Braveclimb is local-first. The short version: by default there's no account and no backend, so there's nothing to leak. Here's the detail.
Everything you enter — actions, grades, reasons, notes, ladders, planned routes — is stored locally on your device. It is never transmitted to us or to any third party by default, because there's no server to transmit it to. Uninstalling the app removes it, so keep a backup (Actions & settings → Backup exports a JSON file you own and can re-import on any iPhone).
The one thing the app may send is anonymous usage analytics: counts of which screens and features get used and grade counts (for example, "a black diamond was logged"), processed by PostHog. Those events carry a random install identifier, the app version and the OS version — never your name or email (we don't have them), and never the content you type: no action names, notes, reasons or reached-goals ever leave the device. No person profiles are built. You can switch it off any time under Actions & settings → Anonymous analytics. It is on by default; once you switch it off, nothing further is sent.
Optional encrypted sync. If you ever want your climb on a second device, Braveclimb offers end-to-end-encrypted sync: your data is encrypted on-device before it's stored, and the key never leaves your phones. It's off by default and entirely opt-in. Beyond that, the app contains no advertising SDKs and no ad identifiers, and works fully offline by design.
The marketing site you're reading is a static site. It uses anonymous, cookieless analytics ( PostHog, the same anonymous analytics the app uses) to understand which pages and elements get used — page views and interactions like which links and buttons get clicked, plus when the waitlist form is opened and submitted. There are no tracking cookies, no session recording, and no ad identifiers — which is why you won't see a cookie banner. The waitlist email you type is never sent as part of that; only the fact that the form was submitted is counted. Analytics is disabled entirely on builds shipped without a key.
The one place the site accepts input is the launch waitlist: if you submit your email, it is stored in your browser's local storage on this device so the form remembers you've signed up. Until a mailing-list backend is connected, that email is not transmitted anywhere. When email delivery is wired up, we'll use your address for a single launch announcement and nothing else — no selling, no drip marketing — and this page will be updated to say so.
Basic, privacy-respecting hosting logs (the kind every web server keeps) may be retained by the host for security and reliability. We don't combine them with any personal profile.
This is a living document and will be kept accurate as Braveclimb ships. Read more about the product on the about page, or browse the source on GitHub.