Privacy Policy

1. Introduction

Crucible ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our precious metals portfolio tracking service.

2. Information We Collect

We collect the following information:

• Account Information: Email address and password (passwords are securely hashed and never stored in plain text)
• Profile Information: Username
• Portfolio Data: Information you enter about your precious metals holdings
• Payment Information: Processed securely by Stripe (web) and Apple (iOS). We do not store your payment details on our servers.

3. How We Use Your Information

We use your information to:

• Provide and operate the Crucible service
• Process your subscription payments
• Send you account-related emails (password resets, subscription confirmations, etc.)
• Respond to your support requests
• Improve and maintain the service

5. Third-Party Services

We use the following third-party services to operate Crucible:

• Supabase: Database and authentication services. Your account and portfolio data is stored securely on Supabase servers. Supabase Privacy Policy
• Stripe: Payment processing. Credit card information is handled directly by Stripe and never touches our servers. Stripe Privacy Policy
• Vercel: Website hosting and infrastructure. Vercel Privacy Policy
• RevenueCat: Mobile app subscription management. RevenueCat processes subscription data for iOS users. RevenueCat Privacy Policy

6. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure password hashing, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active. If your free trial expires without subscribing, your data is retained for 30 days before permanent deletion. When you delete your account:

• Your account information and portfolio data are permanently deleted immediately
• Payment records may be retained by Stripe for tax and legal compliance purposes

8. Your Rights

You have the right to:

• Access: View all data associated with your account
• Correction: Update or correct your account information
• Deletion: Delete your account and all associated data at any time through your account settings
• Export: Request a copy of your data

To exercise these rights, you can use the settings in your account or contact us at the email below.

9. Cookies

We use essential cookies required for authentication and keeping you logged in. We do not use third-party tracking cookies or analytics cookies that track your behavior across other websites.

10. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your personal information. We do not sell personal information to third parties.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the service. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For questions about this Privacy Policy or to exercise your data rights, please contact us at 925mher@gmail.com.