Privacy Policy

Last updated: July 19, 2026

Boulderest ("the app", "we") is a bouldering-gym companion app. This policy explains what data the app stores, why, and what control you have over it. The short version: we only store what the app needs to work, we never sell your data, and there is no advertising or third-party tracking of any kind.

Data you give us

Account: your email address, a password (stored only as a secure hash) and a display name.
Optional profile details: gender, birth date, height, wingspan, a short bio, a link and an avatar photo. Each of these is optional, and you choose per field whether it is shown publicly.
Climbing activity: the boulders you log as topped or flashed, likes, comments and league standing derived from them.
Media you upload: beta videos and photos you choose to share. These are visible to other users of your gym.

Data created automatically

Crash and error reports: if the app hits a problem, it records a technical description of the error so we can fix it. These reports do not contain your password or your media.

What we do NOT do

No advertising, no ad identifiers.
No selling or renting of personal data — to anyone, ever.
No third-party analytics or tracking SDKs.
No reading of your contacts, location, or photo library beyond the photos and videos you explicitly pick.

Where your data lives

All data is stored with our hosting provider Supabase on servers located in the European Union (AWS eu-west-3, Paris). Data is encrypted in transit (HTTPS) and access is enforced row-by-row in the database, so other users can only ever read what the app deliberately makes public (for example your display name in a ranking).

Who can see what

Your display name, avatar, league results and public profile fields are visible to other users of the app.
Beta videos and comments you post are visible to other users alongside your display name.
Profile fields you mark as private are visible only to you.
You can hide yourself from rankings entirely in Settings > Privacy.

Your rights and controls

Export: Settings > Download my data gives you a copy of your profile, ascents and comments.
Delete: Settings > Delete my account permanently removes your account, ascents, comments and videos. This works entirely in-app, no email required.
Correct: every profile field can be edited in-app at any time.
Boulderest is operated from Zürich, Switzerland, and complies with the Swiss Federal Act on Data Protection (FADP). For users in the EU, the GDPR applies as well. You can lodge a complaint with the Swiss FDPIC or, in the EU, with your national data-protection authority.

Retention

Your data is kept for as long as your account exists. When you delete your account it is removed immediately from the live database; server backups roll off automatically within 30 days.

Children

Boulderest is not directed at children under 13, and you must be at least 13 to create an account (or the higher minimum age your country's law requires for consenting to data processing).

Changes

If this policy changes in a meaningful way we will say so in the app. The "last updated" date at the top always tells you the current version.

Contact

Questions or requests about your data: hello@boulderest.app.