Legal
Privacy policy
Last updated 27 October 2026
CroAQI helps you decide when to head outside. To do that well, the app uses some information about you. This policy explains what we collect, why, who helps us run the service, and the choices you have. It applies to the CroAQI iPhone app and to croaqi.com.
The short version
- No ads, no tracking, and we never sell your data.
- You can use CroAQI Free without an account. Without an account, your location stays on your iPhone.
- If you create an account, we keep only what the app needs to work: your email, your saved places, your preferences, your Circle and, if you choose to add them, care details that tailor the advice.
- Apple handles every payment and free trial. We never see your card details; Apple tells us your membership status so we can unlock it.
- Your profile photo stays on your iPhone.
- You can export or delete your account from inside the app at any time.
Who we are
CroAQI is made by Plain Matter Pte. Ltd. (UEN 202610388C), a company registered in Singapore at 186 Toa Payoh Central, #02-438, Singapore 310186 ("we", "us"). We are responsible for your personal data under Singapore's Personal Data Protection Act 2012 (PDPA). You can reach us, including our data protection contact, at support@croaqi.com.
What we collect
We only collect information when it is needed for a feature you use. Everything below is linked to your account if you have one. None of it is used to track you across other companies' apps or websites.
| Information | What it is | Why we use it |
|---|---|---|
| Email address | What it is:The address you sign in with. You sign in either with a one-time code sent to this address or with Sign in with Apple, where Apple shares your name and an email address, which can be a private relay address that forwards to you. | Why we use it:To create and secure your account and contact you about it. |
| Name | What it is:The name you give yourself, and names you give people and managed profiles in your Circle. | Why we use it:To show the right person's advice and to label people in your Circle. |
| Location | What it is:Your precise location, only if you allow it, and the places you save. | Why we use it:To find the nearest weather and air-quality readings and to show advice for your places. |
| Care details (optional) | What it is:Information you choose to add to tailor advice, such as your activity and effort, life stage (for example pregnancy) or health conditions that make heat or haze matter more. | Why we use it:To personalise the advice for you or the family members you look after. |
| Preferences and other content | What it is:Your activities, saved places, Circle settings and app preferences. | Why we use it:To run the app and keep your settings in sync across devices. |
| Identifiers | What it is:Your CroAQI account ID, and a device identifier our sign-in provider uses to keep sessions secure. | Why we use it:To keep you signed in safely and protect your account. |
| Circle | What it is:If you use a family plan: who is in your Circle, their roles, invitations you create (you share the invitation link yourself, for example by message; we don't email anyone, and we keep only a protected, hashed form of the invitee's email address and of the link), and the places each person chooses to share. | Why we use it:To run your Circle, show each person their own advice, and count the places on your plan. |
| Purchase history | What it is:Your membership and free-trial status, and the App Store transaction details Apple shares with us, such as the plan, purchase, renewal and expiry dates, and refunds. We never see your card details. | Why we use it:To confirm your membership or trial, give your Circle access, and restore it on new devices. |
| Account activity | What it is:Security events such as sign-ins, changes to your account, exports and deletions. | Why we use it:To protect your account and investigate misuse. |
Sensitive information
Care details can include health information. Adding them is always optional; the app works without them. We use them only to tailor your advice, store them encrypted on our servers, and never use them for advertising or share them with anyone except the service providers listed below, who process them on our behalf. You can change or remove them at any time in the app.
If you manage care details for someone else in your Circle, such as a managed profile for a child, please make sure you have their agreement, or that you are their parent or guardian.
What we don't collect
- Your contacts, browsing history or search history, or photos from your library. A profile photo you choose stays on your iPhone (see below).
- Advertising identifiers. CroAQI shows no ads.
- Crash or analytics data from third-party analytics tools. We don't use any.
- Payment card details. Apple handles all payments.
Location
Location access is optional and only used while you are using the app. Without an account, your location stays on your iPhone: the app uses it to choose nearby readings and does not store it on our servers. To fetch weather for a place, the app requests readings for that area from data.gov.sg or from our weather service; these requests are answered in real time and are not stored with your identity.
If you have an account, the places you save are stored with your account so they can sync across your devices and, if you choose, be seen by your Circle.
Purchases and free trials
Memberships and free trials are bought through the App Store. Apple processes the payment under Apple's privacy policy. We never receive your card or bank details.
When you buy, the app attaches an identifier for your CroAQI account to the purchase, so we can link the membership to you. Our account service checks the signed transaction from Apple and stores your membership status.
Apple also sends our account service App Store Server Notifications when something changes: a trial starts or converts to a paid plan, a subscription renews, fails to renew, enters a grace period, is cancelled, upgraded or downgraded, expires, or is refunded. We use these only to keep your membership and your Circle's access correct. We keep a record of them for as long as we need it to run your membership and meet our legal and accounting obligations.
Trial reminder notifications
When you start a free trial, the app asks whether it may send you notifications. If you allow it, your iPhone schedules one local reminder for the day before the trial ends, with the plan and price. The reminder is created and delivered on your iPhone; we don't send push notifications and don't collect a push token. You can turn notifications off at any time in iPhone Settings → Notifications → CroAQI.
Profile photos
Photos you add, for yourself or for people in your Circle, are stored only on your iPhone, in storage the app shares with its Home Screen widgets. They aren't uploaded to our servers, aren't included in your data export, and other people never see the photos you choose: everyone sees only the photos they picked on their own phone, or initials. Deleting the app removes them, although they may be in your own iPhone backup. If we later offer photo sync, we will update this policy and ask you first.
Your Circle
A family plan lets up to 4 or 8 people share membership through a Circle. People on their own phones have their own CroAQI account and their own advice. A Circle owner can also add managed profiles, for example for a child, whose details the owner manages.
What others in your Circle can see: your name, your role, whether your membership is active, and only the places you choose to share, with weather for those places. Your care details stay private to you, and a managed profile's care details stay private to the person who manages it. Location sharing is always each person's own choice.
If you leave a Circle, or the owner removes you, the Circle no longer sees your shared places. If the owner deletes a managed profile, its details are deleted.
Neighbourhood scenes for members
Members can view 3D scenes of neighbourhoods beyond Marina Bay. To load one, the app asks our account service for a short-lived access token (valid for one hour), which confirms your membership and carries your CroAQI account ID. The app then downloads the scene for that area from our scene service, sending the token and the area requested.
We use these requests to check access, prevent abuse (for example, a limit on how many tokens one account can request each hour) and deliver the scene. Our providers may keep standard request logs for a short time. Free, signed-out and offline use sends no scene requests; the Marina Bay scene is built into the app.
Where the data comes from
Most information comes from you, inside the app. Membership and trial details come from Apple when you subscribe, renew, cancel or get a refund. If someone invites you to their Circle, some details (such as your email address and name) come from them. Weather and air-quality readings are public data from Singapore's National Environment Agency and are not personal data.
Who helps us run CroAQI
We use a small number of service providers. They process personal data only on our instructions and only to provide their service to us.
| Provider | What they do |
|---|---|
| Clerk | What they do:Sign-in with an email code or Sign in with Apple, and account security. |
| Neon | What they do:Database hosting for your account, places, preferences, Circle and membership status, and hosting for our neighbourhood scene service. |
| Vercel | What they do:Hosting for our account service and this website. |
| Apple | What they do:App distribution, Sign in with Apple, in-app purchases, free trials, subscription management and refunds. Apple sends us App Store Server Notifications about your purchases. |
Transfers outside Singapore
Your account data, Circle and membership status are stored in Singapore (Neon, on AWS in Singapore), and our account service runs in Singapore (Vercel). Sign-in is handled by Clerk, which stores and processes data in the United States, and Apple processes payments and Sign in with Apple under its own policies. When data leaves Singapore, we take steps required by the PDPA to make sure your data gets a standard of protection comparable to Singapore law, such as contractual safeguards with each provider.
How long we keep it
We keep your account data for as long as your account is open. When you delete your account in the app, we erase your account data from our systems and ask our sign-in provider to delete your identity. Copies in backups are removed when those backups expire. Deleting your account doesn't cancel an App Store subscription; cancel that in iPhone Settings. We may keep a limited record of purchases, App Store notifications or security events where the law requires it, for accounting, or to resolve a dispute.
Your choices and rights
Under the PDPA you can ask to access your personal data, ask us to correct it, and withdraw your consent to how we use it. Most of this is built into the app:
- Export your data: Settings → Data & account → Export my data.
- Delete your account: Settings → Data & account → Delete CroAQI account.
- Location: turn it on or off in iPhone Settings → Privacy & Security → Location Services → CroAQI.
- Care details: edit or remove them at any time in the app.
- For anything else, email support@croaqi.com. We will reply within 30 days.
Security
Data travels between the app and our servers over encrypted connections, and your profile is encrypted on our servers. Access is limited to what is needed to run the service. No system is perfectly secure, but we work to protect your data and will tell you and the authorities if a notifiable data breach affects you.
Children
CroAQI accounts are for adults. A parent or guardian with a family plan may add a child to their Circle as a managed profile and manage care details for them. If you think a child has given us personal data without a parent's involvement, please contact us and we will delete it.
This website
croaqi.com has no sign-up forms, no advertising and no analytics or tracking cookies. Our hosting provider keeps standard server logs, such as IP addresses and request times, for a short time to deliver the site and protect it from abuse. If you email us, we use your email only to reply.
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top. For significant changes, we will also let you know in the app.
Contact
Questions, requests or complaints about privacy: support@croaqi.com. If you are not satisfied with our response, you can contact Singapore's Personal Data Protection Commission.