Privacy Policy · crystl

crystl ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we use it.

What we collect

Account information

When you create an account, we collect your email address for authentication and license delivery. We do not collect your name or other personal details unless you provide them voluntarily (e.g., through our contact form).

Payment information

Payments are processed by Stripe. We do not store your credit card number, expiration date, or CVC. Stripe handles all payment data under their own privacy policy.

Analytics

We use Google Analytics on this website to understand how visitors find and use crystl.dev. This collects standard usage data such as page views, referral sources, and approximate location (country/region). IP addresses are processed by Google but are not stored in reports or accessible to us.

Contact form

If you use our contact form, your name, email, and message are stored in our database so we can respond to you. We do not share this information with third parties.

The crystl desktop application

crystl for Mac runs entirely on your machine. Your terminal sessions, conversation history, project data, and file contents stay on your Mac. We do not have access to your code, commands, or AI conversations. crystl's own network requests are limited to license validation and update checks. If you pair a phone and enable notifications, your Mac also forwards small notification alerts through our push gateway (described under "The crystl mobile app" below).

The crystl mobile app (iOS)

The crystl iPhone app is a companion to the desktop app. It has no account and no sign-in. You connect it to a Mac you control with a one-time pairing code, which is stored securely in the iOS Keychain on your device.

Your project and session data stays between your devices. When you view a project, watch a terminal session, read a transcript, send a message, or send a photo, that data travels directly between the app and your Mac, over your local network, or, when you're away from it, through an encrypted relay (relay.crystl.dev) that passes the traffic through to your Mac. We do not collect, store, or read this content.

Notifications. If you enable notifications, your device's Apple Push Notification token is registered with your Mac. When an agent needs your attention, your Mac sends a small alert through our push gateway (crystl.dev) to Apple and on to your phone. That alert contains only short labels (the project name, the session name, and the tool involved) so you know what needs you. It never contains your messages, terminal output, the agent's questions, or any code. We use it only to deliver the alert and to drop tokens that are no longer valid.

Camera, microphone, and photos. The camera scans the pairing QR code and, if you choose, takes a photo to send to your agent. The microphone and speech recognition power optional voice dictation, transcribed on your device where supported. Photos and dictated text go only to your Mac, never to us.

No tracking, ads, or analytics in the app. The iPhone app does not track you, show ads, or bundle third-party analytics, and it contains no in-app purchases. crystl's optional Guild membership is purchased separately through the desktop app.

How we use your data

To provide and maintain your account and license
To process payments
To respond to support requests
To improve our website and product
To send product updates (you can unsubscribe at any time)

Data sharing

We do not sell your personal data. We share data only with the service providers necessary to operate crystl:

Supabase: authentication and database hosting
Stripe: payment processing
Resend: transactional email delivery
Google Analytics: website analytics
Cloudflare: website hosting and security
Apple (APNs): delivering push notifications to your iPhone

Data retention

Account data is retained for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days.

Cookies

This website uses cookies for analytics (Google Analytics) and bot protection (Cloudflare Turnstile). No advertising or tracking cookies are used.

Your rights

You have the right to access, correct, or delete your personal data. To make a request, contact us at crystl.dev/contact.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

If you have questions about this privacy policy, reach out via our contact page.