Crundi for Android: privacy policy

Last updated 12 October 2026. App package mv.obitech.crundi, published by Obitech.

Crundi for Android is a client for a Crundi server that you run yourself. It shows that server on your phone. The short version: the app has no account with us, sends us none of your content, and contains no advertising or analytics.

What the app talks to

  • Your own server. Everything you see and type in the app goes between your phone and the Crundi server you paired it with, at the address you gave it. We do not operate that server and cannot see what passes between it and your phone.
  • Google's Firebase Cloud Messaging, to deliver notifications. Google gives the app a messaging token that identifies this installation of the app, and delivers messages addressed to it. See Firebase's privacy information.
  • The Crundi push relay at cr-rl-pub1.obitech.mv, which we operate. Your server hands it a notification to pass on to Google for your phone.

What we can and cannot see

A notification is encrypted on your server with a key that only your phone holds, before it leaves your server. The relay, and Google, pass on a sealed message they cannot read. The relay receives:

  • the messaging token of the phone the notification is for;
  • the sealed notification;
  • the push key your server was issued, which says which server is sending.

The relay does not keep notifications or tokens after passing them on, and request logging is switched off. It keeps a record of each push key: a label naming who it was issued to, and whether it has been revoked.

What is kept on your phone

  • The address of each server you paired, and the sign-in tokens that server issued to this phone, stored encrypted.
  • The keys used to open notifications.
  • A short log of recent notification deliveries, to help you see why one did not arrive. It stays on the phone.
  • Icons of your projects, fetched from your server.

Removing a server in the app's settings, or uninstalling the app, removes these.

Permissions

  • Notifications: to tell you when a chat finishes or needs you.
  • Camera: to scan the pairing picture, and, if you choose to, to take a photo to attach in a chat on your server.
  • Microphone: only if a page of your own server asks for it and you allow it.

Photos and files you attach are sent to your own server and nowhere else.

What we do not do

  • No advertising, and no advertising identifiers.
  • No analytics or usage tracking in the app.
  • No selling or sharing of data with anyone.
  • No account with us: there is nothing of yours for us to hold or delete.

Children

The app is a tool for people who run their own server. It is not directed at children.

Deleting your data

Your content lives on your own server, under your control. To stop a phone receiving notifications, remove it under Settings, Phone app, on your server, or uninstall the app. To have a push key removed from the relay, contact us.

Contact

Telegram: @TheRealFaruhaan. Issues and source code: github.com/TheRealFaruhaan/crundi.

Changes

If this policy changes, the new version is published at this address with a new date.