Privacy Policy

This Privacy Policy explains how Crimson Studios ("we", "us") collects, uses and protects information when you use CoWatch. CoWatch is designed to keep as little personal information as possible: most of your activity is stored only on your device and on the devices of the people you watch with.

1. Information we store

• Account information: your display name, username, a numeric tag, your device's public key, the verification part of your recovery key, and your device's push notification address so that your friends can reach you. Retained until you delete your account. Others can find you by username only if you enable that setting.
• Google account, if you connect one: a one-way scrambled form of your Google account's identifier, so you can log back in with Google on a new device. We never receive or keep your email address, name or password from Google. Removed when you delete your account.
• Clubs: membership, roles, scheduled nights, and club chat for 30 days, encrypted with the club's key.
• Seasons, if you take part: your display name and tag, the minutes you watched together with each friend (each record identified by a code both devices share, never its title), whether your device passed Google Play Integrity checks, and how many minutes of each day you chatted, reacted or spoke, used only to keep the leaderboards fair. Minutes that fail these checks are held for review by the CoWatch team. Kept with that season's records.
• Safety reports you submit: retained for 180 days to protect the community.
• Aggregate statistics: the number of active devices, rooms opened, minutes watched and popular titles, never linked to an individual. Retained for up to 400 days. Once per app version, your device also asks Google Play Integrity whether it is running CoWatch as installed from Google Play; we keep only the number of devices for each version and result, never which device gave which result.
• Feature votes: recorded under a key that does not identify you.

2. Information processed but not stored

• Rooms: playback synchronisation (play, pause and position) and room chat are relayed by our servers and are not stored. Voice, and files you send to a friend, are transmitted directly between devices where the network allows.
• Messages to friends are delivered through our servers and Google Firebase Cloud Messaging, and are stored only on the sender's and the recipient's devices. Group messages are encrypted so that only group members can read them.

3. Diagnostics in test builds

Pre-release builds distributed through Google Play testing send the CoWatch team a diagnostic log of how the app behaves: the interface elements used (by name, never the text you enter), the screens viewed, and errors and crashes. Logs are retained for 7 days. You may turn this off at any time in Settings, Privacy and safety, "Help fix bugs". The content of your messages is never included.

4. Information stored on your device

Your friends, chats, history, moments, appearance and levels are stored on your device. Backups are encrypted files saved to a location you choose; we never hold them.

5. Service providers

• Cloudflare operates our servers.
• Google provides push notification delivery (Firebase Cloud Messaging) and payment processing (Google Play).
• Websites you open within CoWatch receive your visit as they would from any browser.

We do not sell personal information, display advertising, or track you across other apps or websites.

6. Your rights and choices

• Access: Settings, Privacy and safety, Download my data.
• Deletion: Settings, Privacy and safety, Delete my account, or as described in Account Deletion.
• Children: CoWatch is not intended for anyone under the age of 13.

7. Contact

Questions about this policy may be sent to support@crimsonstudios.app.