Privacy Policy

Effective date: September 30, 2026

This Privacy Policy explains how Crew Cue LLC (“CrewCue,” “we,” “us,” or “our”) collects, uses, discloses, and protects information through the CrewCue website, organization portal, CrewCue Worker application, CrewCue Leader application, and related services (collectively, the “Services”).

Information we collect

Depending on how you use CrewCue, we may collect:

• Account and contact information, including name, email address, telephone number, authentication identifiers, city, and state.
• Professional profile information, including profile photos, skills, experience, availability, certifications, and work preferences.
• Organization and production information, including venues, positions, assignments, offers, requests, schedules, attendance records, time entries, and internal reviews.
• Communications and content, including messages, production notes, incident and wrap reports, drawings, documents, attachments, and support requests.
• Attendance verification information, including precise location, location accuracy, QR verification results, timestamps, breaks, check-in and checkout events, and checkout signatures.
• Device and technical information, including installation identifiers, device model, operating-system and app versions, security events, diagnostics, and service interactions.
• Organization subscription information, including selected plans, subscription status, entitlements, and usage. Online checkout is not currently available; organization access is arranged through invitation-based onboarding. Stripe payment integration is not currently active. Do not send payment-card details in an access or support request.

Google and Apple sign-in

If you choose Google or Apple sign-in, CrewCue uses Supabase Authentication to authenticate you and associate your provider identity with your CrewCue account. The sign-in information can include a provider account identifier, email address and verification information, and profile information such as your name and, when supplied by the provider, a profile-image URL. Apple may supply a private relay email address and may provide your name only when you first authorize sign-in.

We use this information to create or link your account, populate account details, identify you within CrewCue, and secure access. Email and available name information are stored with authentication and profile records in our Supabase backend. Name information supplied through native Apple sign-in is used to fill missing profile names. Google sign-in requests only basic identity scopes: openid, email, and profile; it does not request access to Gmail messages, contacts, calendars, or Drive files.

The apps persist a CrewCue/Supabase authentication session on your device so you can remain signed in. Its access and refresh tokens are distinct from Google or Apple provider credentials. Provider credentials or authorization codes are processed as part of authentication. Authentication responses may include provider tokens, which can be part of stored session information. We do not use provider tokens to access additional Google or Apple services. Submitting a deletion request does not itself revoke provider authorization.

Google or Apple and Supabase process the information needed for sign-in. Account and profile information may be shown to organizations and other users where required for CrewCue staffing and communication features, as described below. We do not sell Google or Apple sign-in information or use it for third-party behavioral advertising.

Personal push notifications

Worker and Leader can register your installation for personal notifications about messages and production activity. This uses push tokens, an installation identifier, an association with your CrewCue account and app, and device information such as platform, device name or model, and app version. Installation security credentials help protect that association. Notification preferences and device permission settings affect delivery.

Our backend stores registration information and sends notification content and routing information through Expo's push service and the applicable Apple or Google device delivery service. Notifications may appear on your device's lock screen according to your settings. You can control notification permission in device settings. The apps attempt to unregister personal notifications during sign-out and after an accepted in-app deletion request; this is not deletion of the account or organization-owned device activation.

Location information

When an organization enables location-based attendance verification, CrewCue Worker may request precise device location when a worker attempts to check in. CrewCue Leader may use location to establish the attendance area for a production. We use this information to determine whether a device is within the permitted area, document verification results, prevent misuse, and resolve attendance disputes. CrewCue does not use this feature for continuous advertising tracking.

Camera, photos, files, and signatures

Camera or photo-library access may be used to scan attendance QR codes, select or capture a profile image, capture operational attachments, or create records requested by a user. Checkout signatures and integrity information may be retained with the associated time entry. Only submit files appropriate for workforce and production operations.

How we use information

• Provide, maintain, secure, and troubleshoot the Services.
• Support staffing, scheduling, communication, attendance, reporting, and production operations.
• Verify users, devices, organization access, subscriptions, and permitted actions.
• Prevent fraud, abuse, unauthorized access, and security incidents.
• Respond to support, privacy, legal, and account-deletion requests.
• Improve CrewCue using aggregated or de-identified information where appropriate.

How information is disclosed

We may disclose information to organizations and workers as required to provide CrewCue features; to vendors providing hosting, authentication, storage, app delivery, analytics, or support; in connection with a business transaction; to protect CrewCue, users, or others; or when required by law. We do not sell personal information or use it for third-party behavioral advertising.

Organization-controlled information

Organizations control many records created within their CrewCue workspaces and may have independent obligations concerning employment, contracting, payroll, safety, retention, or individual requests. Contact the relevant organization when a request concerns records it controls.

Retention

We retain information as reasonably necessary to provide the Services, maintain security and audit history, resolve disputes, enforce agreements, and satisfy legal or contractual obligations. Depending on the record, information may be deleted, de-identified, or isolated from ordinary use.

Your choices and requests

You may update certain profile information in CrewCue and request access, correction, or deletion by contacting support. Worker and Leader provide in-app account-deletion request flows for your shared CrewCue account. You can also use the contact instructions on our Account Deletion page. Device permissions can be managed in device settings, although disabling one may prevent its related feature from working.

An accepted request records your request; it does not mean deletion is complete, immediately disable server access, or delete or transfer organizations, memberships, or shared-device activation. The apps attempt personal notification cleanup and sign-out after acceptance. Request status and any scheduling value are not a completion deadline. Account deletion processing, including treatment of retained records and provider authorization, is separate from request recording. Contact support about your request and the relevant organization about records it controls.

Security

We use administrative, technical, and organizational safeguards designed for the information handled by CrewCue. No storage or transmission system can be guaranteed completely secure.

Children

CrewCue is a professional workforce-management service, is not directed to children under 13, and does not knowingly collect their personal information.

Changes

We may update this policy as CrewCue develops or legal requirements change. The effective date above identifies the current version. Material changes may also be communicated through the Services.