Account: your email address, used to sign you in and send notifications you choose. If you sign in with Apple or Google, they tell us your email address (Apple may give a private relay address instead) and a sign-in ID. We never see your Apple or Google password.

Profile and activity: the name and climbing details you add, favorite gyms, home gyms, partner posts and chats, climbing sessions you log (each climb’s grade, result, and, if you add them, its route color and name), and your notification settings.

Friends: your friend code, who you are friends with or have asked, and, only if you choose to check in, the gym you are at and when the check-in ends (a few hours at most). Friends can see your name and your check-in. Nobody sees a live position. You can also let climbers who share a home gym find you by name, and switch that off.

Your AI choice: whether you allowed or declined sending photos to the AI service, and when you chose. It is saved on your account, so it follows you to other devices.

Notifications: a device token (so we can send push notifications to your phone) and your time zone (so reminder times read correctly).

Camera: used only when you tap to scan a friend’s QR code or photograph a route tag. A friend’s QR code is read on your phone. A tag photo is handled as described under Artificial intelligence below.

Location: when you allow it, your phone uses its location to find gyms and shops near you. We ask our servers and the map services for a coarse area (about 10 km), not your exact position.

When you record a route, you can photograph its tag and an AI service, Anthropic’s Claude, reads the grade, hold color and name from the photo. It only does this if you are signed in and have said yes. We ask the first time you use it, save your answer on your account, and check it on our server before every request. You can change your mind any time in Settings under AI features.

What is sent when you use it: the photo of the tag (resized, with its location data removed). Photos that are not suitable for all ages are not used.

What we keep: we do not store the photo. We keep the grade, color and name only if you save them in your climb log. We keep a simple daily count of how many scans you ran, to limit use. Anthropic handles what it receives under its own terms and privacy policy (anthropic.com/legal/privacy), which can include keeping it for a limited time for safety and abuse prevention.

If you say no, you can still log every climb by picking the grade and color yourself.

If you subscribe to Belay Buddy Plus, Google Play or the App Store takes the payment. We never see your card or payment details.

We use RevenueCat to manage subscriptions. It receives your account ID, your device’s store receipt and what you bought, and it tells us whether Plus is active and when it ends. We keep only that: that your account has Plus, and until when.

We use your subscription status only to turn Plus features on or off. We do not use it for ads.

Supabase hosts our database, sign-in, and server functions.

Apple delivers push notifications to iPhones and distributes the iPhone app. Google (Firebase Cloud Messaging) delivers push notifications to Android phones, and Google Play distributes the Android app.

RevenueCat manages Belay Buddy Plus subscriptions, as described above.

Our email provider sends sign-in codes and the email notifications you choose.

Apple and Google, if you choose to sign in with them, confirm who you are under their own privacy policies.

OpenStreetMap, through the Overpass service, and the Overture Maps Foundation’s open data supply gym and shop listings, and OpenBeta supplies outdoor crags. We send them a coarse area, never your identity.

Anthropic reads route tag photos if you turn on AI features, as described above.

We do not sell your data and we do not show ads.

You can turn AI features off or on in Settings, turn notifications off by type, and remove anything you posted. You can check out of a gym any time, remove a friend, and turn off "find me by name" on the Friends screen.

You can delete your account in Settings under Privacy & safety, or by following the steps at belaybuddy.app/delete-account. That permanently deletes your profile, favorites, home gyms, posts, chats and logs.

You can block other climbers and report posts.

If you suggest opening hours for a gym or shop, we keep the hours, the place and your account so we can review them. Approved hours are shown to everyone without your name.

Belay Buddy is not directed to children under 13, and we do not knowingly collect their information.

If this policy changes in a way that matters, we will update the date above and, for new uses of your data such as a new AI feature, ask you first.

Questions or requests: support@belaybuddy.app