Privacy Policy

Last updated: March 14, 2026

Introduction

inClimb ("we", "our", or "us") operates the inClimb mobile application. This Privacy Policy explains how we collect, use, and protect your information when you use our app.

Information We Collect

We collect the following types of information:

• Account information: email address, display name, and username when you create an account.
• Authentication data: sign-in credentials through email/password, Google Sign-In, or Sign in with Apple.
• Profile information: optional profile photo you choose to upload.
• Climbing data: boulder records, sends, attempts, grades, and comments you create.
• Media: photos and videos you upload for boulders and climb records.
• Gym membership: information about gyms you join or manage.
• Usage and crash data: diagnostic information collected automatically to help us identify and fix issues.
• Analytics data: anonymized in-app events (such as QR code scans, gym creation, and climb logging) to help us understand how the app is used and improve it.

Camera Access

The app accesses your device camera in two ways:

• QR code scanning: the camera is used to scan QR codes that identify climbing routes. No images or data are captured or stored during this process.
• Photo and video capture: you may use the camera to take photos or record videos to attach to your profile or climbing records. Media captured this way is uploaded to and stored on our servers (Firebase Storage) as part of your content.

How We Use Your Information

We use your information to:

• Provide and maintain the inClimb service.
• Authenticate your identity and manage your account.
• Display your climbing activity and records.
• Enable gym management features for administrators and routesetters.
• Diagnose crashes and improve app stability.
• Analyze anonymized usage patterns to improve and develop new features.

Data Storage and Security

Your data is stored securely using Google Firebase services, including Firebase Authentication, Cloud Firestore, and Firebase Storage. User-uploaded media is delivered through a content delivery network (Bunny.net) for faster loading. All data is transmitted over encrypted HTTPS connections. We implement appropriate technical measures to protect your personal information.

Data Retention

We retain data for as long as necessary to provide the service:

• Account and profile data: retained while your account is active and permanently deleted when you delete your account.
• Climbing records and comments: retained while your account is active and permanently deleted when you delete your account.
• Uploaded media (photos and videos): retained until you remove the content or delete your account.
• Crash and diagnostic data: retained in accordance with Firebase Crashlytics' data retention policy.
• Analytics data: retained in accordance with Firebase Analytics' data retention policy.

Third-Party Services

We use the following third-party services:

• Google Firebase: authentication, database, and file storage.
• Firebase Crashlytics: crash reporting and app stability monitoring.
• Google Sign-In: optional authentication method.
• Apple Sign-In: optional authentication method.
• Firebase Analytics: anonymized event analytics to help us understand usage patterns and improve the app.
• Bunny.net (CDN): content delivery network used to serve user-uploaded media (photos and videos) faster from edge servers worldwide. Media is cached on Bunny.net infrastructure.

These services have their own privacy policies governing their use of your data.

Data Sharing

We do not sell your personal information. Your climbing records and profile information may be visible to other users of the app. We may share data only when required by law.

We share data with third parties only as necessary to operate the app:

• Firebase Crashlytics: receives diagnostic and crash data to help us identify and fix issues.
• Google Firebase (Authentication, Firestore, Storage): processes account credentials, stores your profile, climbing records, and uploaded media on our behalf.
• Google Sign-In: receives your identity information solely to authenticate you. No climbing data is shared.
• Apple Sign-In: receives your identity information solely to authenticate you. No climbing data is shared.
• Firebase Analytics: receives anonymized event data (e.g. feature usage) to help us understand how the app is used. No personally identifiable information is shared.
• Bunny.net: caches and delivers user-uploaded media from edge servers. Your IP address is visible to Bunny.net when you load photos or videos in the app. No personal data beyond IP addresses and cached media content is shared.

Each of these providers is contractually committed to data protection standards consistent with this policy.

Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (available directly via Settings → Delete Account).
• Object to or restrict certain processing of your data.

To exercise any of these rights, contact us at support@inclimb.app.

Account Deletion

You can delete your account at any time through the Settings screen in the app. When you delete your account, your profile data and associated records will be permanently removed from our systems.

Children's Privacy

Our app is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at support@inclimb.app.

Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available via the Privacy Policy link in the app. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, please contact us at support@inclimb.app.