LEGAL DOCUMENTATION

Sloper – Privacy Policy

Last updated: October 16, 2026

Sloper ("Sloper", "we", "us") is a climbing-terminology learning app operated by Gerardo Zenteno Gaeta, an individual developer based in Mexico. This policy explains what personal data we collect, how we use it, and your choices. By using Sloper, you agree to this policy.

1. Information We Collect

Account information

  • Email address and password when you register with email. Passwords are handled by Firebase Authentication and are never visible to us.
  • If you sign in with Google or Apple, we receive your name (if shared), email address, and a unique account identifier from that provider. With Apple, you may choose to hide your email.

Onboarding information (provided by you)

Your climbing level, lead climbing level, years of climbing experience, planned daily time in the app, and your selected goals. We use these answers to calculate a climber profile level, which is shown in your profile.

Learning and usage information

  • Progress through the Route, flashcard results and spaced-repetition data, Gym game results, category progress, streaks, badges, and most-practiced terms.
  • Your language preference and your analytics and notification choices.

Subscription information

Subscriptions are processed by the Apple App Store or Google Play and managed through RevenueCat. RevenueCat and we receive your subscription status, the product purchased, purchase and renewal dates, and an app user identifier. We do not receive or store your payment card details.

Usage analytics (only if you consent)

When you first open the app, we ask whether you allow anonymous usage analytics. Nothing is sent to our analytics provider unless you choose "Allow".

If you allow it, we use Mixpanel to record events such as onboarding steps viewed, screens viewed (e.g., sign-in screen, paywall), and purchase-flow actions (e.g., plan selected), with the time spent on a step.

Before you create an account, events are linked to a random device-level identifier. After you sign in, they are linked to your account's user ID (a random identifier created by Firebase). We do not send your email address or name to Mixpanel.

Mixpanel also receives device and app information, such as device model and manufacturer, operating system and version, screen size, app version, language, mobile carrier, and network connection type.

We disable IP-based location, so we do not receive your city or country from analytics. Your IP address is necessarily used to deliver the data to Mixpanel's servers, which are located in the European Union.

You can change your choice at any time in Settings → Privacy (available after you create an account). If you have not created an account, you can reset analytics by clearing the app's data or reinstalling the app.

Reminders (local notifications)

If you give permission, the app schedules a weekly reminder on your device to do your daily training. These are local notifications generated on your device: we do not use a push notification server and we do not collect a push notification token. You can disable them at any time in your device settings.

We do not collect precise location, contacts, photos, or health data.

2. How We Use Your Information

  • To create and secure your account and authenticate you.
  • To determine your climber level and personalize your learning path.
  • To provide the Route, Gym, Board, streaks, and badges, and to sync your progress.
  • To verify and manage your subscription and restore purchases.
  • To send weekly training reminders, only if you have allowed notifications.
  • With your consent, to understand where users drop off in the onboarding and purchase flow, and to improve the app.
  • To maintain, debug, and secure the app, and to answer support requests.
  • To comply with legal obligations.
Legal bases (EEA/UK users): performance of our contract with you; your consent for usage analytics and notifications (which you can withdraw at any time); our legitimate interests in securing and maintaining the app; and compliance with legal obligations.

3. Advertising and Sale of Data

Sloper contains no advertising and no ad mediation. We do not sell your personal data or share it for cross-context behavioral advertising, and we do not track you across other companies' apps or websites.

4. Service Providers

We share data only with providers needed to run the app, under their own terms and privacy policies:

  • Google Firebase (Authentication, Cloud Firestore, Cloud Functions) – authentication, database, and server-side functions (for example, to delete your account).
  • Mixpanel – usage analytics, only if you consent. Data is stored in the EU.
  • RevenueCat – subscription management and entitlement verification.
  • Apple and Google – sign-in, app distribution, and payment processing.

We may also disclose information if required by law or to protect rights, safety, or security.

5. International Transfers

Our providers may process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Data Retention and Deletion

We keep your account data (email, onboarding answers, and learning progress) while your account is active. When you delete your account:

  • We delete your profile, onboarding data, and learning progress from our database, and your account from Firebase Authentication.
  • We send a deletion request to Mixpanel for the analytics data linked to your account ID. Mixpanel may take several weeks to complete it.
  • Analytics collected before you created an account are linked only to a random device identifier and cannot be linked back to you.
  • Subscription and purchase records held by Apple, Google, and RevenueCat are subject to their own retention policies and legal obligations.

7. Your Rights and Choices

  • Delete your account: in the app, go to Settings → Danger Zone → Delete Account, or follow https://thesloper.app/delete-account.
  • Analytics: change your choice in Settings → Privacy, or decline when first asked.
  • Notifications: disable them in your device settings.
  • EEA, UK, and similar jurisdictions: you may have the right to access, correct, delete, export, or restrict the use of your data, to object to processing, and to withdraw consent at any time. You may also complain to your local data protection authority.
  • California and other US states: you may have the right to know what personal data we collect, to request access, correction, or deletion, and not to be discriminated against for exercising these rights. We do not "sell" or "share" personal data as defined by the CCPA/CPRA.
  • Mexico: you may exercise your ARCO rights (access, rectification, cancellation, and opposition) under applicable Mexican data protection law.
  • Subscriptions: manage or cancel them in your Apple ID or Google Play settings. Deleting your account does not cancel your subscription.

To exercise any right, contact us at zega.apps.dev@gmail.com. We will respond within the time required by applicable law.

8. Security

We use reasonable technical and organizational measures, including encrypted connections and Firebase security rules. No system is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

Sloper is intended for users aged 13 and over and is not directed to children under 13. We do not knowingly collect personal data from children under 13. In some countries, the minimum age to consent to data processing is higher than 13 (up to 16); where this applies, users below that age may use Sloper only with the consent of a parent or guardian. If you believe a child under the applicable age has provided us with personal data, contact us at zega.apps.dev@gmail.com and we will delete it.

10. Changes to This Policy

We may update this policy. We will post the new version here with a new date and, for material changes, notify you in the app or by email.

11. Contact

Gerardo Zenteno Gaeta

Mexico

zega.apps.dev@gmail.com

This policy is also available at https://thesloper.app/privacypolicy