Privacy Policy

Effective 5 October 2026

Crello brings a family's shared life together: the family's week, who holds each pickup, drop-off and chore, check-ins, time together, and — only for the members who choose it — where they are. Crello was previously called Hearth; the service, the company and your records are the same. Crello is operated by Memriq Holdings, Inc. ("Memriq", "we"), which is the controller of the personal information described here.

Two facts shape this policy. A household's organizer may keep records about family members who never sign up, such as a child. And every member who does sign in decides for themselves what they share, with whom and when.

What Crello keeps

• Your account — your name and email address, and a password or your Google sign-in. One Memriq account signs you in to every Memriq service; being let in to Crello is decided separately, by invitation.
• Your household — its name and time zone; each member's name as the family says it, their role, and whether they sign in. A member who does not sign in has no account and no email address in Crello.
• The family's places — each place's name, kind (home, school, work, activity or other), an address if you add one, and — only if someone presses This is the place while standing there — one point used to recognise it.
• The family's week — for each member and day: home, away, out, at one of the family's places, or not known, with the reason if someone wrote one. A plan is an expectation, not a record of where anyone was.
• Check-ins — which of the family's places a member said they arrived at or left, and when.
• Responsibilities and shared plans — pickups, drop-offs, chores and the family's shared goals: a title, a day, a time, a place, who was asked and who accepted.
• Location, only if you turn it on — your current position at the precision you chose, with the time it was observed and how accurate it is, and the sharing rules you set. See the next section.
• What Crello's agents have learned — preferences and lessons drawn from what your family approved, corrected and completed, each with who it belongs to. See "Agents that learn" below.
• Your settings and reminders — how much Crello may do on its own, the permissions you granted, and the reminders it scheduled.
• Support conversations — what you write to Crello's support chat.

Crello never asks for or keeps an age or a birth date — not for you, not for a child, and not as a birthday.

Your location — off until you turn it on

Location sharing is off until you turn it on, and only you can turn on yours. No organizer, family member or trip organizer can switch it on for you. You can use every other part of Crello with it off, and you can always check in by hand instead.

• Live and background sharing. When you turn sharing on, the people you choose can see where you are. Crello updates your location in the background only when you have given both your phone's location permission and a standing sharing rule in Crello; without both, it updates only when you open Crello or share by hand.
• Your rules. You decide by person and circle, by place (share only at these places) and excluded place (never at these places), by time, by precision (exact, a general area, or only a named place such as "home") and by purpose (for example a pickup, an outing or a trip), each with an end if you want one. A preview shows exactly what each person would see now.
• Deny wins. An excluded place, a pause, a person you removed or a rule that has expired overrides every rule that would share. Where rules overlap, the less precise one applies. If Crello cannot tell whether a rule allows sharing, it does not share. Someone who cannot see you sees only that your location is unavailable — never which rule, which place or why.
• History is off by default. Crello needs no history to show where you are now. It keeps the current position you allow and replaces it when a newer one arrives; it does not keep a trail of where you have been unless you turn location history on.
• What you withhold stays withheld. A position taken while sharing was off, or at an excluded place, is not sent later when your phone reconnects, and it never appears in reminders, suggestions, another app, an agent's memory or our analytics.
• Arrival and departure alerts are sent only under an alert rule you approved, and never report movement through a place you excluded.

Stopping sharing stops new updates straight away. What someone already saw, or saved as a screenshot, cannot be recalled.

Your private records are yours

Your sharing rules, your location, your private updates and what Crello's agents have learned about you belong to you. A household's organizer can invite members and look after what the family shares, but the organizer cannot read an independent member's private records and cannot widen what that member shares. Being in a household, or paying for it, gives no one access to another member's private information. When a managed member becomes independent, access that came from being managed ends rather than carrying over.

Agents that learn — and that you can correct

Crello's agents get better at suggestions from what your family approves, corrects and completes. In What agents remember you can see what they have learned about you, correct it, make them forget it, or turn learning off; when you make Crello forget something it stops affecting suggestions. A private correction stays private, and nothing learned about one member becomes a family fact without them. Nothing learned from a withheld location or a restricted financial detail is kept as a preference.

Crello does not train AI models on your family's data unless you separately and explicitly agree. And an agent growing more confident never changes who can see your location, raises a budget, invites anyone or buys anything.

Other Memriq apps — only by a specific grant

Another Memriq app sees your Crello information only through a specific grant you approve: it names the app, exactly what it may see or do, why, and when it ends, and you can withdraw it at any time. A grant never widens on its own. For example:

• A shared purchase through Merc — Merc sees the item, the agreed contributions and who approved paying. A vote is not permission to charge anyone, and your contribution does not reveal your bank account.
• A family trip with Drift — each member accepts their own trip sharing; trip permissions end when the trip ends and your everyday rules, including your exclusions, apply throughout.
• A shared budget through Reckon — you can share a contribution or a budget's progress without sharing your income, balances or other transactions.

Without a grant, another Memriq service that asks Crello a question for you (for example, how many of your household are home for dinner each night) gets counts and states only — never a name, a place, an address, a location or a time anyone checked in. A reminder Crello schedules for you is written into your own Helm account, which encrypts it under your account. Memriq's billing service sees only your account id and which Crello feature was used.

How it is protected

Names, place names, addresses and the point a place is recognised by are stored encrypted. Shared household records are encrypted under the household organizer's account; a member's private records are kept under that member's own authority, not the organizer's. What is stored unencrypted — random record identifiers, roles, a place's kind, states, dates and times — does not say who anyone is or where they live. Crello's suggestions are written by an AI model that is sent role labels ("Adult 1"), counts and times — never names, places or positions.

What Crello never does

Crello never messages a member of your family, never gives anyone a responsibility, never buys, books or moves money, and never shares anyone's location except under that person's own rule. Those happen only when a person approves them. How much Crello may do on its own is your setting, and Crello tells you what each setting allows before you choose it. Crello is not an emergency service: it does not monitor anyone for safety, and an unanswered update or an unavailable location means only that there is no update. In an emergency, call your local emergency number — 911 in the United States.

We do not sell or share your personal information, and have not in the past twelve months.

Services that process it for us

• Railway — runs Crello's servers.
• MongoDB Atlas — stores Crello's records, encrypted as described above, in the United States.
• OpenAI — the language model that writes Crello's suggestions.
• Resend — delivers the emails Memriq sends you, through Memriq's one sender.
• Google — signs you in, if you choose Google.

How long it is kept

Crello keeps what your household saved until it is deleted. A current location is kept only until a newer one replaces it, sharing stops or it expires. A household and everything in it is deleted within 30 days of its organizer's account closing. Support messages are kept for 2 years, server logs for 90 days, and billing records, if you ever have any, for 7 years. Backups can hold deleted data for up to 35 days before it is gone from them too. A record another Memriq app must keep — a purchase in Merc or a transaction in Reckon — is kept by that app under its own policy.

Deleting it, or getting a copy

You can pause or stop sharing, withdraw any grant and make agents forget what they learned in Crello's privacy center. The organizer can erase the whole household in Settings; any other member can leave it there. Closing your Memriq account has no self-serve button: write to privacy@memriq.ai, or ask Crello's support chat to pass you to a person — we acknowledge within 5 business days and finish within 30 days. The same address gives you a copy of what we hold, or corrects it.

Children

Crello is for adults to sign in to. A child does not sign in; a parent or guardian keeps a child's days as a managed member, and Crello keeps no age, birth date, email address or location for them.

If you are in the EU or UK

We rely on the contract with you to run Crello, on our legitimate interests to keep it working and secure, and on your consent for location sharing and anything else. Your information is processed in the United States under Standard Contractual Clauses. You may complain to your local data protection authority.

Changes and contact

If this policy changes, the new version is published here with its date before it takes effect. Privacy questions: privacy@memriq.ai. Anything else: hi@memriq.ai.