Privacy Policy
H2A Digital ("we," "us," or "our") operates the Crystal mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
📊 Information We Collect
Personal Information
- ✓Rock and Crystal Photos: Uploaded for identification and removed after processing
- ✓Identification Data: Detection results, confidence, and selected matches
Automatically Collected
- ✓Device Information: Device type, OS, identifiers
- ✓Analytics: PostHog data to improve services
- ✓Usage Data: Features accessed and actions taken
🧩 Third-Party Data Storage (Service Providers)
Do they store uploaded data? Yes. Supabase temporarily stores: uploaded rock and crystal photos in Supabase Storage under our account.
Why do they store it? We upload rock and crystal photos to create a short-lived signed URL that our backend uses to securely retrieve the image during processing. This avoids sending large image files inside the identification request payload and improves reliability (e.g., if the app is backgrounded or a retry is needed).
Rock and crystal photos: We delete uploaded rock and crystal photos after the identification attempt completes. If deletion fails due to network or unexpected errors, we run automated cleanup to remove any remaining photo uploads within 6 hours.
Why this length? The 6-hour window exist only as short reliability fallbacks (e.g., client disconnects, network errors, or retries) while minimizing retention of uploaded photos.
Do they store uploaded photos? No. We do not send uploaded photos to PostHog.
What do they store instead? PostHog receives usage/analytics events (e.g., screen views, button taps, feature usage) to help us improve the App.
🎯 How We Use Your Information
Provide, maintain, and improve our services
Personalize your experience
Send updates and marketing (with consent)
Provide customer support
Analyze usage patterns
🔒 Data Storage and Security
- 🔐We apply reasonable security safeguards to protect stored data
- ☁️We use Supabase for temporary storage and backend services
- 🛡️Uploads are removed after processing to minimize retention
⏳ Data Retention
Rock and crystal photos: Photo uploads are intended to be removed after processing to minimize retention. If a removal fails due to network or unexpected errors, we run automated cleanup to remove remaining photo uploads within 6 hours.
On-device storage: The App may save app data locally on your device. You can remove local data by uninstalling the App.
🤝 Sharing Your Information
We do not sell your personal information.
- →
Service Providers: Third-party services that help us operate the App (e.g., Supabase, PostHog)
- →
Legal Requirements: When required by law or to protect our rights
✨ Your Rights
Access
Correct
Delete
Opt-out
Export
📬 Email Communications
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or contacting us at support@h2adigital.com.
👶 Children's Privacy
Our App is not intended for children under 13. We do not knowingly collect personal information from children under 13.
🔄 Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date."