Privacy Policy

1. Data controller

The data controller for the App is Piton Equipment (Piton - SARL El Cap), registered office at 7 rue des Compagnons, 44800 Saint-Herblain, France (SIREN 451 364 582). Contact: commercial@pitonequipment.eu.

2. Data we collect

We collect the following categories of data when you use the App:

• Account data: email address and password (if you sign up directly), or your name, email address, and profile photo (if you sign in with Google).
• Profile data: your chosen pseudo, profile photo, and, where applicable, ambassador status.
• User content: routes you create (holds, colors, grade), comments, ratings, beta videos, and playlists you create or save.
• Activity data: your attempts, likes, and follows, used to build your progress and feed within the App.
• Bluetooth connection data: when you pair with a Piton Board, the App exchanges data directly with the board over Bluetooth Low Energy (BLE) to light up holds. This exchange happens locally between your phone and the board and is not sent to our servers. Note that your phone's operating system (Android) may require you to grant a location permission in order to allow Bluetooth scanning; the App does not use this permission to collect or store your location.

3. How we use your data

We use this data to: provide and operate the App's features (route creation, feed, progress tracking, social features); personalize your experience; enable community interactions (comments, likes, follows, playlists); respond to your support requests; maintain the security of the service and enforce our Terms of Service.

4. Legal bases

We process your data based on the performance of the contract between you and Piton Equipment (providing the App's services), our legitimate interest in operating and securing the community features, and, where applicable, your consent (for example, when you choose to sign in with Google).

5. Who we share your data with

The App's backend runs on Google Firebase (Authentication, Firestore database, Cloud Storage, and Cloud Functions), which acts as our data processor. If you use Google Sign-In, Google also acts as an identity provider for that authentication step. We do not sell your data, and we do not share it with advertisers.

6. International transfers

Your data (Firestore database and Cloud Storage files) is hosted in Google Cloud's europe-west1 region (Belgium, European Union). Some limited processing tied to Firebase Authentication and Google Sign-In may be handled by Google under its own international data transfer safeguards.

7. Data retention and deletion

We keep your data for as long as your account is active.

To delete specific content (a route, a comment, a beta video, your profile photo) without deleting your account, use the delete action directly on that content in the App — these deletions are immediate and do not require contacting us.

To delete your entire account and data, go to Settings → Delete account in the App. This starts a 30-day grace period (cancellable by signing back in) after which your account, profile, routes, comments, beta videos, and follow relationships are permanently deleted. Some content may be retained in an anonymized or aggregated form (for example, route statistics) after account deletion. Security event logs tied to your account are kept for our legitimate security interest even after deletion.

If you cannot access the App, you can request deletion of some or all of your data by emailing commercial@pitonequipment.eu from the email address associated with your account.

8. Your rights

You have the right to access, rectify, erase, restrict, or object to the processing of your data, and the right to data portability. You can exercise most of these rights directly from the App (editing your profile, deleting content, deleting your account), or by contacting us at commercial@pitonequipment.eu. You may also lodge a complaint with the French data protection authority, the CNIL.

9. Children

The App is not directed at children. If you are below the age of digital consent in your country, you may only use the App with the involvement of a parent or guardian.

10. Security

Authentication is handled by Firebase Authentication; we never store your password in plain text. Access to your data in our database is restricted by security rules that only allow you (and, for public content, other users) to read or write what they are authorized to.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the App or applicable law. Continued use of the App after an update constitutes acceptance of the revised policy.

12. Contact

Questions about this Privacy Policy can be sent to commercial@pitonequipment.eu. See also our Terms of Service and App Support pages.