Privacy

Last updated 27 October 2026

Most of crushedwithit runs on your device. Some features send data to other companies to do their job. This page lists each one: what goes, who gets it, and how long it is kept.

This policy covers the crushedwithit app on iPhone, iPad, Mac and Apple Watch, the crushedwithit.com website, and the Hasyam API private preview. It is run by Getconvi Technologies Private Limited, a company in India (founder and director: Sachin Uppal) ("we", "us"), which decides how the personal data described here is used. You can reach us at sachin@getconvi.com.

The short version

• Your library stays on your device and in your own private iCloud. That means notes, answers, bits, sets, shows, recordings and filmed takes. We cannot read your private iCloud.
• Transcription and laugh detection run on your device. Show recordings and voice notes are not sent to us or to any AI service. There are two exceptions, and both are for reels you ask for. The first is the 5-second clip you record to build your double. The second is the trimmed seconds of a show you choose to have a reel performed from.
• Writing help uses Anthropic. When you ask the app to write, the text needed for that job goes through our server to Anthropic's API.
• Your double and its reels use BytePlus, or Higgsfield. Since 25 September 2026 a new double is checked and rendered by BytePlus (ByteDance): you pass its face check, then the 5-second clip you record and the words and settings for each reel go through our server to BytePlus, which makes the video. BytePlus's terms say it does not use what it is sent to train its models without our authorisation, which we have not given, and its copy is deleted when you delete your double. A double built before then, or on a device where the face check is not offered, uses Higgsfield, whose terms let it use what it receives to train its AI models, and training cannot be undone. The app names the service in use before you record.
• Generated exports carry signed provenance. The visible AI label can be turned off only when the export passes its embedded Content Credentials check; otherwise it stays on.
• Private Mic links are public to anyone who has the link. Each one expires after 7 days, and you can take it down sooner.
• The apps have no accounts, ads, tracking, third-party analytics or crash-reporting code. They never ask for your name, email or phone number. We do not sell your data.
• The web app has an account. At app.crushedwithit.com you sign in with your email address or with Apple. It counts visits with Cloudflare Web Analytics, which sets no cookies, and measures our ads with OpenAI's advertising pixel, which does. Details below.
• Delete everything removes your material from your device, your iCloud and our server. The limits are listed below.

What stays on your device

The app stores everything you make in its own database on your device. That includes interview answers, notes, bits, jokes, sets, set versions, flashcards, rehearsal timings, show recordings, laugh timings, scores, filmed takes, reels and your profile. Your profile is your stage name, language, cleanliness setting, and the date you confirmed you are 18 or over.

If iCloud is on for the app, that database syncs to the private part of your iCloud account through Apple's CloudKit, so your other devices see it. Recordings, reels and kept video notes go there too. Video notes upload over Wi‑Fi only. Only you can read your private iCloud. We have no access to it.

• Voice notes and spoken answers are transcribed on your device with Apple's speech recogniser.
• Show recordings are analysed on your device. Apple's SoundAnalysis finds the laughs and the app lines them up against your punch words. Recordings are kept for 90 days by default. You can change that in Settings › Privacy or delete them any time.
• Rehearsal runs are transcribed live on your device and never saved as a file.
• Filming yourself with the prompter happens entirely on your device. Takes are not sent to us. The clip you keep syncs only to your own iCloud.
• Cleaning up notes and imports uses Apple's on-device models, or simple rules when those are unavailable.
• The Apple Watch talks only to your iPhone, through Apple's WatchConnectivity. It holds the set you are performing and the marks you tap.

Recording a room may be subject to local law and the venue's rules. The app reminds you before a live recording. The decision, and any consent from the people in the room, is yours.

What leaves your device, and who receives it

The app uses our API at api.crushedwithit.com, which runs on Cloudflare, for writing help, video requests and hosted sharing. It also uses Apple’s services directly. BytePlus serves its live face-check page inside the app and receives the verification data directly; our server checks the outcome with BytePlus.

Anthropic: writing help

When you tap something that writes, the app sends the text needed for that one job through our server to Anthropic's API. That covers Help me think, Help me write, building a set, rewrites, punchlines and set lists. The text is the relevant answers, premises, existing lines and your profile line: stage name, language and cleanliness. The reply comes back to your device and is stored there.

• Our server does not store your text or the reply. It keeps the cost, timing and status of each call, but no words.
• Under Anthropic's commercial terms, API inputs and outputs are not used to train its models. Anthropic keeps them only for the limited period those terms allow.

BytePlus: your double and its reels, since 25 September 2026

Your double is built from a 5-second clip of you talking to the camera. It has your face and your voice. Before you record it, you pass a face check run by BytePlus (ByteDance) on a page BytePlus serves inside the app: it confirms a live person and keeps a face record it later matches the clip against. That page names Getconvi Technologies Private Limited, which runs crushedwithit and holds its BytePlus account, as the party you authorise. When you then agree and record, the clip goes through our server into a group of its own in our BytePlus account, as the reference your reels are made from. No other user of ours can reach it.

Your looks and references. Photos, videos and voice samples you add as your looks are sent to our video partner, checked against your double, and kept there until you delete them or your double. Photos and videos are face-checked; voice samples must be your own voice. Our server keeps your look photos for your private gallery and look previews until you delete the look or your double. Temporary upload copies are removed after checking.

Media. Pictures, videos and sounds you add to Media are kept on our server until you delete them, and sent to our video partner only when a reel uses them. A picture from Media can also be sent to BytePlus for a paid look preview that uses it. Today only pictures from Media are sent: sounds are not used in reels yet, and videos from Media are not sent while that option is off, as it is now. Each upload is also checked for Content Credentials by our own validator on Cloudflare, and a thumbnail of each picture or video is kept with it. With each file we keep what you confirmed about your right to use it, when, and under which version of the Media terms. Your device checks each file for faces, speech and music before it is sent; nothing about that check leaves your device except its result. When you delete a file, the file and its thumbnail are removed from our server 48 hours later, and the record of what you confirmed 30 days later, so that a rights holder's claim can still be answered; Delete everything removes your files and their records at once. If we remove a file after a rights complaint, we keep a record of the complaint for three years, and Delete everything does not remove it; see the table below. If your plan with reels ends, your uploads and pack pictures are deleted 365 days later. From 30 days before, the Media page in the app shows a notice with the date and a way to save them; there is no push notification for it.

A look preview costs 3 credits per successful picture; refusals and failures are free. Its private picture is kept on our server for 24 hours. No-face image references are kept for up to 30 days or until you delete the reel. Original reel copies and available last frames can be reused for 30 days; deleting the reel removes those reference copies. Uploads that do not finish expire after 24 hours.

For each reel you ask for, our server sends BytePlus the lines of the bit, the look and setting you picked, and a reference to your clip's asset in that group. If you choose to have a reel performed from one of your show recordings, the app also sends the seconds you trimmed to, and nothing else from that show. It asks you on that reel first, every time.

• Training. BytePlus's data-processing terms for this service say it does not use what it is sent to train its models without the customer's authorisation. We have not given it.
• Retention and deletion. Your clip and face record stay in your group in our BytePlus account until you delete your double or delete everything. Either action requests deletion of that group at BytePlus; if BytePlus refuses the deletion, our server retries it and tells us. Each finished reel's file is kept by BytePlus for up to 30 days after it is made (it is the reference for a continuation of that reel), and after that only on your device and, if you chose Private Mic, on our server for the life of the link.
• Our server keeps only our id for your clip, BytePlus's ids for the group and the asset, its length, the record of your consent and of the face check's result (pass or fail, never the face data). One still frame of your double is sent for look previews and kept until you delete your double. The full prompt we send for each part of a long reel, your script lines included, is kept with the reel, visible only to you, and deleted with the reel or after 90 days. For a single reel, the lines are cleared when it finishes rendering.
• Refused clips. If BytePlus's face check does not match the clip to the face record, or the clip is refused for another reason, the clip is deleted from BytePlus and from our server, and the app asks you to film again.

Story pictures: Seedream, through BytePlus

When the Story studio is switched on for you, you can draw pictures of a reel's shots and of the people, places and things in it. Each picture is drawn by Seedream, BytePlus's image model, in our BytePlus account. Our server sends Seedream only words it writes from the fields you filled (who, where, camera, light, mood, style) and, when you redraw one, a picture it drew for you before. A picture you uploaded of a face is never sent. A person you make up is described as an invented person, never by name.

Your double in a picture. When you put yourself (@Me) in a picture, our server also sends Seedream the one still picture of your double's face that is already kept for look previews. It is sent only to Seedream and only for your own pictures, never for a teammate's. A picture made from it is never sent to a video model as a picture.

• Training. The same BytePlus terms as for your double: what we send is not used to train its models without our authorisation, which we have not given.
• What we keep. Each picture is kept on our server for 24 hours. A picture you lock (a frame, or a person, place or thing in your cast) is kept until you delete it or delete everything; an unlocked draft goes 24 hours after its last change. A locked picture may be sent to our video partner as a reference when a reel uses it. The words of a locked header and of a shot's timing are yours and are kept with the reel.
• Label. Every picture is marked as AI-made. When you share one from the app, it carries Content Credentials that say an image model made it.

Higgsfield: doubles built before 25 September 2026

Before the face check, and today on a device where the app does not offer it, the double is built the older way: the app shows you every frame and checks you are live on the device (you turn your head on cue and read four digits aloud), asks for your consent, and sends the clip through our server to Higgsfield (higgsfield.ai), the service that renders those reels.

For each reel you ask for, our server sends Higgsfield the lines of the bit, the look and setting you picked, and a reference to your clip. If you choose to have a reel performed from one of your show recordings, the app also sends the seconds you trimmed to, and nothing else from that show. It asks you on that reel first, every time.

• Training. Higgsfield's terms let it use what it is sent to train and improve its AI models. Once something is in a trained model it cannot be taken back out, by Higgsfield, by us or by you. Higgsfield says it does not keep the measurements of your face.
• Retention. Higgsfield keeps its copy of your clip and of each finished reel for as long as its own policy says. It offers no way for us to delete them. Deleting your double in the app removes your copies and our server's record, but not Higgsfield's.
• Our server keeps only our id for your clip, Higgsfield's id for it, its length, and the record of your consent and liveness checks. One still frame of your double is sent for look previews and kept until you delete your double. The full prompt we send for each part of a long reel, your script lines included, is kept with the reel, visible only to you, and deleted with the reel or after 90 days. For a single reel, the lines are cleared when it finishes rendering.
• Finished reels are not stored on our server. When your device downloads one, the server fetches it from Higgsfield and passes it through.

The AI label and Content Credentials. Generated exports embed a signed reel record. The app also prepares C2PA Content Credentials identifying AI generation. If you turn the visible AI label off, the export must pass its embedded Content Credentials check; if embedding fails, the visible label is kept. Takes you film of yourself are real footage and carry no AI label. The Trust Center explains provenance and its limits, including re-encoded sharing copies.

Google: reels made with Gemini

On the web you can pick Gemini (Google's Gemini Omni, through the Gemini API) as the model for a reel. Our server sends Google the words of each part, a description of the scene, and any pictures you added to the reel. The pictures may show people. Your double's video, your voice, your looks, your reels and your recordings are never sent.

The one exception: a template or series reel with your double. When this option is switched on and you pick Gemini for a template reel or a series episode performed by your double, our server also sends one still picture of your double's face, the frame already kept for look previews, so the person in the video keeps your face. The person is described to Google as a fictional character, by profession (or as a presenter) and any words you write about how you look, and never by name. Your double's video and your voice are never sent; Gemini makes its own voice.

An invented presenter. When this option is switched on and you keep a presenter on a Gemini reel, our server first has a picture of a person who does not exist drawn for the reel (by BytePlus Seedream, from your words about the presenter, labelled as AI-made). It sends Google that picture with every part, so the same invented presenter speaks to camera throughout, described as a fictional character and never named. It is never a real person and never you: no picture, video or voice of yours or of your double goes into it. Choose No presenter and none is drawn or sent. The picture is kept with your reel uploads for 30 days, and Delete everything removes it.

• Google's own limits. Google does not take pictures of certain recognisable people, and in the European Economic Area, Switzerland and the United Kingdom it does not take pictures of minors (Gemini Omni documentation). You must be 18 or over to use it.
• Training. Google's Gemini API terms for paid use, which is the only kind we use: "Google doesn't use your prompts or responses to improve our products."
• Retention. Google keeps prompts, inputs and outputs for 55 days to detect abuse, and only authorised Google staff may review them. We delete each reel's stored request at Google after 7 days, and a picture sent as a file as soon as the video is made. Delete everything asks Google to delete what it still holds. We keep the finished video in our storage, as we do any reel.
• Watermark. Google marks every Gemini video with SynthID, an invisible watermark.

Private Mic: public links to a reel

Private Mic lets you share one of your double's reels with a few people and see where they laughed. When you tap Make the link, the app uploads the labelled reel file to our server. You get a public link on api.crushedwithit.com.

• Who can see it. Anyone who has the link can watch the reel. They see the reel, including its AI label, and nothing else: not your name, your other material or who else has the link. Search engines are told not to index these pages.
• What viewers send. Their laugh taps, whether they watched to the end, and one answer: Laughed, Smiled or Nothing. The page sets no cookies, stores nothing in the browser and loads no analytics. It keeps a random session number in memory until the tab closes. We do not record who a viewer is. Reactions from about the first 100 viewers are kept.
• How long. The link, the file and the reactions are deleted 7 days after you make the link. You can take the link down earlier from any of your devices, and it stops working within a minute.
• Reporting a video. Every Private Mic page has a Report this video link. Use it, or email sachin@getconvi.com with the link, if a video shows you without your consent or is abusive or unlawful. A report holds the reason you pick and any words you add. It also holds a one-way hash of your network address and the link, which lets one person file only one report per video; the address itself is not kept. Reports are kept for 90 days, even after the link has gone, so we can act on them. We can take any link down.

The web app at app.crushedwithit.com

The web app makes and posts reels from a browser. Unlike the apps, it has an account. To sign in we keep your email address, or, if you use Sign in with Apple, the account identifier Apple gives us and the address Apple shares (which can be Apple's private relay address). A sign-in code is emailed to you through Bird, our email provider; we keep only a scrambled form of the code, for 10 minutes. When you ask for a code, Cloudflare Turnstile checks that a person is using the browser. Once you are signed in, the browser keeps one cookie, on api.crushedwithit.com, that holds your session; it lasts 30 days or until you sign out. We keep a scrambled form of it, and which kind of browser made it, so we can end it.

The web app counts visits with Cloudflare Web Analytics: pages viewed, load times, the referring site and the browser's country. It sets no cookies, does not track you across sites, and does not identify you. Apart from OpenAI's advertising pixel, below, the web app contains no other analytics, advertising or crash-reporting code. Reels you make on the web use the same services as the apps, described above. Delete everything also deletes your web account, its sessions and any link to your app account.

OpenAI's advertising pixel. This website and the web app load OpenAI's Measurement Pixel to measure whether our ads in ChatGPT lead to visits and sign-ups. As OpenAI describes it, the pixel reports the pages viewed with the page's address, keeps the ad click's reference in a cookie (__oppref, 30 days) and a random browser reference in another (__obref, one year), and may pick up contact details shown on a page, which it hashes in your browser first: "Raw customer information is not sent to OpenAI." When you send the early-access form or a Studio enquiry, or create a web account, our server also tells OpenAI that a lead was created, with those two references and nothing you typed, and only if the pixel was on for you. In the EU, EEA, UK and Switzerland the pixel loads only if you accept; you can change your choice at any time from Cookie settings. The iPhone, iPad, Mac and Watch apps do not use it.

Meta's advertising pixel. This website and the web app load the Meta Pixel, run by Meta Platforms, to measure whether our ads on Facebook and Instagram lead to visits, sign-ups and purchases. It reports the pages viewed and these actions: on the website, a form sent (a lead), an email link, a link to sign in or to the App Store, and a video played; in the web app, a new account, a masterclass pass starting, a plan bought and a credit pack bought, with the plan or pack and its price. It never receives anything you write or make. Outside the masterclass pages it never receives your name, email or phone; on them, your email and phone are hashed in your browser before Meta gets them. It keeps a browser reference in a cookie (_fbp, 90 days) and, when you arrive from a Meta ad, the click's reference (_fbc, 90 days). It loads under the same choice as OpenAI's pixel: in the EU, EEA, UK and Switzerland only if you accept, and Decline stops it. It is never loaded for a student who said they are under 18. The iPhone, iPad, Mac and Watch apps do not use it.

Snitcher. This website (not the web app) loads Snitcher, run by Snitcher B.V. in the Netherlands, to learn which companies visit. As Snitcher describes it, it reads your network's IP address to name the company it belongs to (it works at the company level, not the person), and records the pages viewed, the referring site and your browser and device. It keeps a random visitor reference in your browser's session storage, and in cookies on crushedwithit.com once it may keep it longer. Snitcher states that it processes and stores this data in the EU (Frankfurt, Germany, on Amazon Web Services), encrypted in transit and at rest. It loads under the same choice as the advertising pixel: in the EU, EEA, UK and Switzerland only if you accept, and Decline clears what it stored. The apps do not use it.

Cloudflare: hosting our server

Our server runs on Cloudflare Workers. The records it keeps are stored with Cloudflare; they are listed in the table below. They include hosted Show Reports and Private Mic reels. Cloudflare processes requests on our behalf, and its edge logs show routes, status codes and timings.

Hasyam API private preview (business integrations)

Hasyam pronunciation inside the app runs on your device. The optional developer API is different: callers send a script, language and any supplied pronunciation or preservation choices to a separate Cloudflare Worker for request-time processing. It returns prepared text and review information. Its code does not save request bodies or replies, train on them, or send them to an external AI provider. Responses carry a no-store instruction. Callers are responsible for how their own application handles the returned text and any later video generation.

The API stores only API-key digests and opaque key identifiers in its access registry until access is revoked. The request limiter uses the key identifier for a brief per-minute counter. Application request logging is disabled; Cloudflare may still process operational and security metadata. Pilot enquiries sent by email remain in our support inbox until removed on request. Email sachin@getconvi.com to revoke access or remove an enquiry. See the API documentation.

Apple: purchases, iCloud, notifications and app checks

• Purchases go through the App Store. We never see your payment details, your name or your Apple Account. The app sends our server Apple's signed proof of your subscription or reload. We keep a salted hash of the transaction number to track your plan and balance.
• iCloud sync uses your own private CloudKit database, as described above.
• Notifications. If you allow them, the app sends our server a push token. We use it to tell you when a reel or your double is ready, or when a Private Mic link gets reactions. Apple delivers the notification. It has a title and one sentence, never your material. Reminders such as a gig tomorrow are made on your device. Each kind has its own switch in Settings.
• App Attest. Each install proves it is a genuine copy of the app. Apple signs the proof and our server keeps an opaque key. No name or device identifier is involved.
• Your devices without a subscription. If you are signed in to iCloud, the app reads the anonymous identifier iCloud gives this app for your account, scrambles it on your device with a one-way hash, and sends only that hash with each request. Our server uses it so your iPhone, iPad and Mac share one free allowance and one history. It is never your Apple Account, your name or your email, and it goes when you delete everything.

Hosted Show Reports (only if you make a link)

You can share a Show Report as an image or PDF straight from your device, and that never reaches us. If you tap Make a link, that one PDF is uploaded to our server and anyone with the link can open it. It contains your score, counts and stage name. It has no audio, transcript or set. The link stops working after 30 days, or sooner if you delete it.

Activity counts (off unless you turn them on)

One switch in Settings lets the app send ten numbers once a day, such as how many notes, sets and shows you have. It never sends a word of them. It is off until you turn it on.

Posting to LinkedIn or Instagram

Updated 10 October 2026, when posting became available in the app. When you post or schedule a reel or a picture, the marked copy and its caption are kept on our server until it is posted, and your connection to LinkedIn or Instagram is kept until you remove it. We keep the reel or picture for seven days after it posts and the caption for 90 days, then delete them. The link to the post stays in your calendar. You sign in on LinkedIn's or Instagram's own page; we never see your password.

When you connect an account we keep its ID, its name or handle and its profile picture, so the app can show which account is connected and post to it, and the sign-in token, sealed on our server. From Instagram we use only your professional account's basic profile and the right to publish what you post; from LinkedIn, your basic profile and the right to share on your behalf. We never read your messages, comments, followers or insights. To show you which account is connected, the app loads its profile picture directly from LinkedIn's or Instagram's own image servers; like any image from the web, those servers see your device's network address. No sign-in token or cookie is sent with that request. Nothing is posted unless you press Post or set a schedule. Whatever the platform, every reel you post carries its visible AI label, its Content Credentials, or both: the label can be off only when the Content Credentials check passes, as described under The AI label and Content Credentials above. Posts to Instagram are also sent with Instagram's own AI label switched on (is_ai_generated). Posts to LinkedIn are sent without a LinkedIn AI label.

Removing the connection and deleting this data. In the app, open You › Channels, choose the account and remove it: we delete its sign-in token and account details at once. Delete everything in the app removes every connection with everything else. Instagram's sign-in cannot be revoked from our side, so also remove crushedwithit in Instagram under Settings › Apps and websites; on LinkedIn, under Settings › Data privacy › Permitted services. You can also email sachin@getconvi.com and we will delete it for you.

How long each thing is kept

The data and retention page lists each number on our server next to the line of code that sets it.

Deleting your data

• One thing at a time. Delete any note, recording, reel or report link in the app. Delete your double from You › Your double. Take down a Private Mic link from its page in the app.
• Delete everything is in the You tab. It asks you to save a copy first. Then it deletes every record and file on this device and the copy in your iCloud. It deletes your watch's copy the next time the watch connects. It takes down every hosted Show Report and Private Mic link. It also deletes everything our server holds under your subscription: your double's record, your Media uploads and their rights records, reel jobs, counters, ledger, reload balance, activity counts and push tokens. It works store by store and tells you anything it could not reach.
• What Delete everything does not do:
  • It does not cancel your subscription. Apple handles that in Settings › your name › Subscriptions.
  • It does not keep unspent reload credit. That credit is lost, and the screen shows the amount first.
  • It cannot delete Higgsfield's copies of a clip or reels sent there before 25 September 2026, or undo training that has already happened.
  • It does not delete the record of a file we removed from your Media after a rights complaint. That record is kept for three years. It holds a one-way hash of your account, never the file or its name.
  • It cannot recall exports, or reports and reels that someone else already saved.
• Deleting the app removes its data from that device. To remove the iCloud copy without the app, go to Settings › your name › iCloud › Manage Storage.

What we do not do

• No advertising inside the apps, and no tracking across apps. The apps contain no third-party analytics, advertising or crash-reporting code. The website and the web app count visits with Cloudflare Web Analytics, and measure our ads with OpenAI's advertising pixel; and Meta's advertising pixel; the website also loads Snitcher.
• No email or phone login in the apps. You don’t need to provide an email address or phone number to use them. You can choose a stage name. The web app is the exception: it signs in with your email address or with Apple.
• We do not sell or rent your data, and we do not train any model on your material. The companies above receive only what their feature needs, when you use it.

The website's only cookies are your ad-pixel choice (cwi_ad_pixel, 12 months), the two set by OpenAI's advertising pixel and those set by Snitcher once they load. Under the same ad-pixel choice the website and the web app also load Meta's advertising pixel; the masterclass pages also set first-party cookies for ad attribution. It counts page views without cookies, and the early-access form is stored on our server for 180 days and emailed to our inbox through our email provider, Bird. Only if our server cannot be reached does the form go to FormSubmit, a form-forwarding service, instead. If you like or comment on a homepage reel, we store your reaction or comment and a hash of a random browser token in Cloudflare for up to one year. Comments are held for approval before your display name and message become public. You can remove your own comments from the same browser. The data page has the details.

Age

crushedwithit is for adults. The app asks you to confirm you are 18 or over before anything else. It does not ask for or store your date of birth.

Studio service enquiries and production

The Studio enquiry form asks for your name, email, profession, preferred plan, language and any goals you choose to share. It sends these details only when you submit. We use them to respond to your enquiry and discuss the service. The enquiry is stored on our Cloudflare server for 180 days and forwarded to our inbox through Bird. Studio does not use the early-access form's FormSubmit fallback; you can contact us by email if submission fails. Forwarded emails remain in our inbox until removed on request.

Studio is a human-assisted production service. If you engage us, the assigned production team needs access to the scripts, approved reference material and videos needed for your brief, and online generation services process the inputs required to make your video. The app's on-device and private-iCloud descriptions do not mean Studio work is visible only to you. We agree the production tools, access, retention and deletion arrangements before onboarding. Do not include patient records, confidential client information or identity documents in an enquiry. Email sachin@getconvi.com to request deletion of your enquiry.

AI Video Masterclass bookings

The data fiduciary for masterclass bookings is Getconvi Technologies Private Limited. The booking form asks for your name, email, WhatsApp number and the class you choose. We use them to book your seat, send class reminders and the Meet link, take your payment through Razorpay and issue your invoice. With each booking we keep a record of your consent: the notice you saw, each box you ticked, the time, your IP address, browser and the page. We also keep how you reached the page (campaign tags and ad click ids) and, if the ad-pixel choice allows it, the Meta Pixel's browser and click ids and a random visitor id.

Your WhatsApp number and email are used for updates about future classes only if you tick that box. Every email has a link to stop updates or delete your data, and you can ask for that link on the masterclass page. Stopping updates takes effect at once. Deletion removes a booking you did not pay for within a day. If you paid, we keep what the law needs for your invoice and payment, and delete the rest. Bookings are deleted 12 months after the class unless you become a customer. If the ad pixel is allowed, we tell Meta about your payment through its Conversions API, with your email and phone hashed first, so Meta can measure our ads. Your booking is also copied to our sales records, and Bird sends the emails.

A paid seat comes with extras. Ultra on app.crushedwithit.com for 24 hours is matched to the web account that signs in with your booking's email; we keep a record of the pass (its dates and credits) on our server. Your Studio code is tied to your booking so we can honour it. The WhatsApp community is run in WhatsApp: joining it is your choice, and other members may see your name and number under WhatsApp's own rules.

The masterclass page's Explore crushedwithit form asks for your name and email. We use them to set up your crushedwithit account: the address fills the sign-in box on app.crushedwithit.com through a one-use code that lasts ten minutes, never in a link. The lead is kept 180 days, like the site's other forms. Product news is sent only if you tick that box.

Students under 18

The masterclass takes students under 18 only with the verifiable consent of a parent or lawful guardian (DPDP Act 2023, section 9). The student gives their own name and a parent's or guardian's name, relationship, email and WhatsApp number; nothing else, and no booking or payment happens yet. We email the parent or guardian a consent link. To consent they confirm the email is theirs with a code we send to it, declare that they are the student's parent or lawful guardian and are 18 or older, and pay for the seat themselves. We record who consented, how they were verified, the notice they read and the time.

For students under 18 we do not track, monitor or advertise: no ad pixel or ad cookies, no Meta or OpenAI measurement, no marketing messages, no app account and no free app plan. Class emails, including the Meet link, go to the parent or guardian. If nobody consents within 7 days, the request is deleted. Thirty days after the class we delete the student's name and keep only what the law needs for the parent's invoice, with the record of consent. The parent or guardian can withdraw consent at any time from the same link, as easily as they gave it.

Under India's Digital Personal Data Protection Act 2023 you can ask to access, correct, update or erase your data, withdraw consent as easily as you gave it, and nominate someone to act for you. Grievances go to sachin@getconvi.com. If you're not satisfied, you can complain to the Data Protection Board of India.

Your rights

You can see, export and delete your material in the app at any time. To find out what our server holds about you, to correct or delete it, or to make a complaint, email us. For app data, we may ask for your Apple purchase receipt or a link to find the right records, since app records hold no name or email. For website comments, tell us the reel, display name and comment you want us to find. Depending on where you live, you may also have the right to complain to your data protection authority. Cloudflare, Anthropic, BytePlus (ByteDance), Higgsfield, Bird, FormSubmit and Apple may process your data outside your country, under their own safeguards. Our server calls BytePlus in its ap-southeast-1 region.

Changes

If this page changes in a way that matters, the date at the top changes, and the app's What's New will say so.

Contact

Getconvi Technologies Private Limited, India · Sachin Uppal, Founder and Director · sachin@getconvi.com