Rocklands — Privacy Policy

Last updated: [insert date when published]

This Privacy Policy explains what personal information the Rocklands app ("we," "us," or "our") collects, why, and how it's handled, in line with South Africa's Protection of Personal Information Act (POPIA). By using the app, you agree to this policy.

1. Who We Are

Rocklands is operated by [Your Company / Legal Name] ("Rocklands," "we," "us," or "our"), based in South Africa. This policy applies to the Rocklands mobile app and any associated website.

2. Information We Collect

Account information. When you create an account, we collect your email address and password (stored securely by our authentication provider, Supabase — we never see or store your password in readable form), and an optional display name.

Location data. With your permission, the app uses your device's location to record the GPS coordinates of new boulders or problems you capture, and — only while you actively switch on track recording — to trace your walk-in path, including while your screen is off. Track recording is entirely opt-in; we don't collect your location otherwise.

Photos. If you're an approved contributor, the app accesses your camera or photo library, with your permission, to let you photograph boulders and routes or import existing photos.

Device permissions. The app also requests access to your device's motion sensor, purely to detect when you turn your phone sideways so the topo viewer can open in fullscreen landscape mode — this reading isn't stored or transmitted anywhere.

3. How We Use Your Information

We use the information above to:

• Create and manage your account, and control what you can see and do based on your role;
• Let you (or approved contributors) add boulders, problems, and photos to the guide, accurately located;
• Let you record and export your own walk-in tracks, if you choose to;
• Process your subscription purchase through Apple;
• Show you weather forecasts for the area you're viewing;
• Maintain and improve the app, and investigate misuse, including the scraping and redistribution restrictions in our Terms of Service.

We do not use your information for advertising, and we don't use any third-party analytics or tracking tools.

4. Who We Share It With

We share information only with the services that make the app work, never for advertising or resold to third parties:

• Supabase — our backend provider, which stores your account details, the app's content, and any track recordings you make.
• Apple — processes your app purchase and subscription; we never see your payment details.
• Mapbox — provides the map tiles and satellite imagery you see in the app; loading a map involves your device requesting map data from Mapbox directly.
• The Norwegian Meteorological Institute (met.no) — supplies weather forecasts; we send the coordinates of the area you're viewing, not your personal account details.

Each of these providers has its own privacy practices governing how they handle the data that passes through them.

5. Data Retention

We keep your account information for as long as your account is active. If you delete your account, we delete your personal information within a reasonable period, except where we're required to keep it for legal, security, or dispute-resolution purposes. Content you've contributed to the shared guide — such as route photos or descriptions — may remain part of the guide after account deletion, since it's shared, published content rather than personal data about you.

6. Your Rights

Under POPIA, you have the right to:

• Access the personal information we hold about you;
• Ask us to correct inaccurate information;
• Ask us to delete your information, subject to the exceptions in Section 5;
• Object to how we process your information;
• Lodge a complaint with the Information Regulator of South Africa if you believe we've handled your information unlawfully.

To exercise any of these rights, contact us using the details in Section 11.

7. Children's Privacy

Rocklands is not directed at children under 13, and we don't knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we'll delete it.

8. International Data Transfers

Our service providers, including Supabase and Mapbox, may process and store data on servers outside South Africa. Where this happens, we take reasonable steps to ensure your information continues to receive a level of protection consistent with POPIA.

9. Security

We take reasonable technical and organisational measures to protect your information, including access controls that restrict who can see and edit different kinds of content, and encrypted connections between the app and our backend. No system is completely secure, and we can't guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time, for example to reflect a new feature or a change in the law. If we make a material change, we'll let you know inside the app or by email before it takes effect.

11. Contact Us

Questions about this policy, or want to exercise your rights under Section 6? Contact our Information Officer at [support email].