Privacy Policy
Last updated: September 27, 2026
Crease picks up your dry cleaning, takes it to a local cleaner, and brings it back. Doing that needs your address and a way to reach you. This page covers the Crease iPhone app and the website at creasenyc.com, and says exactly what we hold, who else sees it, and how to get rid of it.
What the app collects
- Account — your name and email. You sign in with Apple, with Google, or with an email address and a password you choose. With Sign in with Apple's Hide My Email we only ever see the relay address. Passwords are held by our authentication host (Supabase) as a one-way hash; we never see them.
- Phone number — asked for when you book rather than when you sign up, so a courier standing at your door can call you. We do not use it to market anything to you.
- Addresses — the pickup address you save, its coordinates, and any access notes you add (for example a buzzer code or "leave with the doorman"), so a courier can find you.
- Orders — what was collected, what the cleaner counted, the price, timestamps, and any notes you or the shop add.
- Delivery details — courier name and status while your order is moving, and the handoff code that proves your clothes reached you.
- Device tokens — so we can send the "your clothes are ready" notification. You can turn notifications off in iOS Settings.
- Location — only while you are using the app, and only to suggest nearby addresses when you book. We never track your location in the background.
- Address suggestions — while you type an address in the app, suggestions come from Apple Maps (Apple's MapKit), under Apple's privacy policy. Crease's servers do not see what you type until you save an address.
- Payment details — see "Payments" below.
What the website collects
You can use creasenyc.com without an account. What you type into it is sent to our server, not kept in your browser:
- Address checks — when you ask "do you reach me?" or ask for a price, we store the address you typed, the coordinates it resolves to, the neighbourhood, whether it is inside our service area and how far it is from the nearest partner cleaner, plus a random session ID (see "Cookies and local storage"). We keep these even when you don't book, because they tell us where people want Crease.
- Waitlist email — if you leave your email to hear when we reach your street, it is stored with that address check. We use it only to tell you Crease has reached you.
- Pickup requests — the order form stores your name, phone number, email (optional), pickup address, its coordinates, access notes, what you're sending, the service you chose, and when you'd like the pickup. No card is taken and no account is made; we text you to confirm.
- Address lookups by other services — to turn what you type into suggestions and a point on the map, our server sends the text of the address (and nothing else about you) to two free public services: NYC Planning Geosearch, run by the NYC Department of City Planning, for suggestions as you type; and OpenStreetMap Nominatim, run by the OpenStreetMap Foundation, when an address has to be looked up in full. Their own privacy policies cover what they log.
- Server logs — like every website, our web server records each request's IP address, the page asked for, the time, the referring page and the browser's user-agent string. We use them to keep the site running, stop abuse, and count visits in aggregate. We do not use them to build a profile of you.
Cookies and local storage
crease.session(browser local storage) — a random ID created the first time you check an address, and sent with each address check, so three tries at one address count as one household rather than three. It contains nothing about you. Clearing your browser's site data removes it.crease_owner(cookie) — set only on devices belonging to the people who run Crease, so our own visits are left out of the visitor count. Customers never receive it.- There are no advertising, analytics, or third-party cookies on the site.
Payments
Payment in the app is handled by Stripe, inside Stripe's own payment screen. Your card number goes to Stripe, never to Crease — we only see whether a payment succeeded, the amount, and an order reference. Stripe's screen also reports to Stripe how that checkout screen was used (for example, which payment method was picked), for fraud prevention and to improve it. That is why the App Store label lists "Payment Info" and "Product Interaction": both are collected by Stripe's component inside our app, under Stripe's privacy policy.
What we do not do
- No advertising or tracking. There are no ad networks and no tracking across other apps or websites. Nothing here asks permission to track you, because nothing here does it.
- No selling or sharing. We do not sell personal information and do not share it for cross-context behavioural advertising, and we never have.
- No analytics of our own. Crease runs no analytics SDK in the app or the website. Apart from Stripe's payment screen above and the server logs above, we measure nothing about how you use either.
Who else sees it
- Your chosen cleaner — for an app order: the order, the item count, and your first name, not your home address or phone number. For a pickup request from the website: the request as you sent it, including your name, phone, email and address, because the shop is the one arranging that pickup with you.
- The courier service (Uber Direct) — your name, phone number, address and access notes, for the trip only. A courier cannot do the job without them.
- Stripe — payments, as described above.
- Supabase — our database and authentication host, in the United States.
- Apple — push notifications (a device token and the notification text), and, in the app, address suggestions.
- NYC Planning Geosearch and OpenStreetMap Nominatim — the text of an address typed on the website, as described above.
- DigitalOcean — hosts the servers that run the website and our API, in the United States.
That is the complete list. We disclose personal information to no one else, except where the law requires it.
How long we keep it
Account, order and address records are kept while your account is open, so you have your history and we can settle disputes and meet tax and accounting obligations. Raw courier tracking events, which contain the courier's contact details, are deleted after 90 days. Website address checks, waitlist emails and pickup requests are kept until you ask us to delete them. Server logs are deleted automatically after about two weeks.
Deleting your data
You can delete your account from the app: open the account menu on the home screen and choose Delete Account. That permanently removes your profile, addresses, orders and saved details. It cannot be undone, and we cannot recover it afterwards. Records we are legally required to retain for accounting are kept by our payment processor, not by Crease.
Website address checks, waitlist emails and pickup requests are not tied to an account, so email us from the address you used (or tell us the phone number or street) and we will delete them.
Your rights
Wherever you live, you can ask us to show you the personal information we hold about you, correct it, delete it, or send you a copy in a portable format. Email divinejdavis@gmail.com; we will confirm the request comes from you (usually by replying from the email or phone on the record) and answer within 30 days. We will not treat you differently for exercising any of these rights.
- California (CCPA/CPRA). You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of its sale or sharing. We do not sell or share personal information, so there is nothing to opt out of, and we do not use sensitive personal information to infer anything about you. The categories we collect are identifiers (name, email, phone, IP address), customer records (addresses, orders), geolocation (in-app, while using it), and internet activity (server logs), from you and your device, for the purposes above. You may use an authorised agent.
- EEA and UK (GDPR / UK GDPR). We process your information to perform our contract with you (running your account and orders), on our legitimate interests (keeping the service secure, counting demand from website address checks), with your consent (location, notifications, waitlist email — which you can withdraw at any time), and to meet legal obligations (tax and accounting). You may also object to or restrict processing and complain to your local data protection authority. Your information is stored and processed in the United States.
Security
Traffic is encrypted in transit. Access to order and address data is restricted to your own account, and to the cleaner handling your order, by database-level rules — not just by what the app chooses to show. Website submissions are written by our server; browsers cannot read them back.
Children
Crease is not directed at children under 13 and we do not knowingly collect their information.
Changes
If this policy changes in a way that matters, we will update the date at the top and, for significant changes, tell you in the app.
Contact
Questions, data requests, or anything else: divinejdavis@gmail.com.