Skip to content
runsIT
Built in CanadaSay hello
boulderme-privacy-policy.txt

PrivacyEffective and last updated

BoulderMe Privacy Policy

BoulderMe is an iPhone app from runsIT that helps adult climbers in Ontario find bouldering partners at the gyms they already climb at. This policy explains what BoulderMe stores, who can see it and how you control it.

What we collect

BoulderMe collects only what it needs to help you find someone to climb with:

  • Sign in with Apple: we keep a one-way hash of your Apple user identifier to recognize your account, and an encrypted Apple token used only to revoke Apple sign-in when you delete your account. We do not store your email address. If Apple shares your first name, it pre-fills your display name and is not kept separately.
  • Your profile: display name, grade range, climbing styles and a short intro.
  • Your gyms: the gyms you climb at and whether you have a membership or use guest passes. This is self-reported and shown as such.
  • Your availability: the weekly times you usually climb.
  • Invitations and chats: the gym, time and note in invitations you send, and messages you write.
  • Safety records: people you block, and reports you make, including a copy of a reported message.
  • Gym suggestions you send us.
  • Confirmations: that you are 18 or older, and which onboarding steps you finished.
  • Technical records: sign-in sessions, a random installation identifier (hashed, for rate limiting), the date you were last active, and request logs (request id, route, status and timing, with no message content, tokens or names).

BoulderMe does not use location services or GPS, and does not access your contacts or photos. It has no advertising or analytics SDKs and does not track you across apps or websites.

Who can see what

  • While discovery is on, other signed-in members can see your display name, grades, styles, intro, gyms and access type, and availability. The app shows you this before you turn discovery on.
  • Others see only that you were “active recently” (within 14 days), never a date.
  • Invitations are visible to the sender and recipient. Chat messages are visible to the two people in the chat.
  • Blocks are visible only to you. Someone you block can no longer see you or contact you.
  • Reports and gym suggestions are seen only by us. A reported member is never told who reported them.

You can pause discovery at any time in Settings. You disappear from discovery and can't receive new invitations, and open chats stay open.

How we use information

We use this information only to run BoulderMe: to sign you in, match climbers by gym, grade and time, deliver invitations and messages, keep members safe, review reports, and keep the service secure. We do not sell personal information or use it for advertising.

Service providers

We use these providers to run BoulderMe. Each processes information only as needed for its service, and some process it outside Canada, including in the United States.

  • Apple: Sign in with Apple.
  • Cloudflare: hosting for the BoulderMe service and request logs.
  • Supabase: database hosting.

On your iPhone

Your sign-in session is kept in the iOS Keychain on this device only. The app keeps a cache of your account so it works offline; it is cleared when you sign out or switch accounts. A random installation identifier stays until you delete the app. Demo mode uses made-up data and never contacts our servers.

How long we keep information

  • Profile, gyms and availability: until you change or remove them, or delete your account.
  • Invitations and chats: until either person deletes their account. Your messages are deleted with your account, and the other person sees “Deleted climber”.
  • Reports: one year after they are resolved, then deleted. They are kept through account deletion so abuse can still be reviewed.
  • Gym suggestions: one year.
  • Expired sign-in sessions: deleted after 30 days.
  • Request logs: Cloudflare's standard retention.

Your controls

  • Edit or remove any part of your profile, gyms or availability in the app.
  • Pause discovery in Settings.
  • Use Export my data in Settings to get a file with your profile, gyms, availability, invitations, chats, blocks and reports.
  • Use Delete account in Settings. Sign-in is blocked and you are hidden right away; your profile, gyms, availability, blocks, suggestions and sent messages are deleted, open invitations are cancelled, chats are closed, and your sessions and Apple sign-in are revoked. A hash of your Apple identifier is kept so a deleted account isn't silently recreated.

You can also ask to access or correct your information, or ask us to delete it, by emailing info@runs-it.com. If you have concerns we haven't resolved, you can contact the Office of the Privacy Commissioner of Canada.

Adults only

BoulderMe is for people 18 and older. We do not knowingly collect information from anyone younger. If you believe a minor is using BoulderMe, report the profile in the app or email info@runs-it.com.

Security

BoulderMe uses HTTPS, short-lived access tokens, encrypted Apple tokens and hashed identifiers. No method of transmission or storage is completely secure, so please don't share passwords or payment details in chats.

Changes and contact

We'll update this page when BoulderMe changes what it collects, and change the date above. Questions: info@runs-it.com.