Privacy Policy

Crib ("we," "us," or "our") operates the Crib mobile application. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We believe in transparency, so we've kept this straightforward.

Information We Collect

Account information

When you create an account, we collect:

• Email address: must be a university (.edu) email, used as your login and for verification
• Display name: shown to other users
• Profile photo: optional, uploaded by you
• University affiliation: derived from your email domain
• Year and major: optional, displayed on your profile
• Short bio: optional, up to 300 characters

Listing information

If you post a listing, we collect:

• Title, description, price, dates of availability
• Bedroom count, bathroom details, and amenities
• Photos you upload
• Address and location coordinates
• Neighborhood and optional cross-streets

Activity data

• Messages: in-app messages between users
• Booking requests: date ranges, status, and optional messages
• Reviews: ratings and written reviews you submit
• Reports: safety reports you file about other users or listings

Device and usage information

• Device type and operating system (via user agent)
• Session tokens and authentication state

How We Use Your Information

• To provide the service: creating your account, displaying listings, facilitating messages and bookings
• To verify identity: confirming your university email through a one-time passcode
• To protect privacy: generating fuzzy (approximate) coordinates for public listing display so your exact address is never shown to browsing users
• To enable trust: displaying reviews, verification status, and response rates to other users
• To send transactional communications: booking confirmations, OTP codes, and in-app notifications
• To maintain safety: reviewing reports and enforcing our Community Guidelines

How We Protect Your Location

We take location privacy seriously. When you add an address to a listing, we generate a fuzzy location, an approximate point offset by roughly 200 meters from the real address. This fuzzy location is what other users see when browsing. Your exact address is only shared with a user after a booking is confirmed, through the in-app messaging thread.

How We Share Information

We do not sell your personal information. We share data only in these contexts:

• With other Crib users: your profile, listings, and reviews are visible to other verified users. Exact addresses are only shared with confirmed booking counterparts.
• Service providers: we use third-party services to operate Crib:
  • Resend (transactional email delivery)
  • Cloudflare (image hosting and CDN)
  • Mapbox (map display and geocoding)
  • Neon (database hosting)
• Legal requirements: if required by law, legal process, or to protect the safety of our users

Data Retention

We retain your data for as long as your account is active. If you delete your account, all of your data is permanently and irreversibly deleted. This includes your profile, listings, messages, booking history, and reviews. There is no recovery period.

Your Choices

• Edit your profile: update or remove optional information at any time in the app
• Delete your account: permanently delete all your data from within the app under Profile > Delete Account. See our Account Deletion page for details.
• Contact us: for any data-related requests, email support@nucrib.com

Children's Privacy

Crib is designed for college and university students. We do not knowingly collect information from anyone under the age of 17. If we learn that a user is under 17, we will delete their account.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the app. The "Effective" date at the top of this page reflects the most recent revision.

Contact Us

If you have questions about this Privacy Policy or your data, reach out to us at support@nucrib.com.