Privacy Policy • Everesting App
Last updated: 17 June 2026
1. Who We Are
The Everesting app is operated by Everesting Challenge SL (tax identification number B70725288), based in Freixa, 6, 08021 Barcelona, Spain (“we”, “us”, “our”). This privacy policy explains what personal data we collect through the app, how we use it, and your rights in relation to it.
For questions about this policy or your data, contact us at: [email protected]
2. What Data We Collect
Account Information
When you create an account, we collect your email address. This is used to identify your account, send transactional emails, and communicate with you about the app and your activity.
Strava Connection
The app connects to your Strava account via OAuth. When you authorise this connection, we receive the following data from Strava:
- Your Strava athlete profile (name, profile photo)
- Your activity elevation data (metres climbed per activity)
- Activity metadata (date, sport type, duration)
We do not receive or store GPS routes, precise location data, heart rate, power data, or any other health metrics beyond elevation. You can revoke the Strava connection at any time from within the app or directly through your Strava account settings.
Elevation Activity Data
Your elevation data is used to calculate your Elevation Index score, your position in the 12-month Elevation Ranking, and your progress against Elevation Challenges. This data is linked to your account.
Subscription and Purchase Information
The app offers a freemium model with paid subscription tiers. Subscription purchases are processed through Apple’s App Store. We use RevenueCat to manage subscription status and entitlements. We do not receive or store your payment card details — these are handled entirely by Apple.
RevenueCat receives your app user ID and subscription status to determine which features you can access. For more information, see RevenueCat’s privacy policy at revenuecat.com/privacy.
Usage and Analytics Data
We use Firebase (Google) to collect anonymised usage data, including:
- App screens visited
- Features used
- Session duration
- Crash reports and performance diagnostics
This data helps us understand how the app is used and where improvements are needed. Crash and diagnostic data is not linked to your identity.
Communications
We use Klaviyo to manage email communications, including onboarding emails, challenge updates, and product news. Your email address is shared with Klaviyo for this purpose. You can unsubscribe from marketing emails at any time via the link in any email we send.
Push Notifications
With your permission, the app may send push notifications about challenge updates, ranking changes, and milestones. You can manage notification preferences at any time in your device settings.
3. How We Use Your Data
We use the data described above to:
- Create and manage your account
- Calculate and display your Elevation Index, Elevation Ranking, and Challenge progress
- Process and manage your subscription
- Send transactional and marketing emails (where you have consented)
- Improve the app through anonymised analytics and crash reporting
- Respond to support requests
4. Legal Basis for Processing
We process your data on the following legal bases under the GDPR:
- Contract performance — processing necessary to provide the app and its features to you
- Legitimate interests — anonymised analytics and crash reporting to improve the app
- Consent — marketing emails and push notifications, where you have opted in
5. Data Sharing
We do not sell your personal data. We share data only with the following third-party service providers, and only to the extent necessary to operate the app:
- Strava — to retrieve your elevation activity data via OAuth
- RevenueCat — to manage subscription entitlements
- Firebase (Google) — for analytics and crash reporting
- Klaviyo — for email communications
All third-party providers are contractually required to handle your data in accordance with applicable data protection law.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or tax purposes.
Anonymised analytics data may be retained indefinitely as it cannot be used to identify you.
7. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Request a portable copy of your data
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at aepd.es.
8. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted over encrypted connections (HTTPS/TLS).
9. International Data Transfers
Some of our third-party providers (including Firebase and Klaviyo) may process data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
10. Children
The app is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this policy from time to time. When we do, we will update the date at the top of this document and, where the changes are significant, notify you via email or in-app notification.
12. Contact
Everesting Challenge SL
Freixa, 6, 08021 Barcelona, Spain