Privacy Policy

1. Who we are

Sqrls is a climbing logbook mobile and web application that lets climbers log ascents, view gym route information, and connect with friends. The App is operated by:

Mathias Steger
Germany
Contact: kamaprogrammieren+privacy@gmail.com

For the purposes of the EU General Data Protection Regulation (GDPR / DSGVO), Mathias Steger is the data controller ("Verantwortlicher").

2. Data we collect

2.1 Account data

When you create an account, we collect and store the email address and password you provide. Authentication is handled by Google Firebase Authentication; passwords are never stored in plain text by us. We also store a chosen first name and a randomly assigned "user tag" used to identify you to other users in the App. Verification and password-reset emails are sent on our behalf by Brevo (an EU-based email provider); only your email address is shared with Brevo for this purpose.

2.2 Activity data

When you log an ascent, we store:

• which route you climbed and at which gym
• the date and time of the ascent
• whether you flashed it (climbed on the first attempt)
• your self-reported feeling rating, if you provide one
• the order in which you topped routes (your overall ascent count)

2.3 Social connections

Friend connections you make in the App (sent requests, accepted friends, friend-of-friend relationships) are stored so we can show you and your friends each other's recent activity.

2.4 Subscription data

If you subscribe to a paid tier, our subscription provider (RevenueCat) processes the purchase and stores a record of your subscription status linked to your user ID. We do not store your payment method details. Payment is processed by Apple (App Store) or Google (Google Play); their respective privacy policies apply to that transaction.

2.5 Device permissions

The App requests these device permissions:

• Camera — to scan QR codes at the gym. Images captured during scanning are processed locally on your device and never uploaded.
• Photo library — to save a QR code or route image to your device's gallery, only when you explicitly tap a save action.

2.6 Diagnostic data

We may collect basic diagnostic information (crash reports, general app usage events) through Google Firebase to help improve stability. This data is not used to personally identify you.

3. How we use your data

We use the data described above to:

• authenticate you and keep your account secure;
• display your ascents, statistics, and route history;
• show you and your friends each other's activity, where consented via friend requests;
• display recent ascents and route information for gyms you interact with;
• provide subscription features after a successful purchase;
• respond to support requests and enforce our terms of service.

4. Third-party services

The App relies on the following third-party services. Each has its own privacy practices; we link to each below.

• Google Firebase (Authentication, Firestore, Cloud Storage, Cloud Functions) — privacy.
• RevenueCat (subscription state management) — privacy.
• Brevo (Sendinblue/Brevo SAS, EU — transactional email delivery for account verification and password-reset messages) — privacy.
• Apple App Store (in-app purchase processing on iOS) — privacy.
• Google Play (in-app purchase processing on Android) — privacy.

5. Data retention

We retain your account data for as long as your account exists. Activity data (ascents, friend connections) is retained until you delete it or delete your account.

6. Security

Data in transit between the App and our servers is encrypted via HTTPS / TLS. Data at rest is stored in Google Firebase infrastructure, which provides industry-standard encryption.

7. Children

The App is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top. Material changes will be communicated within the App.

9. Contact

For any privacy-related question or request: kamaprogrammieren+privacy@gmail.com

Datenschutzerklärung (Deutsch)

Diese Datenschutzerklärung ist die deutsche Übersetzung der oben stehenden englischen Fassung. Bei Abweichungen ist die englische Fassung maßgeblich. Bitte wenden Sie sich an kamaprogrammieren+privacy@gmail.com, falls Sie eine vollständige deutsche Fassung benötigen.

Verantwortlicher im Sinne der DSGVO:
Mathias Steger, Deutschland
Kontakt: kamaprogrammieren+privacy@gmail.com

Eine ausführliche deutsche Fassung wird in Kürze ergänzt.