PeakBeen is an app for logging the summits you have climbed and seeing them on a map. This policy explains what personal data the app and this website handle, why, who else receives it and what you can do about it. We try to collect as little as possible: the app is built so that most of what you do never leaves your phone.
Who is responsible
PeakBeen is made by Pol Salvia, who is the data controller. For anything about your data, write to [email protected].
The waitlist on this website
If you join the waitlist, we store your email address, the language of the page you used and the date. We use it for one thing: to send you an email when PeakBeen is available. We don’t share it, sell it or add you to any other list. The legal basis is your consent, which you can withdraw at any time by writing to us. We delete the list once the launch email has been sent.
This website has no analytics and loads no third-party trackers. The only cookie it sets is pb_lang, and only if you
pick a language in the menu: it keeps that language for a year so the site opens in it next time, and holds nothing
else. Without it, the site uses your browser’s language, or else the country you visit from, to choose the language,
and does not store either.
Your account
To save your summits you need an account. You can sign in with Apple, with Google or with a code sent to your email. We receive:
- your email address (with Apple you can choose a private relay address);
- your name, if Apple or Google share it, which we use as your display name;
- your country and units (metric or imperial), taken from your phone’s settings.
The legal basis is the contract between us: without an account the app can’t keep your summits.
Your summits
When you mark a peak as Been or add it to your Wish list, we store which peak it is, the date (if you give one) and when you logged it. We also store the achievements you unlock. This is what powers your map and your numbers, and it is linked to your account. Nobody else can see it.
Your location
If you allow it, the app uses your location while you are using it to centre the map on you, show how far each peak is and suggest peaks near you. The distance is calculated on your phone.
Two features need to ask our server for nearby peaks, and to do that they send an area around your position: the peak suggestions when you first open the app (rounded to about 10 km), and the “near me” search filter (rounded to about 1 km). We use that area only to answer the request and we don’t store it. Search also sends the centre of the map, rounded to about 10 km, to list nearby peaks first, and we don’t store that either; when the map is centred on you, it is close to where you are. Like any map, loading map tiles tells the tile server which area you are looking at.
If you import a route from a file, the route stays on your phone. To find the peaks along it, the app asks our server for the peaks of each square of a fixed grid, about 10 km across, that the route passes through: the server sees those squares, never the route itself, and we don’t store them.
Purchases
Subscriptions are processed by Apple. We use RevenueCat to check whether your account has Premium. RevenueCat receives your account’s internal ID and your purchase records, but not your email or name. We never see your card details.
Crash reports and usage statistics
To fix bugs we use Sentry (crash reports with technical details of the error and your device) and to understand which features are used we use PostHog (events such as “a peak was marked” or “a screen was opened”). Both are hosted in the EU. Neither receives your email, your name or your account ID: PostHog uses a random ID created on your phone. The legal basis is our legitimate interest in keeping the app working and improving it. The app does not track you across other apps or websites and shows no ads.
Who else processes data
We only use providers we need to run PeakBeen, under data processing agreements:
- Supabase (database, sign-in and storage), in Ireland (EU);
- Apple and Google, if you sign in with them; Resend, which sends the sign-in code emails;
- RevenueCat, for subscriptions;
- Sentry and PostHog, in the EU;
- Cloudflare, OpenFreeMap and MapTiler, which serve the map tiles, and Wikipedia, from which the app loads peak descriptions (they receive only the article requested, nothing about you);
- Amazon Web Services (Ireland), which keeps a minimal record of account deletions.
Some of these companies are based outside the European Economic Area. In those cases the transfer is covered by the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep data
- Account and summits: until you delete your account.
- Waitlist: until the launch email has been sent.
- Backups: deleted data disappears from our database straight away and from backups when they expire.
- Deletion record: when you delete your account we keep a record with an internal ID, the sign-in method and the date, with no email, name or summits. It exists only to make sure a deleted account is never brought back from a backup.
- Crash reports and usage statistics: only as long as they are useful for fixing and improving the app.
Deleting your account
You can delete your account at any time in Settings → Delete account and data. It is immediate: your profile, your summits, your wish list and your achievements are deleted, your Apple sign-in is revoked and your RevenueCat record is erased. Deleting the account does not cancel an App Store subscription; you can cancel it in your Apple ID settings.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable format. Write to [email protected] and we will answer within a month. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority in your country.
Children
PeakBeen is for everyone, with no minimum age. Children under 14 need permission from a parent or guardian to create an account or join the waitlist. If you are a parent and want us to delete your child’s data, write to us and we will.
Changes
If we change this policy we will update the date at the top, and if the change is important we will tell you in the app.