Crossbar

Privacy Policy

Last updated Sep 3, 2026

1. Who we are

Crossbar is made by Sawdust Labs ("Sawdust Labs," "we," "us," "our"), the company behind the Crossbar mobile app and the getcrossbar.app website (together, the "Service"). This Privacy Policy explains what information the Service collects, how we use and share it, and the choices you have.

Contact: legal@sawdust.app

This Policy applies to:

The Crossbar iOS app ("the App")
The getcrossbar.app marketing website, including the waitlist and invite pages ("the Site")
Crossbar accounts, team/roster dashboards, and cloud-synced clip storage, once launched

2. The short version

The App works without an account, and by default nothing leaves your phone. Camera footage, saved clips, and the motion-analysis measurements derived from them are stored only in the App's local storage on your device. We do not have a server that stores your clips today.
The only things that leave your device today are (a) anything you choose to attach to an in-app Feedback report, (b) your email address and basic details if you join the waitlist or click an invite link on the Site, and (c) anonymous-by-default crash diagnostics.
If you choose to create an account for team dashboards or cloud sharing, additional data — including clips and practice history — will sync to our servers so it can be shared with your coach or teammates, as described in §5 below.
We do not sell your personal information, and we do not use third-party advertising or behavioral-tracking SDKs in the App.

3. Information we collect

3.1 Information you provide directly

| What | When | Notes | |---|---|---| | Email address, name, sport preference | Joining the waitlist on the Site | Stored with our email provider (Resend) and mirrored to our internal database so we can track signups. | | Category, message, and optional email address | Submitting in-app Feedback | Sent to our servers and emailed to our team so we can respond. | | Video clips you choose to attach | Submitting in-app Feedback, only if you've turned on Data Donation and only for clips you've already reviewed (thumbed up/down) | Uploaded directly to secure cloud storage for that one report; see §4. | | Account details (name, email, password or sign-in-with-Apple/Google identifier, role such as "athlete" or "coach") | Creating a Crossbar account | Required only for account-based features — see §5. | | Roster information (player names/emails, team name, targets you set) | A coach or club director sets up a team | See §5. |

3.2 Information collected automatically

| What | Source | Notes | |---|---|---| | Crash diagnostics | Sentry (crash-reporting SDK) | Configured for crash reporting only — we do not currently use it (or any other SDK) for usage analytics, session replay, or advertising. Crash reports can incidentally include device model, OS version, and app state at the time of a crash. | | Invite-link activity | getcrossbar.app/invite/[code] | We record that a code was clicked and whether it was valid, to power the referral leaderboard on our internal team dashboard. We do not collect the visitor's identity from a click alone. | | Standard web/server logs | Our hosting provider (Vercel) and Apple (App Store downloads) | IP address, request timestamps, and similar technical logs generated in the ordinary course of operating a website and distributing an app, per our providers' own practices. |

3.3 Information the App creates on your device (and does not send us)

This is the core of what Crossbar does, and it's important to be specific about what stays local:

Video clips you capture (via the shutter button or the "clip that" voice trigger).
Session and practice history — session length, dates, and your weekly-target progress.
Motion-analysis measurements derived from your clips — joint angles, tempo, balance, and similar metrics computed by on-device pose estimation (Apple's Vision framework) at specific phases of your swing or shot. This is the data most likely to be legally "biometric" or "sensitive" in nature, so we call it out specifically: it is generated and stored entirely on your device, compared only against your own prior sessions, and is never transmitted to us unless you affirmatively attach a specific clip to a Feedback report as described in §3.1.
Voice audio processed live by Apple's on-device (where supported) speech recognition to detect the "clip that" trigger phrase. This audio is not recorded, saved, or transmitted anywhere by the App — it exists only transiently to detect the trigger word, the same way the shutter button detects a tap.

3.4 Permissions the App requests

Camera — required to record practice footage.
Microphone / Speech Recognition — required only if you enable the voice ("clip that") trigger; the shutter button works without it.
Notifications — optional, used only for locally generated reminders (session-end summary, weekly recap). These are computed on-device from your own data; we do not send push notifications from a server today.

4. How we use information

We use the information described above to:

Operate and improve the App and Site (e.g., responding to Feedback reports, fixing bugs found through crash reports, running the waitlist and invite program).
Communicate with you — replying to feedback you submit, or sending waitlist/product updates if you've signed up for them.
Provide account-based features: syncing your clips and practice history across your own devices, and sharing the roster-level views described in §5 with a coach or club director you've joined.

We do not use your clips, motion-analysis data, or feedback submissions to train machine-learning models today. If that changes, we will update this Policy first, obtain any additional consent required by law (see the note to counsel above regarding California's AI training-data transparency requirements), and — per our own internal policy — we intend to source any initial training data from consenting team members and recruited testers under a separate signed release, not from general users' clips, before considering any change here.

We do not use your information for third-party advertising, and we do not sell or "share" (as that term is defined under CCPA/CPRA) your personal information.

Creating a Crossbar account is, and will remain, optional. The core App — recording, clip-saving, on-device motion analysis, and your practice history — works fully without one. An account is only needed for:

Cloud sync, so your clips and practice history are backed up and available if you use the App on more than one device.
Team dashboards, so a coach or club director you've joined can see roster-level practice activity (sessions, clip counts, minutes practiced, and standings toward a weekly target they set) and, at season's end, a player's clip history for that season.

When you create an account or join a team:

We collect the account information in §3.1 and store it, along with any clips and practice data you choose to sync, on our servers rather than solely on your device.
If you join a team, your coach/club director will be able to see the roster-level activity described above. A coach will not be able to see clips or data for players who have not joined their team, and a player can leave a team at any time, after which the coach loses access to that player's future activity.
Age/minors: Team rosters are expected to include users under 18. Age verification measures are in place for players who create an account. We do not knowingly permit access to users under the age of 13.

We share information only as follows:

Service providers, who process data on our behalf and under contract, currently including: email delivery and waitlist contact management, cloud storage for feedback-attached clips and account/team data, website/API hosting, crash diagnostics, and on-device frameworks such as Vision and Speech that process data locally on your device.
A coach or club director you join, limited to the roster-level activity described in §5, if and when you use team features.
Legal and safety reasons — if required by law, subpoena, or legal process, or to protect the rights, property, or safety of Sawdust Labs, our users, or the public.
Business transfers — if we're involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a successor policy of which you'll be notified.

We do not otherwise share, rent, or sell your personal information to third parties.

7. Your choices and rights

Data Donation is opt-in and off by default. Turning it on in Profile does not create an account or upload anything by itself — it only makes reviewed clips eligible to be (a) manually exported by you via the share sheet, or (b) attached by you to a specific Feedback report. Turning it off clears any clips already staged in a draft report.
Local data is yours to delete by deleting the clip/session in-app, or by deleting the App, which removes all locally stored clips, sessions, and analysis from your device (subject to normal iOS backup behavior — see §8).
Feedback and waitlist data: email us at legal@sawdust.app to request access to, correction of, or deletion of information you've submitted via Feedback or the waitlist.
Account data: once accounts exist, you'll be able to export or delete your synced clips and account data from within the App, or by contacting us.
State privacy rights (California and others): Depending on where you live, you may have rights to know what personal information we've collected about you, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. To exercise these rights, contact us at legal@sawdust.app.

8. Data retention and backups

On-device data (clips, sessions, analysis) persists until you delete it or delete the App. If you use Apple's iCloud device backup, that data may be included in your personal iCloud backup under Apple's terms — Crossbar does not control or access that backup.
Feedback submissions (including any attached clips) and waitlist entries are retained for 24 months or as needed to respond to your request, resolve the issue reported, and meet our legal obligations, after which we delete or de-identify them.
Account and synced team data is retained for as long as your account is active, plus 30 days after deletion to allow recovery from accidental deletion, unless a longer period is required by law.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information we hold, including encryption in transit for data submitted to our servers and access controls (e.g., row-level security) on our cloud database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's privacy

The App and Site, in their current no-account form, are not directed at collecting personal information from children, and we do not knowingly collect personal information from children under 13 through the waitlist or Feedback flows. Team-dashboard/account features are addressed specifically in §5 above. If you believe a child has provided us personal information in a way not addressed here, contact us at legal@sawdust.app and we will address it immediately.

11. International users

App distribution is currently limited to the U.S. Apple App Store only.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we'll notify you by updating the "Last updated" date above and, where appropriate, through the App or by email. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

13. Contact us

Sawdust Labs legal@sawdust.app