Privacy Policy

Sprai is a mobile app and website for climbers to upload spraywall photos, detect holds, create problems, log sends, and share climbing-related content.

This Privacy Policy explains how Sprai processes personal data when you use the app, website, and related services.

1. Controller and Contact

Sprai is operated by the provider identified in the Legal Notice / Impressum.

Privacy contact: support@getsprai.com

You can contact us at this email address if you have questions about this Privacy Policy or want to exercise your privacy rights.

2. Personal Data We Process

Depending on how you use Sprai, we may process the following categories of personal data:

Account data

Information used to create and manage your account, such as your email address, username, display name, profile information, login method, and account settings.

Content data

Content you upload, create, or submit in Sprai, such as wall photos, videos, problem details, send logs, captions, comments, wall information, and similar climbing-related content.

AI and feature data

Information generated or processed to provide Sprai features, including AI-assisted hold detection, wall annotations, hold data, and related technical outputs.

Technical and usage data

Information needed to operate, secure, maintain, and improve the service, such as device and app information, log data, usage events, diagnostics, error reports, and security-related information.

Communication data

Information you provide when contacting us, such as your email address, message content, attachments, and support history.

Payment and app store data

If you use paid features, we may receive limited transaction-related information from app stores or payment providers, such as purchase status, subscription status, product identifiers, and related metadata. We do not receive your full payment card details from app stores.

Third-party login data

If you sign in through Apple, Google, or another login provider, we receive the information needed to authenticate your account.

3. How We Use Personal Data

We process personal data to:

• provide, operate, and maintain Sprai;
• create and manage user accounts;
• authenticate users and secure the service;
• store, sync, display, and share content according to app functionality and your settings;
• provide AI-assisted hold detection and related climbing features;
• improve app quality, usability, reliability, and performance;
• debug errors, analyze technical issues, and prevent abuse;
• respond to support requests;
• send service-related messages;
• process purchases or subscriptions, if applicable;
• comply with legal obligations and enforce our rights.

4. Legal Bases

If you are in the EU/EEA or UK, we process personal data under the following legal bases:

Contract performance

We process data where necessary to provide Sprai and the features you request.

Legitimate interests

We process data where necessary for our legitimate interests, such as securing the service, preventing abuse, fixing bugs, improving product quality, and developing better features, provided your interests and rights do not override those interests.

Consent

Where legally required, we process data based on your consent, for example for optional analytics, marketing, or non-essential cookies.

Legal obligations

We process data where necessary to comply with legal duties, accounting requirements, valid legal requests, or regulatory obligations.

5. User Content and AI Processing

Sprai processes uploaded wall photos, videos, problem data, and related content to provide climbing-related features, including AI-assisted hold detection.

This may include creating derived technical data such as annotations, hold information, detection results, and quality signals.

We may use uploaded content and derived data to operate, maintain, debug, test, and improve Sprai, including current and future detection models and related features, where permitted by law.

Where possible, we use aggregated, de-identified, or minimized data for improvement purposes.

Visibility settings control who can see your content inside the app. They do not necessarily prevent backend processing that is needed to operate, secure, maintain, or improve the service.

6. Sharing of Personal Data

We do not sell personal data and do not use personal data for third-party advertising.

We may share personal data with the following categories of recipients:

Other users

Content may be visible to other users depending on your sharing choices, wall memberships, visibility settings, and app features.

Service providers

We use service providers that help us operate Sprai, such as hosting, storage, database, infrastructure, authentication, email, analytics, crash reporting, payment, and app store providers.

Login and payment providers

If you use third-party login, app store purchases, or payment features, relevant data may be exchanged with those providers.

Legal and safety recipients

We may share data where necessary to comply with law, respond to valid legal requests, enforce our terms, investigate abuse, protect users, or protect the service.

Business transfers

If Sprai is involved in a merger, acquisition, restructuring, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to appropriate safeguards.

7. International Processing

Sprai and its service providers may process personal data in countries outside your country of residence, including outside the EU/EEA.

Where required, we use appropriate safeguards for international transfers, such as adequacy decisions, Standard Contractual Clauses, or other legally recognized transfer mechanisms.

8. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

In general:

• account data is kept while your account exists;
• content data is kept until you delete it, your account is deleted, or the relevant wall or content is removed, unless continued retention is necessary;
• technical logs and diagnostics are kept for a limited period needed for security, debugging, and operation;
• support messages may be kept for a reasonable period to handle follow-up requests;
• transaction and accounting records may be kept as required by law;
• backups may retain deleted data for a limited time before being overwritten.

Some deleted content may remain in backups, security records, legal records, or already-created aggregated, de-identified, or non-reversible technical materials.

9. Your Choices and Rights

You can update some account information in the app.

You can delete your account in the app or contact us for help.

Depending on applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request deletion of your data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability;
• withdraw consent where processing is based on consent;
• lodge a complaint with a data protection supervisory authority.

To exercise your rights, contact support@getsprai.com.

We may need to verify your identity before responding.

10. Required and Optional Data

Some data is required to provide Sprai, such as account, authentication, technical, and security-related data.

Other data, such as profile photos, wall names, captions, comments, videos, or optional wall details, is provided voluntarily. If you do not provide optional data, some features may not be available or may be limited.

11. Cookies and Similar Technologies

The Sprai website and app may use cookies, local storage, or similar technologies.

Some technologies are necessary to provide the service, remember settings, authenticate users, or keep the service secure.

Where legally required, we ask for consent before using optional analytics, marketing, or non-essential tracking technologies.

12. Automated Processing

Sprai uses automated processing to provide features such as hold detection and related outputs.

These outputs may be incomplete or inaccurate. Sprai does not use automated processing to make decisions about you that produce legal effects or similarly significant effects within the meaning of GDPR Art. 22.

13. Security

We use reasonable technical and organizational measures to protect personal data.

No system is completely secure, and we cannot guarantee absolute security.

14. Children

Sprai is not intended for children under 16 unless use is permitted by a parent or legal guardian where required by law.

If you believe a child has provided personal data without appropriate permission, contact support@getsprai.com.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will be available on the website or in the app. If changes are material, we may provide additional notice where appropriate.