Privacy Policy

We use the information we collect to:

• Create and manage your account
• Deliver AI-powered coaching insights, session debriefs, and grade progression analysis
• Personalise the App experience based on your climbing history
• Send you session reminders and product updates you have opted into
• Analyse usage patterns to improve features and fix issues
• Respond to support requests and communicate with you
• Comply with legal obligations

We do not use your data to serve third-party advertisements.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Contract performance: to provide the App services you have signed up for
• Legitimate interests: to improve the App, ensure security, and prevent fraud
• Consent: for optional communications such as marketing emails — you may withdraw consent at any time
• Legal obligation: where processing is required to comply with applicable law

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain certain information or where anonymised aggregate data is retained for analytics.

We do not sell your personal data. We share information only in the following circumstances:

• Service providers: we share data with Supabase, Anthropic, Mixpanel, and Vercel solely to operate and improve the App, under data processing agreements that restrict their use of your data
• Legal requirements: we may disclose data if required by law, court order, or to protect the rights and safety of our users or the public
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred — we will notify you in advance

We implement industry-standard technical and organisational measures to protect your data, including:

• HTTPS/TLS encryption for all data in transit
• Encrypted storage via Supabase with row-level security policies
• Access controls limiting who can access production data
• Regular security reviews of our infrastructure

No method of transmission or storage is 100% secure. We encourage you to use a strong, unique password for your account.

The App is not directed at children under the age of 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data ('right to be forgotten')
• Portability: request your data in a structured, machine-readable format
• Objection / restriction: object to or request restriction of certain processing
• Withdraw consent: for any processing based on consent, withdraw at any time without affecting prior processing

To exercise any of these rights, contact us at felix@boulder.coach. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Boulder Coach is operated by Seip Consulting, based in Germany. Your data may be transferred to and processed in the United States or other countries where our service providers operate. For transfers outside the EEA, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms to ensure your data is protected to EEA standards.

The App may contain links to third-party websites or services (for example, our Instagram page). This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Displaying a notice in the App
• Sending an email to the address associated with your account

The updated policy will take effect 30 days after notification, giving you time to review the changes. Continued use of the App after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: