Privacy Notice

1. Operator and scope

Ali Alaraibi, operator of the CrewLogix brand in the Kingdom of Bahrain, is responsible for this privacy notice and acts as the data controller where applicable. CrewLogix is used only as the platform brand name.

This notice covers the CrewLogix public website, launch waitlist, Access consumer experience, Field technician experience, and business workflows that are actually made available. Contact privacy@crewlogix.app about personal data or this notice.

2. Launch waitlist data

When you join the launch waitlist, we collect the contact detail you submit, your country or region, preferred contact channel, language choice, consent status and time, and limited technical or security data needed to protect the form.

We use waitlist data only to operate the list, prevent abuse, and send CrewLogix launch updates through the channel you selected. You may withdraw consent at any time by emailing privacy@crewlogix.app.

3. Service and account data

Depending on the enabled service and your role, we may process:

• account, profile, identity, role, contact, country, language, and authentication information;
• service requests, addresses, quotations, assignments, schedules, status updates, work evidence, messages, attachments, ratings, support records, and dispute information;
• business, vendor, technician, workforce, compliance, invoice, and transaction records supplied or created through an enabled workflow;
• device, session, diagnostic, security, consent, audit, and usage information needed to operate and protect the service; and
• location, route, arrival, or worksite information only when an enabled feature, your input, and applicable device permissions support it.

4. Purposes and legal bases

We process relevant data to:

• provide accounts and enabled consumer, business, quotation, dispatch, field-work, support, and safety workflows;
• authenticate users, prevent abuse, investigate incidents, maintain audit records, and protect people, services, and rights;
• communicate about requested services or launch updates, improve reliability, comply with law, and establish or defend legal claims; and
• perform a contract or steps you request before a contract, comply with legal obligations, pursue legitimate interests that do not override your rights, protect vital interests, or act on consent, as applicable.

The available legal basis depends on the data, feature, relationship, and applicable law. Where processing depends on consent, you may withdraw it without affecting earlier lawful processing.

5. Location data

CrewLogix may process an address, coordinates, device location, route, arrival, or worksite evidence when you provide it or enable a feature that needs it. Uses may include showing a worksite, supporting routing or dispatch, recording arrival or work progress, and protecting service participants.

Location availability and accuracy depend on the enabled feature, device settings, permissions, network, and country. You can control device permissions, but disabling them may prevent a location-dependent feature from working. Do not rely on CrewLogix for emergency location or response.

6. When data is shared

We share personal data only as reasonably needed with:

• consumers, businesses, vendors, technicians, authorised staff, or other service participants involved in a request, quotation, assignment, or dispute;
• service providers that host, secure, analyse, communicate, store, or support the platform, including Firebase, Cloudflare, and D1 where the implemented workflow uses them;
• professional advisers, insurers, auditors, or transaction counterparties where justified and subject to appropriate duties; and
• courts, regulators, law-enforcement bodies, or other recipients when required by law or reasonably necessary to protect rights, safety, or the integrity of the service.

A service participant that independently decides how to use data may have its own legal obligations and privacy notice.

7. International processing

CrewLogix and its service providers may process or store data outside your country, including through global cloud infrastructure. The destination may have different data-protection laws.

Where applicable law requires a transfer safeguard, approval, assessment, or consent, we take the steps reasonably required for the relevant transfer. Contact privacy@crewlogix.app for information about safeguards applicable to your data.

8. Retention and deletion

Retention policy version 2026-08-25 defines how each implemented data category is deleted, anonymized, retained for a justified period, or blocked from deletion while active work remains:

• private profiles, preferences, saved addresses, and saved documents are deleted with the account’s deletable private data unless an active service or justified retention obligation applies;
• health-consent records and saved health-insurance information are deleted when no active service requires them;
• account deletion is blocked while physical-service work is active, while closed work may remain for an applicable service, financial, or dispute period;
• conversation and moderation records may have account identifiers anonymized while necessary safety evidence is retained;
• commission, payment, quotation, and invoice records are retained for the applicable financial, fraud-prevention, reconciliation, service, or dispute period;
• security and audit records are retained for the applicable investigation, fraud-prevention, and audit period; and
• records under a legal hold or active dispute are retained until the hold or dispute and the justified retention period end.

When deletion completes, the account and deletable private data are removed. Shared service records may instead be retained or anonymized, and financial, dispute, security, audit, legal-hold, or other legally required records remain only for the applicable justified period. We respond within the period required by applicable law.

9. Your rights and choices

Subject to applicable law, you may ask to access, correct, update, block, erase, or receive information about your personal data; object to or restrict certain processing; withdraw consent; or raise a complaint with the competent authority.

Email privacy@crewlogix.app with enough detail to identify the request. We may verify identity and authority before acting. A right may be limited where another person’s rights, an active service, security, record integrity, legal retention, or another lawful exception applies.

10. Security, capacity, changes, and contact

We use proportionate technical and organisational safeguards, including access controls and service security measures, but no internet or storage system can be guaranteed completely secure. Tell privacy@crewlogix.app if you believe an account or personal data is at risk.

You must have legal capacity to provide the data and use the relevant service, or act through an authorised guardian or representative where the enabled workflow and applicable law permit it. CrewLogix is not designed as an emergency service.

We may update this notice when the service, law, or processing changes. The published version and date identify the current notice. Privacy questions and requests go to privacy@crewlogix.app; other legal notices go to legal@crewlogix.app.