Climb Quest - Privacy Policy

Effective Date: February 28, 2026

Application: Climb Quest

Developer name: sabdel

Your privacy is important to us. This Privacy Policy explains how Climb Quest ("the App," "we," "us," or "our") collects, uses, stores, and protects your information when you use our mobile application.

By using Climb Quest, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

To provide a seamless virtual cycling experience, the App collects and processes the following types of data:

1.1. Account Information

When you create an account to sync your data across devices, we collect your:

• Email address

• Password (securely encrypted)

• Authentication tokens

1.2. Physical & Profile Data

To accurately simulate physical physics and virtual gearing, you may provide:

• Body weight (kg or lbs)

• Bike weight (kg or lbs)

• Preferred units of measurement (metric/imperial)

• Custom virtual drivetrain settings (chainrings and cassettes)

• Gender

1.3. Workout & Activity Data

When you ride a simulated climb, we record:

• Distance, elapsed time, and elevation gain

• Speed, power (Watts), and cadence (RPM) streams

• Climb completion status and history

1.4. Device Permissions & Sensor Data

To connect to your indoor smart trainer, the App requires specific device permissions:

• Bluetooth: Required to discover and connect to FTMS/ANT+ FE-C smart trainers and heart rate monitors.

• Location (Android Only): Android requires precise location permissions to scan for Bluetooth Low Energy (BLE) devices. We do not track, store, or transmit your actual GPS location.

1.5. Third-Party Integrations (Strava)

If you choose to link your Strava account to upload rides, we securely store the OAuth access and refresh tokens provided by Strava. We only use these tokens to upload completed activities to your Strava profile at your explicit request.

1.6. In-App Purchases & Subscriptions

Climb Quest offers premium subscription tiers. All payments are processed securely by your device's respective app store (Apple App Store or Google Play Store) and managed via our partner RevenueCat.

We do not collect, process, or store your credit card information.

RevenueCat processes anonymous purchase receipts to verify your active subscription status across devices.

2. How We Use Your Information

We use the collected data strictly to operate and improve your experience within the App:

• Physics Engine: Your weight, bike weight, and power output are used in real-time to compute your simulated cycling speed against the real-world gradients of famous climbs.

• Bluetooth Control: Sensor data dictates the resistance commands sent back to your smart trainer.

• Cloud Sync: If logged in, your profile, settings, and completed sessions are securely synced to our cloud database (powered by Supabase) to ensure your progression is saved across devices.

3. Data Storage & Security

3.1. Local Storage

Your active ride data and profile are stored locally on your device in a secure SQLite database to allow seamless offline functionality.

3.2. Cloud Storage

Account authentication and cloud syncing are securely handled by Supabase. Your data is encrypted in transit using industry-standard HTTPS/TLS protocols and stored securely in their managed database infrastructure.

3.3. Data Retention

We retain your physical and workout history as long as your account is active. You may request the deletion of your account and all associated data at any time (see Section 5).

4. Sharing Your Information

We do not sell, rent, or trade your personal data.

We only share data in the following specific circumstances:

• Strava Integration: When you explicitly authorize the connection and click "Upload," your workout summary (route name, duration, distance, and date) is shared with Strava's API.

• Service Providers: We utilize Supabase for secure cloud-database hosting and authentication, and RevenueCat to manage and validate subscription entitlements.

• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Your Rights & Choices

Depending on your jurisdiction, you have the right to:

• Access Your Data: View your complete ride history and profile metrics within the App.

• Modify Your Data: Update your weight, bike settings, and preferences at any time.

• Disconnect Services: You can unlink your Strava account directly from the App's settings, which will delete our local authorization to your Strava profile.

• Delete Your Data: You can delete your account. Doing so will permanently erase your profile, settings, and cloud-synced ride history from our servers.

6. Children's Privacy

Climb Quest is not intended for use by anyone under the age of 13. Furthermore, if you are between the ages of 13 and 16 and live in a jurisdiction where parental consent is strictly required for data processing (such as certain EU member states), you must have your parent or legal guardian's permission to use this App. If we discover that a child under 13 has provided us with personal information, we will delete it from our servers immediately.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or regulations. We will notify you of any changes by updating the "Effective Date" at the top of this page. You are advised to review this policy periodically for any changes.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please reach out to us: deloffre.sabine@gmail.com