1. Information We Collect

We collect the following personal information when you use Flash Climber:

• Phone number — used for account authentication via SMS
• Name and profile information — displayed on your public profile
• Climbing activity — routes logged, ratings, achievements, and competition results
• Location data (optional) — used for gym proximity features when you grant permission
• Payment information — processed securely by Stripe; we do not store card details
• Device information — IP address, browser type, for security and analytics

2. How We Use Your Information

• Provide and improve the Flash Climber service
• Authenticate your identity and secure your account
• Display leaderboards, profiles, and competition results
• Process Flash Coin purchases and transfers
• Send service-related SMS notifications (e.g., OTP codes)
• Detect and prevent fraud or abuse

3. Data Sharing

We do not sell your personal information. We share data only with:

• Partner climbing gyms — your check-in records and waiver status
• Stripe — payment processing
• Twilio — SMS delivery for authentication
• AWS — secure data storage

4. Data Retention

We retain your account data for as long as your account is active. Climbing activity data (route logs, ratings) is retained to preserve your progression history. You may request deletion of your account and associated data at any time.

5. Your Rights

Under Canadian privacy law (PIPEDA), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Withdraw consent for optional data collection (e.g., location)

6. Security

We use industry-standard security measures including encrypted connections (TLS), secure password hashing, rate limiting, and access controls. Payment processing is handled entirely by Stripe and we never store credit card information.

7. Children's Privacy

Minors under 16 require a parent or guardian to sign a waiver and manage their account through our household system. We do not knowingly collect information from children without parental consent.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via the app. Continued use after changes constitutes acceptance.

9. Contact

For privacy-related questions or to exercise your rights, contact us at privacy@flashclimber.app