Privacy

Last updated: 25 July 2026.

Croft is built on a simple idea: your apps and your data are yours. This page explains what we collect, why, and what we do with it. If anything here is unclear, email [email protected] and a human will answer.

The short version

Your apps run on your own private server. Your app data lives there, not in a shared pool with everyone else’s.
We collect the little we need to run your account, bill you, and keep your croft healthy — no more.
We don’t sell your data. We don’t advertise. We’re not that kind of company.
You can take everything with you and leave whenever you like.

Who we are

Croft is a product of Lupchoo Limited, a company registered in New Zealand (“we”, “us”). Croft provides the private server, the login system, and the caretaking that your apps run on. For the purposes of data-protection law, you are the controller of the data inside your apps; we are a processor acting on your instructions. For your account and billing details, we are the controller.

What we collect

Account information. Your name, email address, and workspace name, so we can create your croft and let you sign in.

Your people. The names and emails you add to your People list, so your apps know who’s allowed in. You provide these; you’re responsible for having a reason to hold them.

Billing information. Handled by our payment provider. We store enough to manage your subscription (plan, status, invoices) but never your full card number.

Operational data. Logs, error reports, and health metrics from your server, so we can keep it running, fix faults, and restore backups. These can include app logs that Claude reads when fixing a bug.

Site analytics. Basic, privacy-respecting stats about visits to this marketing site. No cross-site tracking, no ad networks.

What we don’t do

We don’t sell or rent your data to anyone.
We don’t use the contents of your apps to train models.
We don’t show you ads or share your details with advertisers.

Where your data lives

Your apps and their data run on a virtual private server assigned to your croft, hosted in a professional data centre. Backups are copied to separate storage so we can restore your croft if something fails. Account and billing records are held in our own systems and with our payment provider.

How long we keep it

While your account is active, we keep what we need to run it. If you cancel, your apps keep running until the end of your billing period, after which we provide an export and then delete your croft and its backups on a defined schedule. Account and billing records may be retained longer where the law requires (for example, tax records).

Your choices and rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. You can export or delete most things yourself from your croft. For anything else, email [email protected] and we’ll help.

Sub-processors

We rely on a small number of trusted providers to operate Croft — hosting, payments, and email delivery among them. We keep an up-to-date list and require each of them to protect your data. Ask us for the current list any time.

Changes to this policy

If we make a meaningful change, we’ll update this page and, where it matters, tell you directly. The “last updated” date above always reflects the current version.

Contact

Questions, requests, or complaints: [email protected].