Effective 24 October 2026. CrateRWD is operated by Brenton Haddin, an Australian sole trader. Contact admin@craterwd.com about privacy, access, corrections or deletion.
Account and workspace information
We process your sign-in identity and email, workspace membership and the information you choose to save. You can optionally save a display name, a short bio and a profile photo; these are private to your signed-in account and do not change your sign-in identity. Profile photos are resized and re-encoded before upload. Replaced photos can remain in private recovery storage; only the current photo is available through your profile. Business records can include assets, barcodes, customers and delivery locations, hires, returns, movements, versioned kit templates, dated customer reservations, linked job returns, recorded planning actions, packing counts and code-match counts, condition observations and linked job photos, issue descriptions and assignment/resolution history, documents, signatures and support conversations. Home records can include rooms and storage, optional floor assignments and illustrative room positions, items, photos, receipts, budgets, expenses, lending and reminders. Home storage QR labels encode opaque Home and storage identifiers; scanning requires access to that Home. Printing or sharing a label creates a copy outside the app. Search terms are matched locally against loaded Home records; we have not added a search-history store. Do not upload passwords, payment-card details or unnecessary sensitive documents.
Local captures and cloud saves
Native capture drafts and their photos stay in the app’s private storage on your device until you explicitly save them to your account. Normal device backups may include them. Native photos are resized and re-encoded. Camera access is used for a requested photo or barcode scan; the system photo picker shares only the images you select. Captures are not automatically sent to AI. A cloud save shows its destination and what information will be uploaded before confirmation.
Service providers
Cloudflare hosts CrateRWD, its database and private file storage. WorkOS handles sign-in, with the identity provider you select. These providers may process data outside Australia. Capture drafts and pending Business action references are stored privately on your phone and may be included in device backups. Pending actions are separated by verified account identity and retried only after you choose to retry; they are not automatic offline stock synchronization. Native account credentials are stored in your device Keychain; server-side provider sessions are encrypted. We use account identity to restrict workspace access. Owners control business membership and document visibility. Members of a shared business can see records their role permits; Home is separate.
Optional AI
House-plan reading sends the selected PDF page or image, resized and re-encoded, to OpenAI only after explicit confirmation. The full PDF is not sent. Suggested room names/outlines, request status and usage are retained for review, retries and spending controls. Original uploaded plans, reviewed geometry and interrupted import drafts are kept privately on the device, separated by account and Home; normal device backups may include them. Full house geometry and original plan files do not yet sync across devices. The automatic layout is an estimate and requires review. Photo identification in Home and native captures sends only the photo or photos you select for that request to OpenAI after an explicit sharing confirmation. The native tool resizes and re-encodes the selected image before transmission; it does not upload that image into inventory automatically. Suggested text, request status and usage are retained with your account for retries and budget control. Home and Business help chat send your messages and recent conversation context to OpenAI only when you choose AI help. Your inventory, profile, photos and document library are not automatically attached to chat. Do not include secrets or unnecessary personal information. AI suggestions can be incorrect; check them before acting. Requests disable API response storage, which does not promise zero provider retention. You can enter items manually and request human help. See OpenAI’s privacy information.
The Business web operations screen keeps an interrupted reviewed save in this browser tab’s session storage, separated by signed-in account and business, until you resolve or discard the retry or close the tab. This can include the record details and notes being saved. A prepared job photo stays in memory while its upload form is open; it is not added to that saved retry record.
Support, security and retention
We use records to provide your requested workspace, answer support requests, maintain security and preserve the movement/change history you create. Home and Business support conversations requested for human help can be seen by CrateRWD support. A request records the need for support; it does not mean a person is online or that an external notification has been sent. We do not sell your information, run advertising trackers or request access to your contacts or precise location. Files are private to the permitted account or workspace; sharing/export actions you initiate create copies outside CrateRWD.
Access, export and deletion
You can edit supported records and export records from the app’s Account & privacy screen or the website. JSON exports contain records and file metadata; download file contents separately. In the native app, open More → Account & privacy → Delete account to initiate permanent deletion without calling or emailing support. We process requests within 30 days and confirm completion by email. Shared business ownership may need transfer or closure; records legally required to be retained are handled separately and explained to you. Recovery backups may retain older copies until their normal expiry. A separate private deletion registry keeps an opaque sign-in identifier, hashed email reference, erased workspace identifiers and deletion dates to block restoration of closed accounts. Cleanup can proceed in retried stages; a request is not marked complete while records, files or the sign-in identity still need removal. Shared-business ownership, subscriptions and applicable retention requirements are reviewed before erasure. Delete local captures separately or remove the app. Account deletion does not cancel any App Store subscription.
Questions and changes
Contact admin@craterwd.com if you believe information is wrong, access was inappropriate or a deletion has not been completed. We will investigate and reply. Material changes to how the service uses information will be reflected here and communicated as appropriate. This development release has no live billing.