Privacy policy

This policy explains what data Climbl processes, on what basis, for how long, and what you can ask of us. It covers two separate things: this website (climbl.app) and the mobile app. They don't collect the same things, so each section says which one it is about.

Data controller

The data controller is the publisher of Climbl, described in the legal notice. Contact for any question or request about your data: support@climbl.app. Climbl is not required to appoint a data protection officer and has not appointed one.

What this website processes

• Early access sign-up — your email address, the platform you chose (iOS or Android), the sign-up date and the technical description of your browser (user agent). The user agent is used only to weed out automated sign-ups and to know which devices to test on first.
  Legal basis: your consent, given by submitting the form.
  Retention: up to 12 months after the app's public launch, or until you ask for deletion if that comes sooner.
• Audience measurement — if and only if you accepted it in the banner. We then use Google Analytics for Firebase and PostHog (servers located in the European Union), which set cookies and an installation identifier, and record page views and waitlist sign-ups. Until you accept, no measurement script is loaded and no cookie is set. This data is never matched with your email address.
  Legal basis: your consent, which you can withdraw at any time.
  Retention: 14 months maximum.
• Link counting — when you open a climbl.app/get link (from a social network or a share), we count that click with PostHog (servers located in the European Union), without asking you first but with no cookie, no stored identifier and no profile: only the link's channel, the type of device (iOS, Android or computer) and the site you came from are sent. Two clicks by the same person cannot be linked to each other.
  Legal basis: our legitimate interest in knowing which channels make Climbl known.
  Retention: 14 months maximum.

This website sets no other cookie: no advertising, no social networks, no resale to third parties.

What the app processes

• Your logbook: routes, grades, styles, gyms, results and how your sessions felt. They are used to produce your stats, spot your blind spot and calibrate your plans.
  Legal basis: performance of the service you ask for.
  Retention: as long as your account exists. The app can be used in guest mode, in which case the data stays on your device.
• Account: email address and sign-in identifier.
  Retention: as long as your account exists.
• Usage measurement: anonymous statistics (screens opened, steps reached, purchases) tied to a random installation identifier — never your name, your email or the content of your sessions. Processed by PostHog (servers located in the European Union) and in our Supabase database. You can turn them off at any time in the app: Profile → Privacy policy.
  Legal basis: your consent.

Processors

Climbl relies on a small number of providers, each for a single purpose: Google / Firebase (hosting this website, storing early access sign-ups, measuring this website's audience), Supabase (account and logbook sync), RevenueCat as well as Apple and Google (subscription management), PostHog (usage measurement for this website and the app, hosted in the EU). None of them may use this data for their own purposes.

Transfers outside the European Union

Google services (Firebase and this website's audience measurement) may transfer data to the United States. These transfers rely on the EU-US Data Privacy Framework, under which Google LLC is certified, supplemented by the European Commission's standard contractual clauses. All other processing (logbook, account, app usage measurement) stays hosted in the European Union.

Payments

Subscriptions are collected by the App Store and the Google Play Store. Climbl never has access to your banking details and keeps none.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to set instructions for what happens to it after your death. Where processing is based on your consent, you can withdraw it at any time, without affecting what was done before.

• This website's audience measurement: change your cookie choice.
• App usage measurement: Profile → Privacy policy.
• Account and logbook: see Account deletion.
• Everything else, including access and portability: support@climbl.app. We reply within one month.

If you are not satisfied with our reply, you can lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr).

Changes to this policy

Any change will be published on this page with a new update date. If the change concerns processing based on your consent, you will be asked for it again.