Privacy Policy

1. Information we handle

Website and beta applications

If you request private-beta access, we collect your first name, email address, climbing-experience range, submission time, and the fact that the application came from our website. A form-processing provider processes and stores the application on our behalf and routes it to us so we can review your request. Our hosting provider may also process your IP address, browser information, and request metadata to deliver and secure the site. The current website does not use advertising cookies or analytics pixels.

Information stored on your device

The app stores your optional name, age range, onboarding answers, climbing profile, saved analyses, training tasks, and progress state locally on your device. Crux does not require an account. This local information remains on the device unless a feature described below sends part of it to provide that feature.

The app also stores video references and temporary analysis-job information so you can return to an analysis. Video selection and processing may create temporary files in app or system caches. Device backup settings may affect additional copies.

Video analysis information

When you ask Crux to analyze a video, the app extracts selected still images from the video and sends them securely to our analysis system. The request can also include video characteristics and the climbing context you provide, such as climb difficulty, wall angle, attempt outcome, optional notes, experience, goals, and coaching preferences. The raw source video and its on-device file address are not uploaded, and the analysis flow does not send the video's audio or your profile name, age range, or gender. Selected images can still show identifiable people or venues.

Contracted AI analysis providers process the selected images and relevant context to generate the response you request. We instruct them to process this information only to provide the service and not to use it to train generalized AI models. The resulting analysis and limited technical performance data are returned to the app. Analyses you save are stored locally on your device.

Disabling stored response history does not guarantee zero retention by the AI provider. The provider may retain request content and responses for safety and abuse monitoring, ordinarily for up to 30 days, with legal and safety exceptions. Temporary processing and caching may also apply. This is separate from the temporary analysis records described below.

Subscriptions and paywalls

Apple processes purchases and payment details. Crux does not receive your complete payment-card information. Our subscription and paywall service providers process app-scoped identifiers, Apple receipt and transaction information, entitlement status, product selections, purchase outcomes, paywall interactions, and basic app/device metadata so we can present subscription options, complete and restore purchases, determine whether Crux Pro is active, and understand paywall performance.

Optional product analytics

When product analytics is enabled in a release, our analytics service provider receives an app-scoped identifier, screen views, app lifecycle information, and limited feature interaction and performance events. This analytics data does not include your name, age range, notes, raw video, selected still images, or on-device video address.

Communications

If you contact us, we receive the contact details and message content you choose to provide, along with our correspondence with you.

App updates

App-update delivery providers may receive app version, platform, runtime, network information, and randomized delivery identifiers to select and deliver updates. This delivery traffic is separate from optional product analytics.

2. How we use information

We use information to:

• operate the website, manage beta access, and communicate with applicants;
• personalize the app and generate the analysis you request;
• process, restore, and validate subscriptions and entitlements;
• understand feature performance and improve reliability and usability;
• protect the Services, prevent abuse, debug problems, and enforce our terms; and
• comply with law and protect the rights, safety, and property of users and others.

Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and improving the Services, your consent where requested, and compliance with legal obligations. You may withdraw consent for future processing at any time, although this does not affect processing already performed.

AI-generated coaching helps you review climbing movement. It does not make decisions that produce legal or similarly significant effects about you. We do not use your selected video images to train a generalized AI model.

3. How we disclose information

We disclose information only as needed for the purposes described above:

• Analysis: contracted AI and infrastructure providers process selected still images and climb context to return the analysis you request.
• Subscriptions and paywalls: Apple and our subscription and paywall service providers process purchase, entitlement, and paywall information.
• Analytics: our product analytics provider processes limited usage and performance information only when the app release is configured to use analytics.
• Beta applications: a form-processing provider processes your name, email address, climbing-experience range, and application details so we can review and respond to your request.
• Hosting and operations: infrastructure and communications providers process information needed to host, secure, and operate the Services.
• Legal and business events: We may disclose information when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a merger, financing, acquisition, or transfer of assets, subject to appropriate protections.

These providers process information under agreements and privacy commitments that limit their use of the information to providing services to Crux and meeting legal and security obligations. Contact us if you would like more information about the providers involved in processing your information. Apple’s handling of purchase information is described in Apple’s Privacy Policy.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not allow third-party advertising in the app. Because we do not engage in those practices, Global Privacy Control signals do not change how we process information.

4. Retention and deletion

• Device data: profile information, saved analyses, and training state remain until you reset app data, remove the app, or your device removes its storage.
• Analysis data: source video stays on your device. Sampled frames and request context are processed in memory rather than saved as a permanent media archive. Temporary analysis-job records can hold status and coaching results so you can retrieve a result after a connection interruption. Results become unavailable 24 hours after submission; expired records are removed during subsequent cleanup or when the service restarts, which can also clear them sooner. AI providers may retain content as described above. Infrastructure providers may retain IP addresses and request metadata in operational or security logs under their retention schedules.
• Beta applications: we keep beta application details while selecting and communicating with testers, and delete them within 12 months after the beta ends unless you become a user, ask us to delete them sooner, or law requires longer retention.
• Subscription records: purchase and entitlement records are kept for as long as needed to provide access, restore purchases, maintain business and tax records, resolve disputes, and comply with law.
• Communications: we keep support and privacy correspondence for as long as needed to resolve the request and maintain appropriate records.

Service providers may retain information under their own documented schedules. A local reset or app deletion does not automatically delete records held by Apple or our service providers. Contact us if you want us to route a deletion request for information we control.

5. Security and international transfers

We use reasonable administrative, technical, and organizational safeguards, including encrypted HTTPS connections for analysis requests and data minimization. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Crux and its providers may process information in the United States and other countries whose data-protection laws may differ from those where you live. Where required, we use recognized legal safeguards for those transfers.

6. Your choices and privacy rights

You can decline to submit a beta application or video for analysis. In the app, use the reset control to remove locally stored profile, analysis, and training data. Removing the app also removes its local data from that device, subject to device backups. You can manage or cancel a subscription in your Apple account settings; deleting the app does not cancel a subscription.

In the app, Profile → Restart onboarding clears the saved profile, training tasks, and analysis history. It does not delete original videos from Photos, cancel a subscription, or erase provider records. Separate temporary job information and media caches may remain until cleared or app storage is removed. Cancelling an analysis requests cancellation but cannot undo information already sent to a provider.

Depending on where you live, you may have rights to know, access, correct, delete, or receive a copy of your personal information; restrict or object to processing; withdraw consent; appeal our response; and receive equal service when exercising a privacy right. You may also complain to your local data-protection authority. We may need to verify a request before completing it, and legal exceptions may apply. An authorized agent may submit a request where local law permits.

To exercise a right, email support@usecruxai.app with the subject “Crux AI privacy request.” Please do not email a climbing video, payment information, password, or other sensitive material. We will not discriminate against you for making a request.

7. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you are under the age of majority where you live, use the Services only with permission and supervision from a parent or legal guardian. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and delete it where required.

8. Changes to this policy

We may update this policy as the Services or law changes. We will post the revised policy at this URL, update the date above, and provide additional notice when required. Material changes apply prospectively.

9. Contact us

Jonathan Giovannetti is the operator responsible for the Services. For privacy questions or requests, email support@usecruxai.app.