Privacy Policy

Last updated: April 10, 2026

Overview

Crag Log is a climbing community app that lets you log climbs, plan trips, share activity with friends, and discover crags and gyms. This page describes what data we collect, why we collect it, and how it is stored and shared.

Data We Collect

  • Account information: name, email, username, optional profile photo and bio. Provided by you when you sign up, or by Google Sign-In if you choose that option.
  • Climbing activity: ticks, gym sessions, trips, reviews, ratings, and notes you create in the app.
  • Social activity: follows, comments, and posts you create.
  • Location: approximate device location, only when you grant permission, used to show nearby crags and gyms on the map. Location data is processed on-device and is not stored on our servers.
  • Photos: any photos you choose to attach to a route, gym, or post.
  • Diagnostic information: standard crash logs and error reports provided by Apple, Google, and Firebase to help us fix bugs.

How We Use Your Data

  • To provide the core features of the app (logging climbs, viewing your history, planning trips, browsing areas).
  • To show your activity to people you follow or who follow you, according to your visibility settings.
  • To improve the app by analyzing aggregated, anonymized usage patterns and crash reports.
  • To send you product-related notifications (if you enable them).

We do not sell your data, run third-party advertising, or share your personal information with marketers.

Where Your Data Is Stored

Your data is stored in Google Firebase (Firestore, Authentication, Storage), hosted on Google Cloud Platform infrastructure in the United States. Firebase is operated by Google LLC and is subject to Google's privacy and security practices.

Third-Party Services

  • Google Firebase — authentication, database, file storage, hosting.
  • Google Maps — to render maps and geocoding for crag locations.
  • Anthropic Claude — to power the trip planner chat assistant. Conversations with the assistant are sent to Anthropic for processing and are subject to Anthropic's privacy policy.
  • OpenBeta — public climbing area and route data is sourced from OpenBeta's open-source database. We do not send your personal data to OpenBeta.

Your Choices

  • Edit your data: you can update or delete any climb, trip, review, or post you've created at any time from inside the app.
  • Control visibility: trips support public, friends-only, and private visibility settings.
  • Revoke location: turn off location permission for Crag Log in your device settings at any time.
  • Delete your account: open the Profile tab and choose "Delete account." This permanently removes your profile, ticks, gym logs, and trips from our database.

Children

Crag Log is not directed at children under 13. If you believe a child has created an account, contact us at the email below and we will delete the account.

Security

All data is transmitted over HTTPS/TLS. Authentication is handled by Firebase Authentication. Database access is restricted by Firebase Security Rules so that only you and people you've authorized can read or modify your personal data.

Changes to This Policy

We may update this policy as the app evolves. Material changes will be announced in the app or by email. The "last updated" date at the top of this page reflects the most recent revision.

Contact

Questions, concerns, or data deletion requests: email david.lonneman@gmail.com.