Boldr is a tiny operation. We store the bare minimum needed to run the app — your account, your session history, and your subscription status. No advertising trackers, no third-party analytics, no selling your data. Ever.
Who runs Boldr
Boldr is operated by an individual developer in the Netherlands. For any privacy question, write to info.boldr.app@gmail.com. We reply within a few days.
What we collect
When you sign up, we collect:
- ·Your email address — used to send magic-link login codes and very occasional product updates if you opt in.
- ·Your first and last name — so we can greet you, and so a future shared-routine feature can attribute work to you.
- ·Climbing context — your level (V-scale or French) and what equipment you have at home / at the gym. Used to pick appropriate daily exercises.
While you use Boldr, we record:
- ·Sessions you complete — the exercise, time spent, and how you felt afterward (good / fine / sore / pain).
- ·Days you climbed — only if you log them.
- ·Max-log entries — hangs and pull-ups if you choose to track them.
- ·Hangboard sessions, routines and training plans — what you did and when, so the coach can dose your next session.
- ·Bodyweight — only if you enter it. Finger strength is measured relative to bodyweight; you can leave it out.
- ·Your answers to the coach — how your fingers feel, your goal, your week.
- ·Feedback you send — the message, the screen you were on, your device type and the app version.
- ·Subscription status— whether you're free, trial, or premium.
- ·Usage events— which screens you open, when you open the app, whether it's installed on your home screen, the site or link that brought you to Boldr, and errors the app runs into. This stays in our own database (not with an analytics company) and is only used to improve Boldr. It's deleted after 13 months.
What we don't collect
No location tracking. No third-party advertising IDs. No social-media pixels. No Google Analytics, no Meta Pixel, no Hotjar. Usage is measured by Boldr itself and never leaves our own systems.
Where your data lives
Boldr runs on Vercel (Frankfurt region) for the application server, and Supabase (EU region) for the database and authentication. Both are GDPR-compliant. Payment processing goes through Mollie (Amsterdam) — they handle the card details and send Boldr only a subscription status. We never see your card number.
Who we share data with
We share only what's strictly necessary to operate the service:
- ·Vercel— your account and session data while the page is rendered. Vercel doesn't persist it.
- ·Supabase — the database that stores your account and your sessions, subject to their privacy policy.
- ·Cloudflare R2 — encrypted nightly backups of the database, in a private storage bucket, so nothing you log is lost.
- ·Resend — delivers the login codes and emails we send you. It receives your email address and the message.
- ·Mollie — for billing if you upgrade to premium. They receive your email and the amount; we receive a payment confirmation back.
That's it. We don't share your data with marketers, advertisers, or anyone else.
How long we keep it
Your data stays as long as your account exists. Delete your account in settings and we purge everything — sessions, climbing logs, profile, max logs, feedback, usage events — right away from the live database, and from our rolling backups within 90 days. Payment records are kept for 7 years for Dutch tax compliance, but we strip your email from them on deletion.
Your rights
Under GDPR (Dutch "UAVG"), you can:
- ·See what we have— download a JSON dump of your profile and all your sessions from settings → "Download my data".
- ·Delete it all — also in settings. Confirmation required; this is permanent.
- ·Correct anything wrong— most fields are editable directly. Email us if you can't change something.
- ·Complain to the Dutch DPA — Autoriteit Persoonsgegevens.
Cookies and local storage
Boldr uses a session cookie (set by Supabase) so you stay logged in across visits. Two first-party cookies help us count visits: a random visitor id (bt_aid, one year) and where you first came from (bt_src, 90 days). They're only read by Boldr, never shared, and aren't used for ads — which is why there's no banner to dismiss. We also store your theme preference and a few screen settings in local storage on your device.
Children
Boldr is intended for users 16 and older. We don't knowingly collect data from anyone under 16. If you believe a child has signed up, email us and we'll delete the account.
Changes to this policy
If we change something material — adding a new processor, changing what we collect — we'll send an email to everyone with an account. The current version is dated at the top of this page.
Contact
Questions, requests, or concerns: info.boldr.app@gmail.com.
Boldr is responsible for your data (the "controller"). Company details are at the end of the terms.