Privacy

Privacy policy

Last updated: August 2026

CragLocal is a mobile climbing guidebook platform. This policy explains what data we collect when you use the CragLocal app and website, why we collect it, and the choices you have. Questions? Contact us at hello@craglocal.app.

What we collect

• Account data — your email address and name, provided when you create an account with email and password or sign in with Google.
• Content you create — logged ascents (route, date, style, rating, proposed grade), chat messages in chapter chats, and feedback you submit.
• Usage data — anonymised usage events (for example which chapters are viewed and when offline downloads are used) that help us and chapter operators understand how the app is used.
• Push notification tokens — if you enable notifications, a device token used solely to deliver chapter news and access updates you subscribed to.

What we don't collect

• We don't sell your data or share it with advertisers.
• We don't track your precise location; maps use your device's location only on-device.

Who processes your data

• Supabase — database, authentication and file storage.
• Google — only if you choose Google sign-in.
• Expo — push notification delivery.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data at any time. You can delete your account and associated personal data yourself, in the app, under Settings → Delete account — it takes effect immediately. If you can no longer sign in, email hello@craglocal.app from the address linked to your account and we will process the deletion. See deleting your account for exactly what is removed.

Retention

Account data and content are kept while your account is active. When your account is deleted, personal data is removed; aggregated, anonymised statistics may be retained.

Changes

We'll update this policy as the product evolves and note the date of the latest revision at the top of this page.