Spray is a spray wall app: it records the holds on a board, the problems
people set on it, and the climbs they log. This page says exactly what it
stores and who can see it. It describes how the app actually behaves; if
anything here stops being true, this page changes with it.
There is no advertising in Spray, no analytics, no crash reporting and no
tracking of any kind. Nothing is sold or shared with anyone for marketing.
What is public
Spray is a social app for a shared wall, so some things are visible to other
climbers by design:
The display name you choose. A new account is asked
for one before it can do anything, and it need not be your real name.
It is the only name Spray ever shows, and it is not stored anywhere
except on your profile — everything you write records the account that
wrote it and reads the name back from there, so changing it changes it
everywhere at once.
A profile photo, if you add one.
Your climbs — the problems you log, when, how many
attempts, the grade and star rating you gave, and any comment you
wrote.
The problems you set, including their names and any
notes you add to them.
Any list you mark as shared. A list you keep to
yourself stays yours, and is deleted with your account.
Which gyms you are a member of, to the other members of those gyms.
What is private
Kept so the app works, readable only by you:
Your email address, and the name and photo your
sign-in provider supplied. These are stored separately from your
public profile and are never shown to anybody else. The app can
offer that name as a display name, but only puts it in
front of other people if you choose it.
Your password, if you signed up with an email address
rather than through Google or Apple. It is held by Firebase
Authentication, hashed, and Spray itself never sees it.
A notification token for each device you turn
notifications on for, so the server knows where to send them. It is
removed when you sign out of that device.
Which kinds of notification you have switched off.
Photographs
Photos of walls, gym logos and profile pictures are stored so the app can
show them. Wall photographs are also sent to a hold-detection service run on
the same infrastructure as the rest of Spray; they are used to find the holds
in that photograph and for nothing else. Wall and gym photos are visible to
anyone who can see that gym, which for a public gym means anybody.
On your device
Settings that belong to the phone rather than to you — the theme, the grade
scale, which gym the app opens on — stay on the device and are not uploaded.
Who else is involved
Spray runs on Google Firebase, which stores the data, runs the servers and
handles sign-in on our behalf. You can sign in with Google, with an email
address and a password, or — on an iPhone or iPad — with Apple. Google and
Apple tell us your email address and the name on the account; an email sign-up
tells us only the address. Nobody else receives anything.
Deleting things
Any climb you have logged can be deleted from the app, any comment you
wrote can be deleted, and any problem you set can be deleted by you.
Signing out removes that device's notification token.
Your account can be deleted, which removes your sign-in
account and password, your profile, your email address and the name your
provider gave, your notifications and your gym memberships. What you
published stays — the problems you set and the climbs you logged are
what other people are climbing and comparing themselves against — but
nothing in the app can name you
afterwards. Wherever your name appeared it reads Deleted user,
because the name was only ever read from the profile that no longer
exists. It is done from your profile, under the menu at the top right,
and is blocked only while you are the last person who can change a gym;
this page says what happens.
Children
Spray is not aimed at children under 13 and does not knowingly collect their
information.