Privacy Policy

Soliton Group LLC ("Company," "we," "us," or "our") operates the Crushbit mobile application (the "App") and related websites (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the App or Site.

By using Crushbit, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

• Account information: Email address, date of birth, sign-in credentials (via Apple or Google sign-in).
• Profile information: Self-reported attributes (such as display name, gender, physical attributes, and lifestyle preferences) and photos you upload. This information may be inaccurate or unverified.
• Location: City or area you select for matching purposes. We store approximate coordinates to calculate distances to potential matches.
• Matching preferences: Who you're looking for, age range, distance preferences, and dealbreaker filters.
• Game activity: How you play and interact with in-app games.
• Communications: Messages you send to other users (stored in encrypted form; we cannot access message contents).
• Reports and support requests: Information you provide when reporting content or contacting support.

1.2 Information We Collect With Your Permission

• Liveness verification: A video selfie to verify you are a real person and that your profile photos represent you. This is required before you can queue for games.

1.3 Information Collected Automatically

• Device information: Device model, operating system, language, and similar device identifiers.
• Usage data: App and Site usage analytics (e.g., feature usage, interactions).
• Crash/performance data: Crash reports and performance diagnostics.
• System security data: Information necessary to protect system integrity, such as IP addresses and access timestamps.

1.4 Sources of Personal Information

We collect personal information from the following categories of sources:

• Directly from you (e.g., account creation, profile completion, game responses, messages, support requests).
• Automatically from your device/browser when you use the App or Site.
• Third parties you authorize (e.g., Apple or Google for sign-in).

2. How We Use Your Information

We use information to:

• Provide matches: Connect you with compatible users based on game responses and preferences.
• Provide core app functionality: Enable account access, game participation, messaging, and other features.
• Improve the service: Analyze usage patterns to enhance features and user experience.
• Communicate with you: Send notifications about matches, messages, security events, and updates.
• Service integrity: Detect abuse such as bots, duplicate accounts, system manipulation, and service disruption.

3. Automated Processing

Crushbit uses automated systems for:

• Matching: Identifying compatible users based on game activity and preferences.
• Liveness verification: Confirming you are a real person and that your profile photos depict you.
• Photo analysis: Checking profile photos for compliance and detecting service abuse.

We do not access the contents of private messages, which are end-to-end encrypted.

4. How We Share Information

4.1 With Other Users (In-App Only)

Some of your profile information is visible to other users within the App.

Visible to other users: Profile information you choose to share (such as display name, photos, location, and attributes), profile badges, and messages you send to that user.

Private (only visible to you and Crushbit): Account credentials, exact location coordinates, matching preferences, dealbreaker filters, and game activity.

4.2 With Service Providers

We may share information with service providers that help us operate the App and Site, such as providers for:

• Infrastructure and hosting
• Database and authentication
• System security and logging
• Analytics and performance monitoring
• Customer support
• Photo analysis and liveness verification
• Payment processing

Service providers are required to protect your data and may only use it to provide services to us.

Photo analysis and liveness verification vendors help us comply with applicable law (including child exploitation laws) and app store policies (such as the Apple App Store Review Guidelines and Google Play Developer Program Policies). These vendors check for "objectionable" or "inappropriate" content and help detect service abuse such as bots, duplicate accounts, and users who may be underage.

4.3 For Legal Reasons

We may disclose information as required by law, in response to valid legal process, or to cooperate with law enforcement in emergency situations.

4.4 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction.

4.5 No Sale/Share for Cross-Context Behavioral Advertising

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising (as those terms are defined under California law). We do not use your data to track you across apps and websites for advertising.

4.6 International Transfers

If you use the App or Site from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate.

4.7 Reporting, Blocking, and Moderation

You can report profiles, photos, and messages that violate our policies. Reports may be processed and may result in account restrictions. You can block users at any time.

5. Your Rights and Choices

5.1 Access, Correction, and Deletion

You can view and update certain account/profile information in the App. You can delete your account at any time in Settings or by contacting privacy@crushbit.app. Upon deletion, your profile, photos, and match history are removed, subject to legal retention requirements and legitimate safety/security needs.

5.2 Data Controls

You can manage your profile information, photos, and preferences in the App settings. You can also control notification preferences.

5.3 Appeals (Certain US States)

If we decline to take action on your privacy request, you may appeal by emailing privacy@crushbit.app with the subject line "Privacy Appeal." We will respond as required by applicable law.

6. California Notice at Collection (CCPA/CPRA)

This section applies to California residents.

Categories, purposes, sale/sharing, and retention

We collect the categories of personal information listed below for the purposes described. We do not sell or share personal information for cross-context behavioral advertising.

California resident rights

California residents may have rights to know, access, delete, correct, opt out of sale/sharing (if applicable), limit use of sensitive PI (if applicable), and not be discriminated against for exercising rights.

How to exercise rights

Email privacy@crushbit.app (or use in-app controls where available). We will take steps to verify your request.

Authorized agents

You may designate an authorized agent to submit a request on your behalf. We may require proof of authorization and verification of your identity.

7. European Residents (GDPR)

If you are in the European Economic Area, you have the right to access, rectify, erase, restrict processing, port your data, object to processing, and lodge a complaint with a supervisory authority.

Privacy requests: Submit requests through our contact form (select "Privacy Request"). You may also submit requests by email at privacy@crushbit.app.

8. Illinois Biometric Notice (BIPA) — Liveness Verification

This section applies only if you are an Illinois resident.

8.1 What happens during Liveness Verification

Before you can meet people, you must complete your profile and record a short video selfie. Third-party services store and analyze facial features from this video to help us maintain service integrity and quality by checking for liveness, uniqueness, and profile-photo consistency.

8.2 Consent ("Written release" via electronic signature)

Before Liveness Verification, we will provide a biometric notice and obtain your affirmative consent via an electronic signature (for example, tapping "I Consent" or checking a consent box).

8.3 Biometric retention schedule and destruction guidelines

We will permanently destroy biometric identifiers and/or biometric information (if any) when the initial purpose for collecting/obtaining it has been satisfied or within 3 years of your last interaction with Crushbit, whichever occurs first.

Operationally, our default schedule is:

• Raw verification video: deleted after processing (typically within minutes).
• Facial geometry data used for comparison: retained for the duration of your account + 30 days.
• Verification logs (e.g., pass/fail, similarity score, timestamp): retained for 24 months for legal compliance, auditing, and dispute handling, then deleted or de-identified.

You may request deletion by emailing privacy@crushbit.app. We may retain limited records as needed to comply with law and enforce our safety/security policies.

9. Do Not Track / Global Privacy Control (CalOPPA)

We honor Do Not Track signals (DNT: 1) and Global Privacy Control (Sec-GPC: 1) by not using non-essential tracking technologies on the Site when we detect these signals, and by not selling or sharing personal information for cross-context behavioral advertising. Some strictly necessary security processing (such as fraud and bot prevention) may still occur.

Mobile apps. Where browser-based signals are not available, we provide in-app controls intended to offer a similar "Do Not Track" choice.

10. Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and security monitoring. However, no system can be guaranteed 100% secure.

Private messages between users are end-to-end encrypted. We cannot access the contents of these messages.

If you believe your account has been compromised, contact us immediately.

In the event of a data security incident affecting your personal information, we will notify you as required by applicable law.

11. Children's Privacy

Crushbit is intended for users 18 years of age and older. We do not knowingly collect information from anyone under 18. If we learn we collected information from a user under 18, we will delete the account.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App, the Site, or by email. Continued use after the effective date means you accept the updated policy.

13. Contact Us

Privacy requests: privacy@crushbit.app

Contact form: crushbit.app/contact (choose "Privacy Request")

This Privacy Policy is effective as of the date stated above and will remain in effect until updated.