Privacy Policy

Last updated: 1 April 2026

1. Data We Collect

• Account data: email address, username, profile photo, bio
• Location data: used only at the moment of ascent to verify GPS proximity — we do not continuously track your location
• Ascent photos: stored securely in private cloud storage
• Usage data: peak visits, badges, crowns held

2. How We Use Your Data

• To operate the App and its features
• To calculate leaderboard rankings and crown ownership
• To send push notifications you opt into
• We do not sell your data to third parties

3. Data Sharing

Your username, profile photo, ascent history, and crown holdings are visible to other authenticated users of the App. Your email address is never shared publicly.

4. Data Retention

You may delete your account at any time from Settings → Delete Account. This will permanently erase all your data within 30 days, in accordance with UK GDPR.

5. Security

We use industry-standard encryption (TLS in transit, AES-256 at rest). Auth tokens are stored in encrypted device storage.

6. Your Rights

Under UK GDPR you have the right to: access your data, rectify inaccuracies, erase your data, and object to processing. Contact us at privacy@flaggrab.app.

7. Cookies

The App does not use browser cookies. We use secure, encrypted tokens for authentication.

8. Contact

FlagGrab Ltd
privacy@flaggrab.app