Privacy policy
Last updated 19 October 2026
- We collect what Holdini needs to work: your email if you sign in, the climbs you log, and the details of the gyms set up on it.
- We don't sell your data or show ads. The website counts visits with Cloudflare Web Analytics, which uses no cookies and doesn't track you across sites.
- Your data is stored with Google Cloud in London. Gyms pay through Paddle.
- Email hello@holdini.app to see or delete what we hold about you.
Who we are
Holdini is the climbing gym app at holdini.app and on Google Play. It's run by Jamie Adkins in the United Kingdom, who is the controller of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018). "We" and "us" on this page mean Holdini.
You can reach us at hello@holdini.app or on Instagram, @holdiniclimbing.
What we collect, and why
| What | Why we use it | Our lawful basis |
|---|---|---|
| An anonymous account ID, made when you first open the app | So the app can load gyms and keep the climbs you log, without asking you to sign up. | To provide the service you're using (contract) |
| Your email address, if you sign in | To send you sign-in links, keep your climbs safe across phones, and, for gym staff, to link you to your gym. We only email you about your account and your gym, never marketing. | Contract |
| The climbs you log: attempts, ticks, and the gyms you've picked | To show your progress and keep it in step across your devices. | Contract |
| For gym staff: your role at the gym and the work email you verified with | To check you work at the gym and decide what you can change. | Contract, and our legitimate interest in keeping gyms safe from people who don't work there |
| For gyms: the gym's name, address, website, phone number and public contact email, its floor plan and its climbs | To set the gym up and show it to climbers. Some of this comes from the gym's Google Maps listing and its own website. | Contract with the gym, and our legitimate interest in helping gyms get set up |
| For gyms that pay: billing contact, address and payment history | To know which gyms have paid, and keep the records the law asks for. Gyms pay through Paddle, which takes the card details: we never see or store them. | Contract, and legal obligation for accounting records |
| An email you leave to hear when Holdini launches or reaches your country, and, on the website, the tag on the link you followed to get there, if it had one (such as ?ref=instagram) | To tell you once, when it does. | Consent, which you can withdraw at any time |
When you tap "Ask for Holdini here" on a gym that isn't on Holdini, we count the request against that gym. We don't record who asked.
Who else sees it
We use a few services to run Holdini. They handle your data for us, under contracts that stop them using it for anything else:
- Google Cloud and Firebase (Google Ireland Ltd and Google LLC): hosting, sign-in and storage, including the emails that carry sign-in links. Our database is in Google's London region.
- Google Maps Platform: searching for gyms. Your search text is sent to Google to find matches.
- Cloudflare (Cloudflare, Inc.): counting visits to holdini.app with Cloudflare Web Analytics, described under "The website" below.
- Paddle (Paddle.com Market Ltd): payments from gyms. Paddle sells Holdini plans to gyms on our behalf, as our reseller (merchant of record), so it handles the payment, the card details and any tax itself, under its own privacy policy. When a gym goes live, we give Paddle the gym's name and address and the email of the person who put it live, to start its free trial. From Paddle we only receive the gym's billing email and the plan's status.
Gym staff can see the email addresses of the other staff at their gym. Climbers' climb logs are never shown to gyms with their names or emails.
We'd share data with others only if the law required it, or to protect people's safety.
Outside the UK
Some of these services are run by US companies and may process data in the US. Where they do, it's covered by the UK's adequacy regulations for the US (the UK–US data bridge) or by the UK's standard data protection clauses.
How long we keep it
- Your account, email and climb log: until you ask us to delete them.
- Anonymous accounts you stop using: we may delete them, and the climbs logged on them, after a year of not being used.
- Gym staff details: until you leave the gym or ask us to delete them.
- Billing records: six years after the year they relate to, as UK tax law asks.
- An email you left to hear when Holdini launches or reaches your country: until we've told you, then we delete it.
- Sign-in links stop working within hours, and our record of who asked for one goes after seven days.
The website
holdini.app counts visits with Cloudflare Web Analytics. When a page loads, a small script sends Cloudflare the page's address, the site that sent you, your browser and device type, and how fast the page loaded. It sets no cookies and stores nothing on your device, so it can't recognise you on a later visit or on other sites. Cloudflare uses your IP address to work out your country and then doesn't keep it. We only see totals, never individual visitors. We use it, on our legitimate interest, to see how many people visit and how they found us. To opt out, block it with any ad or content blocker, or email hello@holdini.app.
holdini.app doesn't use advertising or analytics cookies. If you sign in to a gym account, your browser keeps you signed in and remembers the email you used, both stored on your own device. That's needed for signing in, so we don't ask for consent for it.
Our pages load fonts from Google Fonts, which means your browser asks Google's servers for them, and Google sees your IP address.
Your rights
You can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that's wrong
- delete it
- stop or limit how we use it, or object to a use based on our legitimate interests
- give it to you in a form you can take elsewhere
Email hello@holdini.app from the address on your account. We'll reply within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we'd like the chance to put it right first.
Children
Holdini is for people aged 13 and over. If you're under 13, please don't sign in. If you think a child under 13 has given us their email, let us know and we'll delete it.
Changes
If we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell you in the app or by email first.