Privacy Policy

Last updated: March 10, 2026

1. Who we are

Jug City is a community app for boulderers in the Netherlands, developed by Jug City ("we", "us"). For privacy questions, contact us at info@jugcity.nl.

2. What data we collect

Data	Purpose	Legal basis
Data point	Purpose	Legal basis
Email address	Account creation, login, invitations	Contract performance
Name / display name	Identification within your team	Contract performance
Profile photo (optional)	Personalization	Consent
GPS location (optional)	Calculate distance to gyms	Consent
Team membership & role	Team functionality	Contract performance
Posts, reactions, comments	Social features (feed)	Contract performance
Boulder projects & attempts	Personal project tracking	Contract performance
Route photos	Route map / AI analysis	Consent
Session attendance (RSVP)	Planning	Contract performance
Bar tab history	Round rotation tracking	Contract performance
Push notification tokens	Session reminders	Consent

3. Gym portal — anonymized data

Gyms with an account on the Jug City gym portal (gyms.jugcity.nl) may receive anonymized, aggregated insights about their gym, such as:

Number of sessions and visitors per week/month
Popular days and time slots
Most climbed grades and wall types
Number of active boulder projects at their gym

This data is never traceable to individual users. Gyms cannot see names, profiles, or personal information. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR): improving our service and providing valuable insights to gyms.

4. AI route analysis

When you use the Route Map feature, your route photo is sent to Anthropic (Claude AI) for hold detection and beta analysis. This only happens when you actively start an analysis.

Photos are not stored by Anthropic for training purposes
Anthropic processes data in the US under their privacy policy
The legal basis is consent — you choose to start an analysis

5. Third parties (sub-processors)

Supabase — database, authentication, file storage (EU region)
Vercel — hosting and deployment
Resend — transactional emails (invitations, confirmations)
Anthropic — AI route analysis (only when using Route Map)
OpenStreetMap — map data on the gyms page (no personal data)

6. Data retention

Account data — until you delete your account
Posts and content — until you delete them or close your account
Moderation logs — 12 months
Push tokens — until you unsubscribe or delete your account

7. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

Access — see what data we have about you
Rectification — correct inaccurate data
Erasure — have your account and all data deleted
Data portability — request your data in a readable format
Object — object to processing based on legitimate interest
Restriction — temporarily halt processing

Contact info@jugcity.nl to submit a request. We respond within 30 days.

You can delete your account from your profile page. All data will be permanently erased, including posts, projects, photos, and team data.

8. Cookies

Jug City only uses functional cookies:

NEXT_LOCALE — your language preference (EN/NL)
Supabase auth tokens — session authentication

We do not use tracking cookies, analytics, or advertising cookies. Therefore, no cookie banner is required.

9. Security

We take appropriate technical and organizational measures to protect your data, including:

Encrypted connections (HTTPS)
Row Level Security (RLS) on all database tables
Role-based access control
Moderation by the crew team

10. Changes

We may update this privacy policy. For significant changes, we will notify you via the app or email. The date at the top indicates when the policy was last modified.

11. Filing a complaint

If you believe we are not handling your data carefully, you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).