Privacy Policy
Last updated 28 September 2026
The main points:
- Your logbook lives on your phone. If you create an account, a copy is kept in the cloud so you can restore it on another phone.
- What you share only goes to the people you choose, except public Beta, which anyone signed in to SendIt can see.
- We don’t show ads, and we don’t sell personal information that identifies you.
- You can see, correct, export and delete your information. Deleting your account deletes your data, with a few exceptions we list below.
- By using SendIt, you agree to us handling your information as this policy describes.
1. Who we are
SendIt is run by SendIt Bouldering Limited, Wellington, New Zealand (“we”, “us”). We are responsible for the personal information described here. Our Privacy Officer can be reached at support@senditbouldering.com with “Privacy” in the subject.
2. Your agreement
This policy forms part of our Terms of Use. By creating a SendIt account or using SendIt, you agree that SendIt Bouldering Limited may collect, store, use and share your personal information for the purposes and in the ways this policy describes.
If we want to use personal information for a purpose this policy doesn’t cover, we’ll update this policy and tell you before we do, and we’ll ask for your permission first where the law requires it.
3. What we collect
If you use SendIt without an account
Your climbs, sessions, gyms, goals and videos stay in a database on your phone. We don’t receive them. The app still sends us:
- crash reports and performance measurements, so we can find and fix problems;
- usage events from a small, fixed list (for example that a session was started or a climb was logged), without their content and without your identity;
- checks for app updates; and
- anything you choose to send us as feedback.
If you create an account
| What | Examples |
|---|---|
| Account | Your email address and an account ID. If you sign in with Google, we also receive the name on your Google account, which the app suggests as your display name. |
| Profile | Username, display name, bio, the profile photo you choose, your home gym, and your sharing settings. |
| Your logbook | Gyms (including the location you set for each), sections, grades, sessions, climbs, attempts, notes, goals, achievements, tags and app preferences. Kept in sync with the cloud while you’re signed in. |
| Videos and photos | Files you back up, stored exactly as they are on your phone, including any details embedded in them (such as when and where a photo was taken), plus covers, captions, tags, trims, crux marks and the climbs they’re linked to. |
| Social activity | Friends and friend requests, Circles, direct messages and Circle chat, posts, comments, bumps, reactions, plans, whether you’re at a gym right now (only if you turn that on), and who you’ve blocked. |
| Friend stats | XP, streak, and depending on your sharing settings, recent sessions, top climbs, grade pyramids, achievements and goals. |
| Gym directory | When you log sessions at a gym that isn’t in SendIt’s gym directory yet, the app sends that gym’s name, town, country, map location, section and grade names, and how many sessions and climbs you’ve logged there, so the gym can be added for everyone. |
| Safety records | Reports you make or that are made about you (including a copy of the reported content), warnings, suspensions and their reasons, a record of moderation decisions, and when you accepted the community rules. |
| Device and diagnostics | Device model, operating system, app version, language, time zone, the code that lets us send you notifications, crash reports linked to your account ID, and performance measurements. |
| Feedback and support | What you write to us, any screenshot you attach, and, unless you turn it off before sending, diagnostics such as your device, app version, recent screens and recent app events. |
Your age
When you set up your profile, the app asks for your birth month and year to check you’re 16 or over. Your answer is only used for that check on your phone. It isn’t saved, and isn’t sent to us.
Location
SendIt never asks for your precise location. It asks for approximate location only when you use a feature that needs it:
- Finding gyms near you: compared against the gym directory on your phone. Your position isn’t sent to us.
- “Use my current location” when setting up a gym: your approximate position is saved as that gym’s location, and syncs with the gym.
- Public Beta: the town and country of the climb are shown with the post.
To turn a position into a town name, the app uses your phone’s built-in location service, which may contact Google or Apple.
On this website
If you join the beta list, we store your email address, when you joined, the page you came from and the country your request came from (worked out by our host). You can also tell us your name, gym, town and whether you use Android or iPhone. Your IP address is used briefly to limit repeated attempts and is never stored. This website has no analytics, advertising or tracking cookies.
We email people on the beta list about beta access. People who joined from 18 September 2026 onwards also get occasional SendIt news; if you joined before then, you’ll only get news if you tell us you want it. Every email lets you unsubscribe.
From other people
Other climbers may give us information about you: messages they send you, Circles or plans they add you to, videos you appear in, and reports about something you posted.
What we don’t collect
- Your precise GPS location.
- Your contacts.
- Your advertising ID. It’s switched off in the app.
- Your photo library. The app only gets the individual files you pick, and the camera and microphone only while you’re recording in the app or scanning a QR code.
- Payment details. There are no purchases in SendIt yet.
4. How we use your information
- To provide SendIt: your account, syncing, restoring, video backup, sharing, messaging and notifications.
- To keep SendIt safe: checking public posts and names automatically, reviewing reports, preventing spam and abuse, enforcing our Terms and Community Guidelines, and protecting people.
- To support you: answering questions and fixing the problems you tell us about.
- To improve and develop SendIt: understanding how SendIt is used and how it performs, and researching and building new features, products and services, including ones about climbing, training and gyms. This includes looking at how each account uses SendIt: counts such as how many sessions and climbs you log, which features you use, and the gyms and cities you climb in. We don’t read your notes, messages, captions or videos to do this.
- To create statistics that don’t identify you: such as how busy gyms are or how grades compare between gyms. We may use and share these for any purpose, including commercially, because they can’t reasonably be used to identify you.
- To contact you: about your account and SendIt, and, where the law allows, with news and offers about SendIt. You can opt out of news and offers at any time.
- For legal reasons: to comply with the law, respond to lawful requests, and establish, exercise or defend legal claims.
We don’t use your personal information for targeted advertising, and we don’t sell personal information that identifies you.
Automated checks
Before a video or photo appears publicly, frames from it and its caption are checked automatically for content that breaks our rules. The check doesn’t receive your name or account. If it’s confident a post breaks the rules, the post isn’t published; if it isn’t sure, a person reviews it. Names, bios, Circle names, and public captions, tags and comments are also checked against a word list. Private backups, and posts to friends, Circles or direct messages, are never checked automatically. Decisions to warn, suspend or close an account are made by a person.
5. Who can see what
| What | Who can see it |
|---|---|
| Username, display name, profile photo, bio, home gym | Anyone signed in to SendIt. People can find you by username. |
| Public Beta | Anyone signed in to SendIt, with your display name. New video posts start as public, and you can change that on each post. Public Beta isn’t published on the open web. |
| Feed posts and friend stats | Your friends, depending on your sharing settings. Completed sessions are shared with friends automatically while “Sessions” sharing is on. |
| Circle chat, posts and plans | Members of that Circle. |
| Direct messages | You and the other person. If either of you reports a message, a copy comes to us. |
| Which gym you’re at right now | Nobody unless you turn it on, then only the friends or Circles you choose. It ends that night, and after 24 hours at most. |
| Your logbook, notes and backed-up videos | Only you. |
Notifications can show the text of a message or comment on the recipient’s lock screen, depending on their phone’s settings.
6. Who we share it with
We share personal information only:
- with other SendIt users, as described in section 5;
- with the service providers that run SendIt for us, listed below, who may only use it to provide their service to us;
- with authorities, when the law requires it, when it’s needed to prevent a serious threat to someone’s life, health or safety, or to report child exploitation;
- with a new owner, if SendIt or our business is sold, merged or restructured, in which case this policy continues to protect your information; or
- with your permission.
| Provider | What they do for us |
|---|---|
| Google (Firebase and Google Cloud) | Sign-in (including Google Sign-In), our database, server functions, file storage for feedback screenshots, push notifications, crash reports, usage analytics, performance monitoring, app settings and app integrity checks. |
| Cloudflare | Storing backed-up videos and photos, streaming posted clips, running our media service, and the automated checks of public posts (using an AI model that Cloudflare runs). |
| Resend | Delivering feedback and report notifications to our own inbox. |
| GitHub | Our private bug tracker. Feedback text, any screenshot you attached and your diagnostics go there so the report can be worked on. Your name, username and email address do not. |
| Shorebird | Delivering app updates. |
| Vercel | Hosting this website. |
| Our email provider | Receiving and storing the emails you send us. |
7. Where your information is stored
Our database is in Melbourne, Australia. Some server processing happens in the United States. Videos and photos are stored and streamed on Cloudflare’s network, which has data centres around the world. Crash reports and analytics are processed by Google in the United States, and our other providers may process information in the countries where they operate.
These providers hold your information on our behalf, and we remain responsible for it. We choose providers with strong security and privacy commitments, and take reasonable steps to make sure your information is protected in a way that is comparable to New Zealand law.
8. How we protect it
- Information is encrypted in transit, and our providers encrypt it where it’s stored.
- Security rules on our servers decide who can read and change each piece of information, so, for example, only members can read a Circle’s chat.
- Backed-up videos and photos are in private storage with no public address. Posted clips play through links that expire.
- Only SendIt’s owner can use our moderation tools, and every moderation action is logged.
- App updates are cryptographically signed, and the app refuses any that aren’t ours.
- Our database is protected against deletion, can be rewound to any point in the last 7 days, and is backed up every day (kept for 7 days) and every week (kept for 98 days).
No system is completely secure. If a privacy breach is likely to cause serious harm, we’ll tell the people affected and the New Zealand Privacy Commissioner as soon as we practicably can, and Australian regulators where Australian law requires it.
9. How long we keep it
| Information | How long |
|---|---|
| Your account, profile, synced logbook and social activity | Until you delete them or your account. |
| Backed-up videos and photos | Until you delete them. Deleted items stay in Trash for 30 days, then are permanently deleted. |
| Posted clips | Until you remove the post. A post refused by our checks and not shared anywhere is removed after 30 days. |
| Messages you sent | Until you delete them or your account. Their content is then removed, leaving “Message deleted” placeholders. Account deletion also anonymises the sender. Copies saved by others or already delivered as notifications cannot be recalled. |
| Feedback | While we need it to fix the problem, and deleted with your account. Copies already emailed to our inbox may be kept. |
| Reports, warnings, suspensions and moderation records | As long as we need them to keep SendIt safe and meet legal obligations, including after an account is deleted. |
| Deleted-account record | Permanently: your account ID, the fact the account was deleted and technical details of the deletion, so a deleted account can’t be brought back. Your username stays reserved so nobody else can take it. If staff remove an account for abuse, we also retain a cryptographic hash of its normalised email address to prevent that address from gaining SendIt access again. |
| Database backups | Up to 98 days, after which deleted information is gone from backups too. |
| Beta list | Until you ask to be removed or we no longer need it. |
See deleting your account for exactly what’s removed and what stays.
10. Your rights and choices
- See and correct your information. Most of it is in the app. For anything else, email us. We’ll respond within 20 working days, and it’s free.
- Get a copy. Export your climbs as a CSV file from the You screen (Android), and your logbook restores whenever you sign in. Ask us for a copy of anything else.
- Delete it. Delete individual posts, videos and comments in the app, or your whole account in Settings → Account. See deleting your account.
- Choose what you share. Public or friends and Circles for each Beta post, sharing settings in Settings → Social, gym presence off or on, and notification settings.
- Choose what backs up. Automatic video backup is on and uses Wi-Fi only. Change either in Settings → Media & Backup.
- Feedback diagnostics. Switch them off on the feedback screen before you send.
- News and offers. Opt out at any time using the link in the message or by emailing us.
Usage analytics can’t yet be switched off in the app. The events don’t include your content or your account ID.
If you’re not happy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Office of the Privacy Commissioner in New Zealand, or the Office of the Australian Information Commissioner in Australia.
11. Children
SendIt accounts are for people aged 16 and over, and SendIt isn’t directed at children. If we learn an account belongs to someone under 16, we’ll close it and delete its information. Parents and guardians can contact us about this. See also our child safety standards.
12. Cookies
This website doesn’t use advertising, analytics or tracking cookies. The only cookie it sets is a sign-in cookie for SendIt’s own administration pages. The app stores what it needs to work on your phone.
13. Changes to this policy
We’ll update this policy as SendIt changes, and change the date at the top. For important changes, we’ll tell you in the app or by email before they apply.
14. Contact
Privacy Officer, SendIt Bouldering Limited, Wellington, New Zealand. support@senditbouldering.com.