Omnigrade for iOS — Privacy Policy

Effective: 14 June 2026

This policy describes how the Omnigrade mobile application for iOS ("the App") handles information. Omnigrade is a climbing logbook that lets you record your climbs, track your progress, and attach photos and videos. It applies specifically to the iOS version of Omnigrade. Other Klondis products and our website are covered by the general Klondis Privacy Policy — where the two differ, this document governs the App.

Summary

The App is designed to collect as little personal information as possible. We do not require an account. We do not ask for your email. We do not show advertising. We do not run analytics. We do not sell or share your data with advertisers or data brokers.

The App stores your climbing logs, progress, and preferences locally on your device, and — if iCloud is enabled in your iOS settings — syncs them to your own private iCloud account so you can move between your devices. Klondis does not have access to data in your iCloud.

Purchases are handled by Apple's StoreKit, not by us; we receive only the confirmation that you are entitled to premium features.

Klondis operates no servers that receive your data and collects nothing about you on its own infrastructure. Everything the App records stays on your device or in your private iCloud account, both of which are outside Klondis's reach.

That is essentially everything. The sections below describe each piece in more detail.

1. Who we are

The data controller for personal data processed in connection with the App is:

Klondis Oy
Business ID: 3595444-5
Kukkulantie 2 A 28, 33960 Pirkkala, Finland

For privacy questions, requests, or to exercise the rights described in this policy, contact: privacy@klondis.com

2. What the App processes

2.1 Preferences and settings

The App stores your preferences (chosen grading scales, units, theme, default views, and similar configuration) on your device using iOS's standard preference storage.

• Where it's stored: locally on your device.
• Who sees it: only you. Klondis does not have access.
• Why we process it: to make the App work the way you've configured it.

2.2 Climbing logs and progress

The App records the climbs and sessions you log: routes and boulders, their grades, the date and outcome of each attempt, your notes, any custom grading scales you create, your sessions, and the statistics derived from all of this.

• Where it's stored: locally on your device in a Core Data database, and synchronized to your private iCloud (CloudKit) database if iCloud is enabled.
• Who sees it: only you. Klondis does not have access to your CloudKit data.
• Why we process it: to keep your logbook, show you statistics, and track your progress over time.

2.3 Photos and videos

You can attach photos and videos to your climb logs — either by capturing them in the App (using your device camera and microphone) or by selecting media you have already taken from your photo library. Media you capture in the App is also saved to your photo library for safekeeping, using add-only access (the App can add items but cannot read your existing library for that purpose).

• Where it's stored: locally on your device and, if iCloud is enabled, in your private iCloud (CloudKit) database alongside the related climb. Captured media is additionally copied into your own photo library.
• Who sees it: only you. Klondis does not have access.
• Why we process it: so you can illustrate and remember your climbs.

2.4 Location (optional)

If you choose to tag a climb with its location, the App asks iOS for your position and stores its coordinates (latitude and longitude) with that climb, and also converts them on your device into a place name so you can recognise where you climbed. The App requests standard "When In Use" location access; by default iOS provides a precise location, though you can limit the App to an approximate location using the "Precise Location" toggle in iOS Settings. You can decline location access entirely, and you can log climbs without a location.

• Where it's stored: as part of the relevant climb — locally on your device and, if iCloud is enabled, in your private iCloud (CloudKit) database.
• Who sees it: only you. Klondis does not have access.
• Why we process it: to let you tag and recognise where each climb took place (consent-based; optional).

2.5 Apple Health

If you grant permission, the App saves your climbing sessions to Apple Health as workouts. This is a one-way write: the App adds workout entries to Health and can remove ones it previously added, but it never reads any data from Health. You can decline Health access, and the App works normally without it.

• Where it's stored: in Apple Health on your device, under Apple's privacy protections.
• Who sees it: only you. Klondis does not have access to your Health data.
• Why we process it: so your climbing activity appears alongside your other workouts in Apple Health (consent-based; optional).

2.6 Purchase records

Omnigrade offers a one-time purchase, Omnigrade Pro, that unlocks premium features. When you buy it, the App relies on Apple's StoreKit framework to handle the transaction. Apple processes your payment and your App Store account information; the App does not see your payment method, billing address, or any financial details.

The App receives only a confirmation from Apple that your account is entitled to the premium features. This entitlement is checked locally on your device.

• Where it's stored: Apple's servers (under Apple's privacy policy); entitlement confirmation is verified locally on your device.
• Who sees it: Apple, and you. Klondis does not see your transaction details.
• Why we process it: to determine whether to unlock premium content.

2.7 What we do not collect

To be explicit, the App does not collect:

• Your name, email address, phone number, or postal address
• Your contacts or calendar
• Your photo library, beyond the specific items you choose to attach (and the captured media it adds back for safekeeping)
• Any usage analytics — the App contains no analytics or telemetry of any kind, and sends no usage data to Klondis or to any third party
• Your IDFA (advertising identifier) — we do not use AppTrackingTransparency because we do not track you
• Any data from other apps you have installed
• Any data for advertising or marketing purposes

We do not build user profiles, we do not sell data, we do not share data with advertisers, and we do not participate in any cross-app or cross-website tracking.

3. Third parties

The App relies on one third party: Apple.

Apple Inc.

Apple provides StoreKit (for purchases), iCloud/CloudKit (for syncing your logs, media, and preferences), and HealthKit (for saving workouts). When you use the App on an Apple device, you are also subject to Apple's Privacy Policy. The geographic location of iCloud data storage is determined by Apple's infrastructure decisions and Apple's policies — see Apple's documentation for current details.

Apple acts as the data processor for these services. Klondis does not have access to your iCloud data, your Health data, or your Apple ID information.

The App does not use any analytics provider, advertising network, or other third-party data service.

4. Legal basis for processing (GDPR)

For users in the EU, EEA, and UK, we process personal data under the following legal bases:

• Performance of a contract (GDPR Art. 6(1)(b)): processing your climbing logs, media, preferences, and purchase entitlement is necessary to provide the App and the features you have purchased.
• Consent (GDPR Art. 6(1)(a)): optional features that rely on a device permission — location tagging, Apple Health, camera, microphone, and photo library access — are processed only after you grant the corresponding permission, which you can revoke at any time in iOS Settings.
• Legitimate interest (GDPR Art. 6(1)(f)): in limited cases, we may rely on our legitimate interests in providing and securing the App, where these interests are not overridden by your rights — for example, behaviour needed to keep the App functioning correctly.

5. Data retention

• Climbing logs, media, and preferences are kept on your device and in your iCloud account for as long as you keep the App installed and have iCloud enabled. You can delete individual items within the App at any time, or remove everything by deleting the App and, if you wish, removing its data from iCloud.
• Captured media copied to your photo library remains in your photo library until you delete it there; the App does not manage or remove it for you.
• Workouts written to Apple Health remain in Health until you delete them, either through the App (for entries it added) or directly in the Health app.
• Purchase records are kept by Apple under Apple's own retention policies. Klondis does not retain transaction data.

Klondis itself retains no copy of any of this data, because none of it is sent to Klondis.

6. Your rights

Under the GDPR (for EU/EEA/UK users), the California Consumer Privacy Act (for California residents), and similar laws in other jurisdictions, you have the following rights in principle:

• Access to personal data we hold about you
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Portability of your data in a machine-readable format
• Objection to processing based on legitimate interests

How these rights apply to the App is shaped by the fact that we have deliberately designed it to hold no personal data about you on our own systems. Specifically:

We have no account for you and no way to identify you. We do not store your name, email, Apple ID, IP address, device identifier, or any other information on Klondis infrastructure. All of the data the App processes lives on your own device and in your own private iCloud account, which we cannot access.

GDPR Article 11 addresses this directly: where a controller does not need to identify the data subject in order to provide the service, the controller is not required to create or maintain identification information for the sole purpose of complying with the regulation. Articles 15 to 20 (access, rectification, erasure, restriction, portability, objection) consequently do not apply to data we do not hold and cannot link to you.

Practically, this means you are fully in control of your own data:

• You can view, edit, and delete any climb, session, photo, video, or location tag directly within the App.
• You can revoke any permission — location, Health, camera, microphone, or photo library — at any time in iOS Settings, which stops the related processing immediately.
• You can delete all of your data by deleting the App and removing its data from iCloud, and by deleting any captured media from your photo library and any workouts from Apple Health.
• You can manage data on Apple's side by deleting the App, signing out of iCloud, or using Apple's data management tools at privacy.apple.com.
• You can contact us at privacy@klondis.com with any rights request. Because we hold no personal data about you on our systems, there is nothing for us to retrieve or erase on our side, but we will respond within the 30-day timeframe required by GDPR and direct you to the in-app or Apple controls that exercise the right.

You also have the right to lodge a complaint with a data protection authority. In Finland, that is the Office of the Data Protection Ombudsman (tietosuoja.fi). If you are in another EU/EEA country, you may contact your local supervisory authority.

For California residents: we do not sell personal information, and we do not share personal information for cross-context behavioral advertising. The rights above include your rights under the CCPA.

7. International transfers

Klondis is based in Finland and does not receive, process, or transfer your personal data. Your data is stored on your device and, if you enable iCloud, in your iCloud account, which Apple processes according to Apple's infrastructure decisions and Apple's privacy policy.

8. Children's privacy

The App is not directed at children under 13. We do not knowingly collect personal data from children. The App does not request information that could identify a child specifically.

If you believe a child has provided information to us, contact privacy@klondis.com and we will address it appropriately.

9. Security

We use the security features built into iOS and into Apple's services:

• Data on your device is protected by iOS's standard data protection.
• iCloud sync uses Apple's encryption, governed by your iCloud settings.
• Health data is protected by Apple's HealthKit safeguards.

Because the App is designed to collect no personal information on Klondis systems, the impact of any security incident on our side is inherently limited — we do not hold lists of users, email addresses, payment details, names, or any data that could be used to identify or contact you. If we become aware of a security incident affecting personal information for which we are the controller, we will notify the relevant supervisory authority within 72 hours as required by GDPR. Direct notification of affected users is generally not possible given that we hold no contact information; where the App itself can communicate with users (e.g., via an in-app notice on next launch), we will use that channel.

10. Changes to this policy

We may update this policy as the App evolves. If we make material changes, we will notify you through the App and update the "Effective" date at the top of this document. Continued use of the App after a policy update means you accept the updated policy.

Previous versions of this policy are available on request.

11. Contact

Klondis Oy
Kukkulantie 2 A 28
33960 Pirkkala
Finland
Business ID: 3595444-5

Privacy questions and requests: privacy@klondis.com

This policy is provided in English. If you have read a translated version, the English version governs in case of any conflict.