Privacy Policy
Last updated: 12 June 2026
The short version: we collect the minimum we need to run the service — your email
address for your account, your messages to generate replies, and your subscription
status. No ads, no analytics trackers, no selling your data, and your messages are
never used to train AI models.
1. Who we are
SmartArse (smartarse.org and the SmartArse mobile apps) is operated by Crystalmark Limited, a company registered in England and Wales. Crystalmark Limited is the data controller for the personal data described in this policy. You can contact us at contact@crystalmark.co.uk.
2. Data we collect
- Email address — collected when you register, used for sign-in, account verification, and important service emails. Authentication is handled by AWS Cognito; your password is stored by Cognito in hashed form and is never visible to us.
- Nickname — optional; only stored if you set one, and displayed on replies you choose to share.
- Subscription data — your tier and a payment-provider reference (a Stripe customer ID, or a Google Play / Apple App Store purchase token). We never see or store your card details.
- Messages you submit — sent to our servers to generate a reply. We tell you not to include personal information in messages, and we block obvious personal data where we detect it.
- Shared replies — if you choose to save and share a reply, the message and generated reply are stored and automatically deleted after 90 days.
- One functional cookie / local storage — remembers your preferred reply style and intensity, and keeps you signed in. No tracking or advertising cookies.
- Service logs — standard request logs (including IP addresses) kept briefly by our hosting provider for security, rate-limiting, and abuse prevention.
3. What we don't do
- We do not sell or rent your personal data.
- We do not run advertising or third-party analytics.
- We do not use your messages or replies to train AI models.
- We do not send marketing email.
4. How we use your data
We use your data solely to operate SmartArse: authenticating your account, generating replies to the messages you submit, enforcing subscription tier limits, processing payments, preventing abuse, and meeting our legal obligations.
5. Who we share data with
We use a small number of service providers to run SmartArse:
- Amazon Web Services — hosting, authentication (Cognito), and storage.
- Anthropic — your submitted message is forwarded to Anthropic's API to generate the reply, subject to Anthropic's privacy policy. Anthropic does not use API data to train models.
- Stripe — payment processing for subscriptions purchased on the website.
- Google Play / Apple App Store — payment processing for subscriptions purchased in the mobile apps; the store is the merchant of record and handles your payment details under its own privacy policy.
Beyond these providers, we only disclose personal data where required by law.
6. Where your data is processed
Our servers are hosted on AWS in the United States, and Anthropic processes messages in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.
7. How long we keep data
- Shared replies — deleted automatically 90 days after they are shared.
- Account data — kept until you delete your account. Deleting your account (available on the main page when signed in) removes your authentication record and subscription record. Shared replies are not linked to your email address after deletion and expire on their normal 90-day schedule.
- Messages that are not shared — not retained after the reply is generated.
8. Your rights
Under UK GDPR you have the right to access, correct, delete, or restrict the processing of your personal data, and the right to data portability. The in-app account deletion feature satisfies the right to erasure for your account; for any other request, email contact@crystalmark.co.uk.
If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
9. Children
SmartArse generates sharp-tongued content and is not intended for children. You must be at least 18 years old to create an account.
10. Changes to this policy
We may update this policy from time to time and will update the "last updated" date at the top of this page. For material changes, we will notify registered users by email where practicable.
See also our Terms & Conditions. Questions? Email contact@crystalmark.co.uk.