Privacy

Last updated 12 October 2026

Most of crushedwithit runs on your device. Some features send data to other companies to do their job. This page lists each one: what goes, who gets it, and how long it is kept.

This policy covers the crushedwithit app on iPhone, iPad, Mac and Apple Watch, the crushedwithit.com website, and the Hasyam API private preview. It is run by Getconvi Technologies Private Limited, a company in India (founder and director: Sachin Uppal) ("we", "us"), which decides how the personal data described here is used. You can reach us at sachin@getconvi.com.

The short version

• Your library stays on your device and in your own private iCloud. That means notes, answers, bits, sets, shows, recordings and filmed takes. We cannot read your private iCloud.
• Transcription and laugh detection run on your device. Show recordings and voice notes are not sent to us or to any AI service. There are two exceptions, and both are for reels you ask for. The first is the 5-second clip you record to build your double. The second is the trimmed seconds of a show you choose to have a reel performed from.
• Writing help uses Anthropic. When you ask the app to write, the text needed for that job goes through our server to Anthropic's API.
• Your double and its reels use BytePlus, or Higgsfield. Since 25 September 2026 a new double is checked and rendered by BytePlus (ByteDance): you pass its face check, then the 5-second clip you record and the words and settings for each reel go through our server to BytePlus, which makes the video. BytePlus's terms say it does not use what it is sent to train its models without our authorisation, which we have not given, and its copy is deleted when you delete your double. A double built before then, or on a device where the face check is not offered, uses Higgsfield, whose terms let it use what it receives to train its AI models, and training cannot be undone. The app names the service in use before you record.
• Generated exports carry signed provenance. The visible AI label can be turned off only when the export passes its embedded Content Credentials check; otherwise it stays on.
• Private Mic links are public to anyone who has the link. Each one expires after 7 days, and you can take it down sooner.
• No accounts, ads, tracking, third-party analytics or crash-reporting code. We never ask for your name, email or phone number. We do not sell your data.
• Delete everything removes your material from your device, your iCloud and our server. The limits are listed below.

What stays on your device

The app stores everything you make in its own database on your device. That includes interview answers, notes, bits, jokes, sets, set versions, flashcards, rehearsal timings, show recordings, laugh timings, scores, filmed takes, reels and your profile. Your profile is your stage name, language, cleanliness setting, and the date you confirmed you are 18 or over.

If iCloud is on for the app, that database syncs to the private part of your iCloud account through Apple's CloudKit, so your other devices see it. Recordings, reels and kept video notes go there too. Video notes upload over Wi‑Fi only. Only you can read your private iCloud. We have no access to it.

• Voice notes and spoken answers are transcribed on your device with Apple's speech recogniser.
• Show recordings are analysed on your device. Apple's SoundAnalysis finds the laughs and the app lines them up against your punch words. Recordings are kept for 90 days by default. You can change that in Settings › Privacy or delete them any time.
• Rehearsal runs are transcribed live on your device and never saved as a file.
• Filming yourself with the prompter happens entirely on your device. Takes are not sent to us. The clip you keep syncs only to your own iCloud.
• Cleaning up notes and imports uses Apple's on-device models, or simple rules when those are unavailable.
• The Apple Watch talks only to your iPhone, through Apple's WatchConnectivity. It holds the set you are performing and the marks you tap.

Recording a room may be subject to local law and the venue's rules. The app reminds you before a live recording. The decision, and any consent from the people in the room, is yours.

What leaves your device, and who receives it

The app uses our API at api.crushedwithit.com, which runs on Cloudflare, for writing help, video requests and hosted sharing. It also uses Apple’s services directly. BytePlus serves its live face-check page inside the app and receives the verification data directly; our server checks the outcome with BytePlus.

Anthropic: writing help

When you tap something that writes, the app sends the text needed for that one job through our server to Anthropic's API. That covers Help me think, Help me write, building a set, rewrites, punchlines and set lists. The text is the relevant answers, premises, existing lines and your profile line: stage name, language and cleanliness. The reply comes back to your device and is stored there.

• Our server does not store your text or the reply. It keeps the cost, timing and status of each call, but no words.
• Under Anthropic's commercial terms, API inputs and outputs are not used to train its models. Anthropic keeps them only for the limited period those terms allow.

BytePlus: your double and its reels, since 25 September 2026

Your double is built from a 5-second clip of you talking to the camera. It has your face and your voice. Before you record it, you pass a face check run by BytePlus (ByteDance) on a page BytePlus serves inside the app: it confirms a live person and keeps a face record it later matches the clip against. That page names Getconvi Technologies Private Limited, which runs crushedwithit and holds its BytePlus account, as the party you authorise. When you then agree and record, the clip goes through our server into a group of its own in our BytePlus account, as the reference your reels are made from. No other user of ours can reach it.

Your looks and references. Photos, videos and voice samples you add as your looks are sent to our video partner, checked against your double, and kept there until you delete them or your double. Photos and videos are face-checked; voice samples must be your own voice. Our server keeps your look photos for your private gallery and look previews until you delete the look or your double. Temporary upload copies are removed after checking.

Media. Pictures, videos and sounds you add to Media are kept on our server until you delete them, and sent to our video partner only when a reel uses them. A picture from Media can also be sent to BytePlus for a paid look preview that uses it. Today only pictures from Media are sent: sounds are not used in reels yet, and videos from Media are not sent while that option is off, as it is now. Each upload is also checked for Content Credentials by our own validator on Cloudflare, and a thumbnail of each picture or video is kept with it. With each file we keep what you confirmed about your right to use it, when, and under which version of the Media terms. Your device checks each file for faces, speech and music before it is sent; nothing about that check leaves your device except its result. When you delete a file, the file and its thumbnail are removed from our server 48 hours later, and the record of what you confirmed 30 days later, so that a rights holder's claim can still be answered; Delete everything removes your files and their records at once. If we remove a file after a rights complaint, we keep a record of the complaint for three years, and Delete everything does not remove it; see the table below. If your plan with reels ends, your uploads and pack pictures are deleted 365 days later. From 30 days before, the Media page in the app shows a notice with the date and a way to save them; there is no push notification for it.

A look preview costs 3 credits per successful picture; refusals and failures are free. Its private picture is kept on our server for 24 hours. No-face image references are kept for up to 30 days or until you delete the reel. Original reel copies and available last frames can be reused for 30 days; deleting the reel removes those reference copies. Uploads that do not finish expire after 24 hours.

For each reel you ask for, our server sends BytePlus the lines of the bit, the look and setting you picked, and a reference to your clip's asset in that group. If you choose to have a reel performed from one of your show recordings, the app also sends the seconds you trimmed to, and nothing else from that show. It asks you on that reel first, every time.

• Training. BytePlus's data-processing terms for this service say it does not use what it is sent to train its models without the customer's authorisation. We have not given it.
• Retention and deletion. Your clip and face record stay in your group in our BytePlus account until you delete your double or delete everything. Either action requests deletion of that group at BytePlus; if BytePlus refuses the deletion, our server retries it and tells us. Each finished reel's file is kept by BytePlus for up to 30 days after it is made (it is the reference for a continuation of that reel), and after that only on your device and, if you chose Private Mic, on our server for the life of the link.
• Our server keeps only our id for your clip, BytePlus's ids for the group and the asset, its length, the record of your consent and of the face check's result (pass or fail, never the face data). One still frame of your double is sent for look previews and kept until you delete your double. The lines sent for a render are cleared from our server when the render settles.
• Refused clips. If BytePlus's face check does not match the clip to the face record, or the clip is refused for another reason, the clip is deleted from BytePlus and from our server, and the app asks you to film again.

Higgsfield: doubles built before 25 September 2026

Before the face check, and today on a device where the app does not offer it, the double is built the older way: the app shows you every frame and checks you are live on the device (you turn your head on cue and read four digits aloud), asks for your consent, and sends the clip through our server to Higgsfield (higgsfield.ai), the service that renders those reels.

For each reel you ask for, our server sends Higgsfield the lines of the bit, the look and setting you picked, and a reference to your clip. If you choose to have a reel performed from one of your show recordings, the app also sends the seconds you trimmed to, and nothing else from that show. It asks you on that reel first, every time.

• Training. Higgsfield's terms let it use what it is sent to train and improve its AI models. Once something is in a trained model it cannot be taken back out, by Higgsfield, by us or by you. Higgsfield says it does not keep the measurements of your face.
• Retention. Higgsfield keeps its copy of your clip and of each finished reel for as long as its own policy says. It offers no way for us to delete them. Deleting your double in the app removes your copies and our server's record, but not Higgsfield's.
• Our server keeps only our id for your clip, Higgsfield's id for it, its length, and the record of your consent and liveness checks. One still frame of your double is sent for look previews and kept until you delete your double. The lines sent for a render are cleared from our server when the render settles.
• Finished reels are not stored on our server. When your device downloads one, the server fetches it from Higgsfield and passes it through.

The AI label and Content Credentials. Generated exports embed a signed reel record. The app also prepares C2PA Content Credentials identifying AI generation. If you turn the visible AI label off, the export must pass its embedded Content Credentials check; if embedding fails, the visible label is kept. Takes you film of yourself are real footage and carry no AI label. The Trust Center explains provenance and its limits, including re-encoded sharing copies.

Private Mic: public links to a reel

Private Mic lets you share one of your double's reels with a few people and see where they laughed. When you tap Make the link, the app uploads the labelled reel file to our server. You get a public link on api.crushedwithit.com.

• Who can see it. Anyone who has the link can watch the reel. They see the reel, including its AI label, and nothing else: not your name, your other material or who else has the link. Search engines are told not to index these pages.
• What viewers send. Their laugh taps, whether they watched to the end, and one answer: Laughed, Smiled or Nothing. The page sets no cookies, stores nothing in the browser and loads no analytics. It keeps a random session number in memory until the tab closes. We do not record who a viewer is. Reactions from about the first 100 viewers are kept.
• How long. The link, the file and the reactions are deleted 7 days after you make the link. You can take the link down earlier from any of your devices, and it stops working within a minute.
• Reporting a video. Every Private Mic page has a Report this video link. Use it, or email sachin@getconvi.com with the link, if a video shows you without your consent or is abusive or unlawful. A report holds the reason you pick and any words you add. It also holds a one-way hash of your network address and the link, which lets one person file only one report per video; the address itself is not kept. Reports are kept for 90 days, even after the link has gone, so we can act on them. We can take any link down.

Cloudflare: hosting our server

Our server runs on Cloudflare Workers. The records it keeps are stored with Cloudflare; they are listed in the table below. They include hosted Show Reports and Private Mic reels. Cloudflare processes requests on our behalf, and its edge logs show routes, status codes and timings.

Hasyam API private preview (business integrations)

Hasyam pronunciation inside the app runs on your device. The optional developer API is different: callers send a script, language and any supplied pronunciation or preservation choices to a separate Cloudflare Worker for request-time processing. It returns prepared text and review information. Its code does not save request bodies or replies, train on them, or send them to an external AI provider. Responses carry a no-store instruction. Callers are responsible for how their own application handles the returned text and any later video generation.

The API stores only API-key digests and opaque key identifiers in its access registry until access is revoked. The request limiter uses the key identifier for a brief per-minute counter. Application request logging is disabled; Cloudflare may still process operational and security metadata. Pilot enquiries sent by email remain in our support inbox until removed on request. Email sachin@getconvi.com to revoke access or remove an enquiry. See the API documentation.

Apple: purchases, iCloud, notifications and app checks

• Purchases go through the App Store. We never see your payment details, your name or your Apple Account. The app sends our server Apple's signed proof of your subscription or reload. We keep a salted hash of the transaction number to track your plan and balance.
• iCloud sync uses your own private CloudKit database, as described above.
• Notifications. If you allow them, the app sends our server a push token. We use it to tell you when a reel or your double is ready, or when a Private Mic link gets reactions. Apple delivers the notification. It has a title and one sentence, never your material. Reminders such as a gig tomorrow are made on your device. Each kind has its own switch in Settings.
• App Attest. Each install proves it is a genuine copy of the app. Apple signs the proof and our server keeps an opaque key. No name or device identifier is involved.
• Your devices without a subscription. If you are signed in to iCloud, the app reads the anonymous identifier iCloud gives this app for your account, scrambles it on your device with a one-way hash, and sends only that hash with each request. Our server uses it so your iPhone, iPad and Mac share one free allowance and one history. It is never your Apple Account, your name or your email, and it goes when you delete everything.

Hosted Show Reports (only if you make a link)

You can share a Show Report as an image or PDF straight from your device, and that never reaches us. If you tap Make a link, that one PDF is uploaded to our server and anyone with the link can open it. It contains your score, counts and stage name. It has no audio, transcript or set. The link stops working after 30 days, or sooner if you delete it.

Activity counts (off unless you turn them on)

One switch in Settings lets the app send ten numbers once a day, such as how many notes, sets and shows you have. It never sends a word of them. It is off until you turn it on.

Posting to LinkedIn or Instagram

Updated 10 October 2026, when posting became available in the app. When you post or schedule a reel or a picture, the marked copy and its caption are kept on our server until it is posted, and your connection to LinkedIn or Instagram is kept until you remove it. We keep the reel or picture for seven days after it posts and the caption for 90 days, then delete them. The link to the post stays in your calendar. You sign in on LinkedIn's or Instagram's own page; we never see your password.

When you connect an account we keep its ID, its name or handle and its profile picture, so the app can show which account is connected and post to it, and the sign-in token, sealed on our server. From Instagram we use only your professional account's basic profile and the right to publish what you post; from LinkedIn, your basic profile and the right to share on your behalf. We never read your messages, comments, followers or insights. To show you which account is connected, the app loads its profile picture directly from LinkedIn's or Instagram's own image servers; like any image from the web, those servers see your device's network address. No sign-in token or cookie is sent with that request. Nothing is posted unless you press Post or set a schedule. Whatever the platform, every reel you post carries its visible AI label, its Content Credentials, or both: the label can be off only when the Content Credentials check passes, as described under The AI label and Content Credentials above. Posts to Instagram are also sent with Instagram's own AI label switched on (is_ai_generated). Posts to LinkedIn are sent without a LinkedIn AI label.

Removing the connection and deleting this data. In the app, open You › Channels, choose the account and remove it: we delete its sign-in token and account details at once. Delete everything in the app removes every connection with everything else. Instagram's sign-in cannot be revoked from our side, so also remove crushedwithit in Instagram under Settings › Apps and websites; on LinkedIn, under Settings › Data privacy › Permitted services. You can also email sachin@getconvi.com and we will delete it for you.

How long each thing is kept

The data and retention page lists each number on our server next to the line of code that sets it.

Deleting your data

• One thing at a time. Delete any note, recording, reel or report link in the app. Delete your double from You › Your double. Take down a Private Mic link from its page in the app.
• Delete everything is in the You tab. It asks you to save a copy first. Then it deletes every record and file on this device and the copy in your iCloud. It deletes your watch's copy the next time the watch connects. It takes down every hosted Show Report and Private Mic link. It also deletes everything our server holds under your subscription: your double's record, your Media uploads and their rights records, reel jobs, counters, ledger, reload balance, activity counts and push tokens. It works store by store and tells you anything it could not reach.
• What Delete everything does not do:
  • It does not cancel your subscription. Apple handles that in Settings › your name › Subscriptions.
  • It does not keep unspent reload credit. That credit is lost, and the screen shows the amount first.
  • It cannot delete Higgsfield's copies of a clip or reels sent there before 25 September 2026, or undo training that has already happened.
  • It does not delete the record of a file we removed from your Media after a rights complaint. That record is kept for three years. It holds a one-way hash of your account, never the file or its name.
  • It cannot recall exports, or reports and reels that someone else already saved.
• Deleting the app removes its data from that device. To remove the iCloud copy without the app, go to Settings › your name › iCloud › Manage Storage.

What we do not do

• No advertising and no tracking across apps or websites. The app contains no third-party analytics, advertising or crash-reporting code.
• No email or phone login. You don’t need to provide an email address or phone number to use the app. You can choose a stage name.
• We do not sell or rent your data, and we do not train any model on your material. The companies above receive only what their feature needs, when you use it.

The website sets no cookies of its own. It counts page views without cookies, and the early-access form is stored on our server for 180 days and emailed to our inbox through our email provider, Bird. Only if our server cannot be reached does the form go to FormSubmit, a form-forwarding service, instead. If you like or comment on a homepage reel, we store your reaction or comment and a hash of a random browser token in Cloudflare for up to one year. Comments are held for approval before your display name and message become public. You can remove your own comments from the same browser. The data page has the details.

Age

crushedwithit is for adults. The app asks you to confirm you are 18 or over before anything else. It does not ask for or store your date of birth.

Studio service enquiries and production

The Studio enquiry form asks for your name, email, profession, preferred plan, language and any goals you choose to share. It sends these details only when you submit. We use them to respond to your enquiry and discuss the service. The enquiry is stored on our Cloudflare server for 180 days and forwarded to our inbox through Bird. Studio does not use the early-access form's FormSubmit fallback; you can contact us by email if submission fails. Forwarded emails remain in our inbox until removed on request.

Studio is a human-assisted production service. If you engage us, the assigned production team needs access to the scripts, approved reference material and videos needed for your brief, and online generation services process the inputs required to make your video. The app's on-device and private-iCloud descriptions do not mean Studio work is visible only to you. We agree the production tools, access, retention and deletion arrangements before onboarding. Do not include patient records, confidential client information or identity documents in an enquiry. Email sachin@getconvi.com to request deletion of your enquiry.

Your rights

You can see, export and delete your material in the app at any time. To find out what our server holds about you, to correct or delete it, or to make a complaint, email us. For app data, we may ask for your Apple purchase receipt or a link to find the right records, since app records hold no name or email. For website comments, tell us the reel, display name and comment you want us to find. Depending on where you live, you may also have the right to complain to your data protection authority. Cloudflare, Anthropic, BytePlus (ByteDance), Higgsfield, Bird, FormSubmit and Apple may process your data outside your country, under their own safeguards. Our server calls BytePlus in its ap-southeast-1 region.

Changes

If this page changes in a way that matters, the date at the top changes, and the app's What's New will say so.

Contact

Getconvi Technologies Private Limited, India · Sachin Uppal, Founder and Director · sachin@getconvi.com