Last updated: August 2026
Crumbs ("the Service") is a thought-capture assistant you use inside WhatsApp, built by PurposeLab Studio. This policy explains what we store, where it goes, and what you can do about it.
Read this part first. Crumbs is different from our other apps. Folio, WaterWise, BP Log and Hushly keep everything on your phone. Crumbs cannot: it has to receive your message, understand it, and store it so it can hand it back later. That means your crumbs are held on our servers and are sent to an AI provider to be processed. If you are not comfortable with that, please do not send anything to Crumbs that you would not want stored.
Your crumbs and account record are stored in Cloudflare D1, a managed SQLite database, and the Service runs on Cloudflare Workers. Data is encrypted in transit and encrypted at rest by the platform. We do not run our own separate copy of your data elsewhere.
Crumbs uses AI to work out what you meant, transcribe voice notes, read text out of images, and find the right item when you ask for something back. To do that, the content of your messages is sent to Google's Gemini API, and images may additionally be processed by Cloudflare AI. This happens every time you send a crumb or ask a question.
We send the minimum needed for the task, and we do not sell your content or use it for advertising. We do not train our own models on your content. However, once content is sent to an AI provider it is subject to that provider's own terms, so please also read Google's Gemini API terms and Cloudflare's privacy policy.
Crumbs is delivered over the WhatsApp Cloud API, operated by Meta. Your messages to and from Crumbs pass through WhatsApp's infrastructure and are also governed by WhatsApp's privacy policy. Note that messages with a business are not end-to-end encrypted in the same way as personal chats, because the business (in this case, Crumbs) has to be able to read them in order to reply.
Paid plans are handled by Razorpay. Razorpay processes your payment details directly; Crumbs never sees or stores your card or bank information. We store only the resulting plan and its expiry date.
We do not sell, rent or trade your data. We do not serve advertisements and we do not use ad tracking or retargeting.
Your crumbs are kept until you delete them or delete your account, because the whole point of the Service is that it still has them later. Operational message logs are kept only as long as they are useful for delivery, debugging and abuse prevention. When you delete your account, your crumbs and account record are removed from our database; backups and provider-side logs may persist for a short period before they age out.
Incoming webhooks from WhatsApp and Razorpay are verified with HMAC signatures, repeat messages are de-duplicated, and administrative endpoints require a secret. Data is encrypted in transit and at rest by our infrastructure providers. No service can promise perfect security, and we do not.
Crumbs is intended for adults (18+). It is not directed at children and we do not knowingly collect data from them.
Questions about this policy, or a request about your data: purposelab.studio@gmail.com
We may update this policy. Changes will show in the "Last updated" date above. Continued use of the Service after a change means you accept the updated policy.