Privacy Policy — Blayer

Who we are

Blayer is a mobile app that helps climbers find climbing partners. Blayer is operated by Tom Zion, Yoval Sharbi, Nadav Madlal, and Sharon Elalof ("Blayer", "we", "us"). If you have any questions about this policy or your data, contact us at yutomshazion@gmail.com.

What personal data we collect

To provide the service, we collect what you put in your profile and what the app needs to match you with partners:

• Account: email address; sign-in identifier from Apple or Google if you use those (we receive a token, not your password).
• Profile: name, age, profile photo, climbing discipline(s), grade range, weight, years of experience, owned gear, preferred locations (gyms/crags), typical availability, and anything you choose to write about yourself in your profile description (up to 1,000 characters).
• Parent's agreement (climbers aged 13–17 only): that you confirmed a parent or guardian agreed to your using Blayer, and when you confirmed it.
• Your introduction (הכירו אותי): an optional short headline and message you can publish about yourself. Unlike the rest of your profile, your introduction is shown to other climbers in their feed without them opening your profile first — so please treat anything you write there as visible to other Blayer users. You can change it or remove it at any time.
• Activity: climbers you express interest in, matches, in-app messages with matched partners, partner ratings / safety flags you submit, and any users you block or report.
• Which introductions you have been shown. So that the same climber's introduction does not keep reappearing in your feed, we record how many times you have been shown each person's introduction and the date you were last shown it. We do not record what you read or how long you looked — only a count per person and that one date, and it is never shown to that person or to anyone else. If you are not shown a particular person's introduction for 12 months, that record is deleted.
• Technical: basic device and log data needed to run and secure the service, and a push-notification token if you enable notifications.

We do not collect precise live geolocation in v0.1, and we do not sell your data.

Why we use it (legal bases)

We process your data to create your account, build your profile, match you with compatible partners, enable coordination chat, support ratings and safety flags (including human review of flagged sessions), keep the service secure, and act on blocks and reports. Where the EU/UK GDPR applies, we rely on: performance of our contract with you (to provide the core matching and messaging service you sign up for); your consent (which you can withdraw at any time — for example for optional profile details or push notifications); and our legitimate interests (to keep the service secure and prevent abuse).

Who can see what

• Your weight itself is shown only after a mutual match. No one browsing the app ever sees your weight in kilograms.
• Before a match, climbers looking at your session post may see a belay-compatibility note. If you post a session request and another climber sees it while browsing, the app may show them a short note about whether the two of you are a comfortable weight pairing for belaying — for example that an Ohm belay assist is recommended, that the gap is larger than an Ohm is designed for, or that one of you has not shared a weight. This note is a broad category, not a number: it never states or implies your weight, and it is only shown to climbers who have shared a weight themselves. It exists for safety — a large weight gap affects whether a partner can safely hold a fall — and it is equipment guidance, not a safety verdict. You can prevent this note appearing about you at any time by removing your weight from your profile, or by not posting session requests.
• Your introduction is shown to other climbers who have not matched with you, in their feed, as described above.
• Matched partners can see your profile and exchange messages with you.
• If you block another user, you and they are removed from each other's discovery, matches, and chat. If you report a user, the report (including your identity) is visible to the Blayer operator for safety review.
• Safety flags on ratings. When you rate a partner you can flag unsafe behaviour. A flag is reviewed by a person — the Blayer operator — not by an automated system. When they review it they can see who was flagged, the rating it came with, when it happened, and that you were the one who flagged it, in the same way a report you file carries your identity. The written comment you leave with a rating is shown to the operator as part of that review. Operators review flags so that unsafe behaviour can be acted on; every review is logged. Flagging someone does not by itself remove or suspend them — a person decides what, if anything, happens next.
• What happens to your messages when a conversation ends. If you unmatch someone, the conversation is removed from the app for both of you, and the messages are kept for up to 30 days before being deleted — longer only if a safety report about that conversation is still open. If you block or report someone, the conversation is hidden from both of you for as long as the block stands; the messages are not deleted, and they become visible to you both again if you unblock.
• When the operator can read messages. During the periods above, the Blayer operator can read the messages between the two people involved, and only those two, and only when investigating a safety report about that conversation. Today the operator reaches those messages through direct access to our database, so this limit is a rule we work to rather than one the system enforces for us. An operator console that restricts access to the conversation named in a report, and records every access, is in development. We keep messages this way so that abuse reports can be investigated: otherwise someone could erase the evidence of their own behaviour simply by unmatching first. Deleting your account erases your messages, including retained ones.
• What happens to your introduction when you change it. If you edit or remove your introduction, the previous version is kept for up to 30 days before being deleted — longer only if a safety report about that version is still open. We keep it this short period so that a report about something someone wrote can still be investigated after they have changed it. Your current introduction is kept for as long as you choose to have one.
• We share data with the infrastructure providers needed to run the app (hosting, database, file storage, push notifications) under their data-processing terms.

Where your data is processed

Blayer is operated from Israel. Your data is processed and stored by our infrastructure providers: our database is on servers in the European Union, our application is hosted in the United States, and photos you upload are stored with Cloudflare, which may store them in any of its regions, including outside the European Union. Where data leaves your region, our providers apply appropriate safeguards for the transfer.

Your rights, including deletion

You can delete your account and all associated data (profile, photos, matches, ratings) from inside the app at any time — this is built into the app. The limited exceptions are described under "Data retention & security" below: safety reports and operator records are kept for safety and legal-claim purposes. Depending on your region (e.g. EU/EEA, UK, California) you may also have rights to access, correct, export, restrict, or object to the processing of your data. To exercise any of these, email us at yutomshazion@gmail.com and we'll respond within a reasonable period (and within any timeframe your local law requires).

Data retention & security

We keep your data while your account is active and delete it on account deletion. Some content is kept for a limited period after it leaves your view: messages from a conversation you unmatched are retained for up to 30 days, or until a related safety report is resolved (plus a short period afterwards), and are then deleted. Messages in a conversation you blocked are kept while the block stands, so that they can be restored if you unblock. Previous versions of your introduction are retained on the same basis: up to 30 days after you change or remove it, or until a related safety report is resolved (plus a short period afterwards). The record of which introductions you have been shown is deleted after 12 months without being updated.

Safety reports, and the records of operator actions, are kept as long as we need them for safety and to establish or defend legal claims. A safety report also keeps a copy of the email address of the person who filed it and the person it concerns, recorded at the time it was filed. We keep that copy even if the account is later deleted, so that a report cannot be erased by deleting the account it is about, and so we can recognise someone who was removed for safety reasons and signs up again. It is used only for safety and legal-claim purposes and is not used to contact you.

Data is encrypted in transit (TLS) and at rest; passwords are hashed (Argon2id).

Age requirement, and climbers under 18

Blayer is for climbers 13 and older. Profile creation checks the date of birth you give us. We do not knowingly create accounts for, or collect personal data from, anyone under 13; profile creation refuses a date of birth under 13. If we learn an account belongs to someone under 13, we will close it: it can no longer sign in, and other climbers can no longer see it.

If you are 13–17, you must confirm that a parent or guardian has agreed to your using Blayer. We record that you confirmed it and when.

In short, if you are under 18:

• Other climbers see the same things they see for everyone: your name, age, photos, what you write about yourself, your gyms, when you usually climb, and the sessions you post.
• Your weight works as it does for everyone: only a broad belay-weight note before a match, and the number itself only after a mutual match — because weight matters for belaying safely.
• When you connect with another climber and one of you is under 18, you both see a short safety note.
• You can block or report anyone from their profile or from your chat. A person reads every report.
• A parent or guardian can ask us to close your account by writing to yutomshazion@gmail.com. We will ask for basic details to confirm the request, and we will explain how the account and its data can be deleted from inside the app.

We do not verify anyone's age or identity; ages are as users give them. Our child safety standards describe how we handle child-safety concerns.

Changes & contact

We may update this policy as the product changes; we'll post the updated version and revise the "Last updated" date above. Questions: yutomshazion@gmail.com.