Privacy policy

This policy covers the Beeboard app (iPhone and web), the Beeboard dashboard and this website. It says what we collect, why, who else handles it, how long we keep it, and what you can ask of us. We've tried to keep it plain. If something is unclear, write to hello@beeboard.app.

1. Who is responsible

Beeboard is run by Tobias Karlsson in Sweden. He is the data controller for the personal data described here. "We" and "us" in this policy mean him.

Contact: hello@beeboard.app

2. What we collect in the app

• Account. Your email address, username, first and last name, and how you sign in: email and password, Google, or Apple. If you use Apple's "Hide My Email", we only get Apple's relay address.
• Profile. Profile photo (if you add one), the gyms you belong to and your favourite gym.
• Climbing activity. Sessions with start and end times, ascents, attempts and repeats, notes, grade opinions, circuit runs, and the statistics and achievements we calculate from them.
• Things you create. Gyms, walls, problems, circuits, lists, hold maps, comments, video beta links, and photos of gyms and walls.
• Social. Who you follow and who follows you, people you block, and reports you send about content or other users.
• Location, only if you allow it and only while the app is open. When you add or edit a gym, the app can use your position to centre the map. Your own position is not saved. The gym location you pick is saved with the gym.
• Bluetooth and local network, used to find and talk to the LED controller on a wall. When a wall is connected to its controller, the wall's record stores the controller's connection details: its Bluetooth identifier as seen by the phone that set it up, and its local network address. Other signed-in users can read them.
• IP address, when you sign in with a username. The lookup that finds the email for a username stores your IP address, to limit how often it can be used. These records are not deleted automatically.
• Crash reports from release builds of the iPhone app, through Firebase Crashlytics: device model, system version, app version and what went wrong. They are not linked to your account.
• Usage statistics in the current iPhone test builds. They include Google Analytics for Firebase, which sends basic usage statistics automatically: events such as app opens and session length, with device type and approximate region. These are tied to a random ID for the app installation, not to your name or email.

We don't sell your data, show ads, or use advertising identifiers. We don't track you across other apps or websites. The app takes no payments.

3. This website and the contact form

This website uses no analytics, no tracking and no cookies. Fonts and images are served from our own domain. Like any web host, Firebase Hosting processes your IP address to deliver the pages.

If you use the contact form, we store your name, email address, gym or wall name, what you're interested in, your message, and your browser's user-agent string. The message is delivered to our inbox by Resend, an email service. To stop spam, we store your IP address with a count of the messages sent from it. These records are not deleted automatically.

4. What other users can see

Beeboard is a shared app. What is stored with your profile can be read by anyone signed in to Beeboard, including:

• your profile: username, name and photo
• your sessions, including the notes you write in them
• your ascents, attempts and repeats
• the gyms you belong to, who you follow and who you block
• your lists of problems and circuits, private ones too
• live activity at a wall: a circuit you are playing on it right now, and what you add to or light up in a Jam Session

They can also see gyms, walls, problems and circuits, and the controller details stored with a wall (see section 2).

• Marking a gym, problem or list as private limits where it is listed in the app, and a private gym needs its code to join. It is not a secrecy guarantee: the content can still be read by other signed-in users.
• Other users can't see your email address in the app. But the login screen's username lookup returns the email linked to a username to anyone who asks, limited in how often.
• Gym admins can edit and delete content in their gym. Any signed-in user can currently replace gym and wall photos.

5. Why we use your data, and on what legal basis

• To provide the app (contract): your account, profile, climbing activity, the things you create, social features and statistics.
• To keep Beeboard secure and working (legitimate interest): security rules, spam and abuse limits, backups and crash reports.
• To answer you (legitimate interest): when you write to us through the contact form or by email.
• Location (consent): only with your permission. You can withdraw it at any time in your device settings.

6. Who else handles your data

• Google (Firebase and Google Cloud) runs the app on our behalf: sign-in (Firebase Authentication), the database (Realtime Database), photos (Cloud Storage), server code (Cloud Functions), hosting, Crashlytics and, in the current iPhone test builds, Google Analytics for Firebase. The database is stored in Google's europe-west1 region (Belgium). Some of these services may process data in other countries, including the US, under Google's data processing terms and the EU standard contractual clauses. See Firebase's privacy information.
• Resend delivers contact-form messages to our inbox. See Resend's privacy policy.
• OpenStreetMap. Maps in the app are loaded from OpenStreetMap's servers, which see your IP address and the map area you look at. When you add a gym, the point you pick on the map, or your current position if you use it, is sent to OpenStreetMap's Nominatim service to look up the city and country. See the OpenStreetMap Foundation privacy policy.
• Google Fonts. The app loads its font from Google's font servers, which see your IP address.
• Apple and Google sign-in. If you sign in with Apple or Google, they handle that step under their own privacy policies.

We don't share your data with advertisers or data brokers.

7. How long we keep it

• Account data is kept while your account is active.
• When you delete your account in the app, we delete your profile and activity. Your username and name stay in the search index, and some items, such as comments on other people's sessions and leaderboard entries, may remain. Write to hello@beeboard.app and we remove them by hand.
• Gyms, walls, problems and circuits you added to a shared gym stay with that gym, because other climbers use them. Ask us if you want them removed.
• Backups. We back up the database every day. Daily backups are kept for 7 days, weekly backups for 30 days and monthly backups for up to 12 months. We also keep an encrypted backup copy on a private server. Deleted data stays in the backups until they expire, up to 12 months.
• Test copy. The development environment we use for testing keeps a copy of the database, including account records, refreshed every night. Only our own accounts can sign in there.
• Crash reports are kept for up to 90 days.
• Contact-form messages, and the browser information sent with them, are kept until we have handled them, then deleted by hand. There is no fixed automatic deletion. Copies stay in the backups for up to 12 months.

8. Your rights

Under the GDPR you can ask us to:

• Access the data we hold about you.
• Correct it. Most of your profile can be edited directly in the app.
• Delete it. You can delete your account in the app, under your profile.
• Export it in a machine-readable format. The iPhone app has an export under your profile, with your profile and climbing activity. For anything else, ask us.
• Object to processing based on legitimate interest, or ask us to restrict it.

For anything you can't do in the app, write to hello@beeboard.app. We answer within a month.

If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), at imy.se.

9. Children

Beeboard is not meant for children under 13, and we don't knowingly collect their data. If you believe a child under 13 has an account, contact us and we'll delete it.

10. Changes to this policy

When the app or our services change, this policy may change too. The date at the top shows the latest version. For significant changes, we'll tell you in the app or by email.

11. Contact

Questions about this policy or your data: hello@beeboard.app.