Legal
Crystal Privacy Policy
Effective 18 September 2026. This replaces the version of 13 September 2026.
Crystal reads your camera roll on your phone. Here is exactly what stays and what leaves.
This policy covers the Crystal iOS app and the Crystal website at mycrystal.app.
What stays on the phone
Every photo, every carousel, every draft, every look you build, every sticker and your brand kit. They live in Crystal's own storage on the device and are never uploaded.
The analysis that decides which shot is the sharpest, which five are the same shot, and where to crop runs on the device and never leaves it.
Place names on stickers come from the location already stored inside your own photos and are worked out on the phone. Crystal never asks for your location and has no location permission.
Your display name and profile picture stay on the phone too. They belong to the account, so closing the account clears them from the device.
What leaves, and what it is for
Writing your headlines. To write the words on your slides, Crystal sends the following to its own service, which passes it to Anthropic, PBC, whose model writes them: one downscaled copy of one photo per slide; short descriptive labels the phone generated for those photos (for example “beach”, “food”) and the number of faces it found; the one line of context you typed, if you typed one; the look, tone and date span you chose.
Full-size photos never leave the phone. Crystal's service holds none of this once the words come back — it is passed through and dropped. Anthropic handles it under its own API terms and may retain inputs for a limited period for abuse prevention. Neither Crystal nor Anthropic trains any model on your photos or your words.
Choose “I'll do it myself” when you make a carousel and none of this happens: the photos are laid into the look on the device, you write the words, and nothing at all leaves the phone.
Your account
Crystal keeps an email address so your account outlives this phone. A six-digit sign-in code is emailed to that address each time you sign in. Against that account Crystal stores only an account identifier and the dates the account was created and last changed.
Counting what the writer is used for
Crystal's service keeps a usage record — an account identifier, a number of slides, and a timestamp — each time it writes headlines for you. This is the only thing that stops the key inside the app from being an open tap, and it is the basis of the free-carousel count. It records how many slides, never what was in them.
Your subscription
Purchases of Roll Pro are processed by Apple. To know whether your subscription is active, Crystal uses RevenueCat, which receives your purchase history, an account identifier and your device's vendor identifier (IDFV). Nothing else. Crystal's service keeps a record of the entitlement — an account identifier, Apple's transaction identifier, and when it was granted or revoked.
The website
If you join the waitlist at [yourdomain], Crystal keeps the email address you typed, and uses it only to tell you when the app is available. There is no advertising pixel, no tracking script and no third-party analytics on the site.
Who else touches it
- Supabase, Inc. — account, sign-in, usage and entitlement records; hosting for Crystal's service — United States
- Anthropic, PBC — the slide briefs and downscaled photos described above, at the moment your headlines are written — United States
- Resend — your email address, to deliver sign-in codes — United States
- RevenueCat, Inc. — purchase history, account identifier, device vendor identifier — United States
- Apple — the purchase itself, under Apple's own privacy policy — Apple's regions
These are the only ones. Nobody else receives anything.
What we never do
No analytics, on what is in your photos or on anything else — Crystal contains no analytics SDK, no crash reporter and no advertising SDK of any kind. No advertising. No tracking across apps or websites, and no IDFA. No upload of anything you did not choose to send. No sale of your data and no sharing of it for cross-context behavioural advertising, as those terms are defined under California law — not for money, not for anything else, and that has been true for every version of Crystal. No training of any model on your photos.
Why we are allowed to hold it
For anyone in the UK or EEA, the lawful bases under the UK and EU GDPR are:
- Performance of a contract — your email and account, the writing of your headlines, and your entitlement record. Crystal cannot do the thing you installed it for without these.
- Legitimate interests — the usage record, for preventing abuse of the writing service and metering the free tier. Balanced against you, it is a count without content.
- Consent — photo library access, which iOS asks for separately and which you can withdraw at any time in iOS Settings, and the website waitlist, which you leave by unsubscribing.
How long it is kept
- The photos and briefs sent to write headlines — not kept; passed through and dropped
- Account, email and profile record — until you delete the account
- Entitlement record — until you delete the account
- Usage record — 12 months, then deleted. On account deletion it is detached from you immediately and what remains is a count with no identifier attached
- Waitlist email — until you unsubscribe, or 12 months after launch, whichever comes first
Leaving the country
Crystal's service and every processor above run in the United States. If you are in the UK or EEA, your data is transferred there under the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, which each of these providers offers.
Your rights
Wherever you are, you can ask for a copy of what Crystal holds about you, ask for it to be corrected, or ask for it to be deleted — and the fastest route to the last one is in the app, below.
If you are in the UK or EEA, you also have the right to restrict or object to processing, the right to portability, and the right to complain to your data protection authority — in the UK, the Information Commissioner's Office at ico.org.uk.
If you are in California, you have the right to know, delete, correct and opt out, and the right not to be discriminated against for exercising any of them. Crystal does not sell or share personal information, so there is no opt-out to make.
Write to support@[yourdomain] and you will have an answer within 30 days. Crystal will never charge you for asking or treat you differently for it.
Security
The connection to Crystal's service is encrypted in transit. Your sign-in session is held in the iOS Keychain. Server-side, every table that holds anything of yours is behind row-level security so that one account cannot reach another's, and the key that talks to Anthropic lives only on the server — never in the app.
Children
Crystal is not directed at children and is rated for ages 12 and over. Crystal does not knowingly collect anything from a child under 13 (or under 16 in the EEA and UK). If you believe a child has given us their email address, write to support@[yourdomain] and it will be deleted.
Deleting your data
Delete your account from Settings inside Crystal. The account goes, and with it the profile record, the entitlement record, and anything else Crystal holds against it. It takes effect immediately and it cannot be undone.
The carousels on your phone and the photos in your library stay exactly where they are, because they were never ours.
To stop the only other thing that leaves, turn off Crystal's photo access in iOS Settings, or delete the app.
Changes to this policy
If this policy changes in a way that affects what leaves your phone or who receives it, Crystal will tell you in the app before the change takes effect. Smaller corrections are published here with a new effective date, and the date at the top always says when the current version started.