Privacy Policy

Effective August 17, 2026

The short version

Klimb uses your data to run your logbook, stats, social features, purchases, and notifications. We do not sell personal information, run third-party ads, or track you across other companies' apps.

Klimb is a personal climbing logbook operated by Nick Yocom. This policy explains what the app collects, why it is used, where it goes, how long it is kept, and the choices available to you.

Information you provide

Account and profile: email address, display name, username, optional avatar and bio, authentication provider identifier, home or visiting gym, and app preferences.
Climbing and social content: routes, grades, outcomes, attempts, ratings, notes, projects, comments, reactions, friend relationships, reports, and photos or videos you choose to upload.
Support: information you send when contacting Klimb by email or social media.

Information used when features run

Location: when you set or change a gym, start a gym visit, or make the first verified log at a gym, Klimb reads your device location to check whether you are within 30 miles. The comparison happens in memory. Klimb does not store device coordinates or a location history and does not use background location.
Notifications: with permission, Klimb stores an Apple push token, platform, time zone, and notification preferences.
Purchases: Apple provides product and transaction identifiers, entitlement status, trial or renewal dates, and environment so Klimb can verify Pro access. Klimb does not receive your payment-card details.
Service and security data: authentication tokens are stored on your device. Hosting and authentication providers may process basic network and diagnostic information, such as IP address, request time, and errors, to deliver and secure the service.

How Klimb uses information

Provide accounts, logbooks, stats, recaps, and gym features.
Apply your profile, post, friend-list, and notes visibility choices.
Process friend requests, reactions, sharing, reports, and blocks.
Verify purchases and deliver notifications you enable.
Prevent abuse, troubleshoot problems, and provide support.

Legal bases for processing

Klimb processes account, logbook, social, and purchase-entitlement information as needed to provide the service you request and carry out the Terms.
Device permissions, including notifications and location, are used only when you choose or enable the related feature and can be withdrawn in iOS Settings.
Security, fraud prevention, moderation, support, and service improvement rely on Klimb's legitimate interests in operating a safe and reliable service, balanced against user rights.
Information may also be processed when necessary to comply with a legal obligation or protect a person's vital interests.

Who receives information

Supabase: database hosting, authentication, storage, and server functions.
Apple: Sign in with Apple, StoreKit purchases, App Store subscription management, and Apple Push Notification service.
Google: account authentication only when you choose Continue with Google.
Apps you choose: when you intentionally share through Messages, Instagram, or the iOS share sheet, the selected app receives the content you chose to send under its own privacy terms.
Other Klimb users: profile and climbing content is shown as described by the app's visibility controls. Reports are private.
Legal and safety: information may be preserved or disclosed when reasonably necessary to comply with law, enforce terms, or protect people and the service.

Service providers are expected to protect personal information consistently with this policy and applicable law and may process it only to provide their services to Klimb.

AI note: Klimb does not currently send personal information or user content to a third-party generative-AI provider.

Public and private content

Account controls determine whether sends, projects, notes, and your friend list appear to other users. Individual climbs can also be excluded from your profile.
Avatar and route media are delivered using media URLs. A route photo can be visible with the shared route even when that climb is excluded from your profile. Do not upload confidential images.
Videos added to the community video library are visible to signed-in Klimb users by default. You can remove your video from the library at any time. Blocking is also applied to library visibility.
Sharing outside Klimb is always initiated by you. Once sent to another app or person, their handling of that copy is outside Klimb's control.

Retention and deletion

Account, logbook, social, notification, and entitlement data is generally kept while your account is active or as needed to provide the service.
Profile → Settings → Delete account permanently removes your account, personal logbook, social records, text content, avatars, and uploaded route media. Basic de-identified route facts—such as gym, hold color, climbing type, and grade—may remain so another user's historical log does not break.
Limited records may be retained when required for fraud prevention, security, legal compliance, or resolving a dispute. Apple keeps its own purchase records under Apple's policies.
Deleting a Klimb account does not cancel an Apple subscription. Use Manage Subscription before deletion if you do not want it to renew.

Your choices

Edit account information and visibility controls in Settings.
Withdraw location, camera, photo, or notification permission in iOS Settings.
Block users and report objectionable users or route content.
Request access, correction, or deletion by using in-app controls or emailing realklimb@gmail.com. We may need to verify the request.
Depending on where you live, you may also request a portable copy, restriction of processing, or object to certain processing; withdraw consent where consent is the basis; and complain to your local data protection authority.

International processing

Klimb is operated in the United States. If you use it elsewhere, information may be processed in the United States and in locations where the service providers listed above operate.
Where applicable law requires it, Klimb relies on legally recognized safeguards offered by those providers for international transfers.

Tracking and advertising

Klimb does not sell or share personal information for behavioral advertising and does not use third-party advertising trackers. Because Klimb does not track people across unaffiliated services, browser “Do Not Track” signals do not change app behavior. Platform privacy permissions are respected.

Children

Klimb is a general-audience service for people age 13 and older. It is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child under 13 created an account.

Security and changes

Klimb uses encrypted network connections, authentication, and database and storage access controls. No system can guarantee absolute security. Material policy changes will be identified by a new effective date and communicated in the app when appropriate.

Contact

Privacy requests and questions: realklimb@gmail.com.