Privacy Policy

Last updated: 21 October 2026

This Privacy Policy explains how Crush ("Crush", "we", "us"), operated by Prajapati Enterprises Ltd (a company registered in England & Wales), collects, uses and protects your information when you use the Crush mobile app and website at getcrush.co.uk (together, the "Service"). We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

The short version: Crush is a gift-discovery app. We collect your email and the items you save or like, so your account works across devices. We do not sell your data, we do not share what you save with retailers, and purchases happen on the retailer's own website — we never see your card details.

1. Information we collect

Information you give us

Account details — your email address, and (if you choose) a display name, when you create an account by email or by signing in with Google.
Saved and liked items — the products you bookmark or like within the app, so we can show them back to you.
Preferences — settings such as your default recipient or budget, to tailor what you see.
Messages to our AI assistant — the text or voice requests you send to the in-app Crush assistant so it can suggest gifts. Voice is converted to text on your device.

Information collected automatically

Usage data — basic, aggregated information about how the app is used (for example which products are tapped) to improve our recommendations. Where this is linked to you it is tied only to your account.
Technical data — standard information such as app version and device type, used for diagnostics and stability.

We do not collect your precise location, your contacts, your photos, or any payment or card details.

2. How we use your information

To create and manage your account and keep it in sync across devices.
To save the items you bookmark and show you relevant trending gifts.
To power the Crush AI assistant's gift suggestions.
To operate, maintain, secure and improve the Service.
To send you essential account emails (such as email verification). We do not send marketing emails unless you opt in.

Our lawful bases under UK GDPR are: performance of a contract (providing the app you asked for), legitimate interests (keeping the Service secure and improving it), and consent where required.

3. Affiliate links

Crush shows products from third-party retailers. When you tap "Buy", you are taken to that retailer's own website to complete your purchase, and we may earn a small affiliate commission. This is at no extra cost to you and does not change the price you pay. Your purchase, payment and delivery are handled entirely by the retailer under their own terms and privacy policy. We do not share your saved or liked items, or your identity, with retailers. When you leave Crush to visit a retailer, that retailer's own privacy practices apply.

4. Who we share data with

We do not sell your personal data. We share limited data only with service providers who help us run Crush, under contracts that require them to protect it:

Supabase — secure database and authentication (hosting your account and saved items).
Google — if you choose "Sign in with Google", to authenticate you.
Resend — to send essential account emails such as verification codes.
Anthropic — to power the AI assistant. Messages you send to the assistant are processed to generate gift suggestions.

We may also disclose data if required by law, or to protect the rights, safety or security of Crush, our users or the public.

5. Data security and storage

Your data is encrypted in transit (HTTPS/TLS) and stored on secure, access-controlled infrastructure within the UK/EEA where possible. We keep your personal data only for as long as your account is active or as needed to provide the Service and meet legal obligations.

6. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. In particular:

Delete your account and data at any time from within the app (Profile → Delete my account), or by following the steps at getcrush.co.uk/delete-account.
You can exercise any of your rights by emailing us (see below).

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

7. Children

Crush is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Changes to this policy

We may update this policy from time to time. We'll post the new version here and update the "Last updated" date above. Significant changes will be notified in the app where appropriate.

9. Contact us

Prajapati Enterprises Ltd
Email: hello@getcrush.co.uk