Crash is an open-source iOS app for sharing places to stay within private networks. The service at rooms.leobrown.co.uk is operated by Leo Brown. Privacy queries: leo@leobrown.co.uk.
Your display name, email address, a salted password hash, a hashed recovery key and hashed session tokens; network memberships and joining codes; listing descriptions, street names, cities, postal codes, countries, time zones and guest limits; photos; free and busy dates; stay requests, their notes and statuses; and notification events. No payment details or device location are collected. The iOS app removes photo metadata when preparing uploads.
Members of the same network can see its members’ display names, listings, photos and availability. Stay notes and guest identities on requests are visible to the guest and host. Other members can see that accepted dates are occupied. Members can share the network code, so give it only to people you trust. The network owner can rotate the code and remove members. There is no public directory of rooms or networks.
The app uses HTTPS and stores its session token in the iOS Keychain. Passwords use PBKDF2-SHA256 with unique salts. Runtime data is stored on the server outside the public source and download. There are no analytics, advertising SDKs, tracking cookies or third-party push providers.
When enabled, your iPhone periodically fetches network updates and displays local iOS notifications. These may include a listing name, location or stay dates on your lock screen. You can change notification previews in iPhone Settings, disable notifications in the app, or mute individual networks. Apple controls background check timing.
Account and listing data remains until you delete it. You can delete photos, listings and your account in the app, leave networks, or delete networks you own. Before deleting an account that owns a network with other members, delete that network first. Leaving or being removed from a network removes your listings and stay requests there. Deletion of a listing also removes its photos, date blocks and stay requests.
Sessions expire after 180 days, and recovery revokes existing sessions. Basic web-server access logs may contain IP addresses, request paths and timestamps and are rotated under the host’s log policy. Application logs omit request bodies, tokens and network codes. Daily private server backups retain deleted data for up to 14 days. Backups remain on the same server; they are not an off-site disaster recovery service.
Save the recovery key when you create an account. Your email address is used as a login identifier; email ownership is not verified and no password-reset emails are sent. The recovery key lets you set a new password. Keep it as private as your password.
The MIT-licensed source and source download contain no production accounts, photos, databases, network codes or signing credentials. Building the iOS app requires Xcode and your Apple signing identity.