google sign-in to identify and authenticate your account and operate the account features you request. We do not sell Google user data or use it for targeted advertising, credit decisions, unrelated profiling, or training generalized AI models. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
We share Google user data only as needed to provide or improve the user-facing features you request, with your consent, or as permitted by that policy for legal or security purposes or a qualifying business transfer. Human access is limited to situations permitted by that policy, such as your consent for support or necessary security or legal work.
4. Service providers and other disclosures
- Supabase provides authentication, database storage, and server functions for the app. It processes account records, watchlists, preferences, and notification records needed to operate these features.
- Apple provides Apple sign-in, public App Store information, and Apple Push Notification service. Push delivery sends the device token and notification payload to Apple. App Store lookups and app images also generate requests to Apple’s services.
- Google provides Google sign-in and processes the authentication interaction under its own privacy practices.
- Vercel and Cloudflare provide hosting and domain/DNS services for the public app website. They may process technical traffic and security information.
- Email services process support correspondence and email sign-in links when those services are used.
We may disclose information when required by law, to respond to valid legal process, or as reasonably necessary to protect rights, safety, and service security. If ownership or operation of the Service changes, information may transfer as part of that transaction, subject to applicable law and the protections and Google-data restrictions described here.
We do not sell your personal information or share it for cross-context behavioral advertising. Your watchlist and account-specific alerts are not public profiles or public posts.
5. Local storage, cookies, and analytics
The app stores session information and settings locally, including an installation identifier and your notification opt-in preference. This supports sign-in persistence and notification registration. Apple and Google authentication pages may use their own cookies or storage during sign-in.
The apps.crowdstax.com website does not include advertising or analytics scripts, a sign-in form, or a newsletter form. Hosting and security logs may still be generated. The current app does not include an advertising SDK or cross-app advertising tracking. Separate Crowdstax websites may have different analytics practices, described in their own policies.
Communications and purchases
Creating an Apps Break Free account or enabling price alerts does not subscribe you to Crowdstax newsletters. If you separately subscribe on the main Crowdstax website, that website’s policy and unsubscribe controls apply. Necessary account, security, legal, and support messages are separate from marketing preferences.
The current app does not collect payment-card details or offer its own paid plans. Purchases of apps you discover take place through Apple and the relevant developer, under their payment and privacy terms.
Browser privacy signals
The app website has no automatic Do Not Track or Global Privacy Control handling. It also has no personal-data sale or cross-context advertising sharing to opt out of. You can contact support to exercise applicable rights. Any future tracking changes will require updated disclosures and controls required by law.
6. Retention and deletion
Account information, watches, preferences, and alert history are retained while needed to provide your account and the Service, unless you request deletion or we have another lawful reason to remove or retain them. These account records do not currently have a fixed automatic expiry. Removing a watch deletes that watch; previously generated alert history can remain with your account. Signing out removes the server-side push registrations for that app installation, but does not delete the account.
To request deletion of your Apps Break Free account and associated personal data, email support@crowdstax.com. Identify the account using its sign-in email or Apple relay address. We may need to verify account ownership; do not send passwords, verification codes, or private keys. Account deletion is currently handled through support, rather than an in-app deletion button.
We remove associated account, watch, preference, and notification records when processing a verified deletion request, except information we must retain for legal obligations, security, or resolving disputes. Operational logs and backups may persist for their applicable retention cycles and are not necessarily erased immediately. Retention depends on the purpose, sensitivity, security requirements, provider systems, and legal obligations. Public App Store catalog information is not your private watchlist and may remain after your account is deleted.
7. Your controls and privacy rights
You can unwatch apps, change target prices and alert preferences, sign out, and disable notifications or Lock Screen previews through iPhone Settings. Turning off notifications does not itself delete your account or history. Deleting the app also does not delete server-side account records.
You can revoke the app’s access in your Google account connections or Apple account settings. Revoking provider access is separate from asking Crowdstax to delete information already stored.
Depending on where you live, you may have rights to access, correct, delete, obtain a copy of, restrict, or object to processing of your personal information, withdraw consent, or complain to a privacy regulator. Contact support@crowdstax.com to make a request or appeal a response. We will handle applicable requests under the laws that apply to you and may verify your identity. Exercising privacy rights will not by itself result in discriminatory treatment.
Making a privacy request
Email support@crowdstax.com with “Apps Break Free privacy request,” the right you want to exercise, and enough information to identify your account. An authorized representative may contact us, subject to verification of their authority. Please avoid sending unnecessary sensitive information. We will respond within applicable legal deadlines and explain any lawful limitation or refusal, including available appeal options. We may retain a limited record of the request and response to document compliance.
California and other U.S. state residents may have access, correction, deletion, portability, and opt-out rights where the relevant law applies. We do not use personal data for targeted advertising or profiling that produces legally significant decisions. Nothing here limits a right or remedy provided by applicable law.
8. Security and international processing
We use HTTPS for data transmission and account-based database access controls for private records. Access to operational systems is restricted to those who need it to operate and support the Service. No system can guarantee absolute security.
Our service providers may process or store information in countries other than your own, with different privacy laws. Where applicable, we rely on appropriate contractual and other safeguards for international transfers. Where a lawful basis is required, we process information to provide the requested Service, for legitimate operational and security interests, to meet legal obligations, or with your consent, as applicable.
Security incidents
If we learn of a personal-information security incident, we will investigate, take appropriate steps to contain it and reduce harm, and provide notices to affected people or authorities when required by law. To report a suspected issue, contact support@crowdstax.com without including passwords or other people’s private data.
Public pages and third-party services
The public app website may be indexed by search engines. Your private account, watchlist, and alert history are not published there. Copies of public pages can remain in search caches or archives after changes. Opening an App Store listing, developer website, or external link takes you to a separate service whose privacy practices apply; review its policy before providing information.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information, contact us so we can investigate and remove it as appropriate. Local laws may require a higher minimum age or parental involvement.
10. Policy changes and contact
We will update this page when our practices change. Material changes will be brought to your attention through the app, website, or other appropriate notice, and we will seek consent where required. The date above identifies the current version.
Operator: Crowdstax
Service: Crowdstax: Apps Break Free
Privacy, accessibility-related privacy requests, and support: support@crowdstax.com
Website: apps.crowdstax.com