Privacy policy
Effective 2 October 2026. Applies to the Crossly Android app and crosslydating.com.
Who we are
Crossly is operated by its owner ("we"). Contact for privacy questions and requests: [email protected].
What we collect and why
- Account: e-mail address and a password (stored only as a salted argon2id hash). Needed to sign you in.
- Profile: first name, date of birth (to verify you are 18 or older and to show your age), photos, a short bio, job, area, what you are looking for, interests and prompt answers. Shown to people you have crossed paths with, liked or matched with — never to the public.
- Location, only if you turn sharing on: precise position (latitude, longitude, accuracy) while the app is open on your screen, about once every 15 minutes or when you move. We use it for one purpose: to notice when you and another Crossly user were within about 250 metres of each other in the same quarter hour. Other people only ever see an approximate area name and a time — never your position.
- Activity: likes, passes, matches, messages, blocks and reports, so the app can work and so we can act on safety reports.
- Technical: standard server logs (request IDs, timestamps, status codes, truncated user-agent) for security and reliability. Passwords, tokens, coordinates, e-mail addresses and message text are redacted from logs.
What we do not do
- We do not sell or share your personal data with third parties for their own purposes.
- We do not show anyone your exact location, your route or your home.
- We do not collect location in the background. Sharing works only while Crossly is open.
- We do not use advertising SDKs or third-party analytics in the app.
Retention
- Raw location data is deleted automatically after 14 days, and immediately when you turn location sharing off or sign out.
- Approximate crossing history (area name and time) is kept while both accounts exist.
- Messages are kept while the match exists. Unmatching or blocking hides the conversation from both sides; blocked conversations may be retained for a limited time so a report can be reviewed.
- Reports and blocks are kept as safety records, including after an account is deleted.
Photos and moderation
Every new photo is reviewed by a human before other users can see it. Photos that violate our rules are rejected and you are told why. Photo files are stored on our server, private to the app, and are deleted when you remove them or delete your account.
Your rights
You can see and edit your profile in the app at any time. You can turn location sharing off at any time (Me → Location sharing). You can delete your account from inside the app; this removes your profile, photos, location data, likes, matches and messages, and anonymises your account record. Depending on where you live you may also have rights of access, correction, portability and objection — write to the address above and we will respond within 30 days.
Where data is processed
Our API runs on a server in the EU and our database is hosted on Amazon Web Services. Data is encrypted in transit (TLS). Access is limited to the operator.
Age
Crossly is for adults only (18+). We verify age from the date of birth you enter and remove accounts that appear to belong to minors.
Changes
We will post any changes to this policy on this page and update the effective date. Material changes will be announced in the app.