Legal

Privacy
Policy

Last updated: May 2026

1. Who We Are

CaliSpot is operated by 8MIND LTD (“we”, “us”, “our”). We are the data controller for the personal data collected through the CaliSpot iOS app and website (calispot.xyz).

Contact: 8mindltd@gmail.com

2. What Data We Collect

Account Data

When you create an account, we collect your email address, display name, and password (encrypted — we cannot read it). If you sign in with Apple, we receive only the name and email address you choose to share.

Profile Data

You may optionally provide:

  • Borough or city where you train
  • Age range (e.g. 18–24, 25–34)
  • Skill level (Beginner, Intermediate, Advanced)
  • Instagram username
  • Avatar emoji

Usage Data

When you use the app, we collect session check-ins (which spot, date, duration), spot ratings, event attendance, crew membership and activity, and favourite spots.

User-Submitted Content

Photos you upload when suggesting a new spot or adding to an existing one, along with any location metadata you choose to attach. See Section 5 for how we use this content.

Device Data

We collect limited technical data: device type, OS version, push notification token (via OneSignal), and approximate location (only when you grant permission, used to show nearby spots).

3. Why We Collect This Data

DataPurposeLegal Basis
Email & passwordAccount creation and authenticationContract
Display name, avatarShowing your identity in the appContract
Borough, age, skill levelPersonalising your experienceLegitimate interest
Session check-ins, ratingsCore app features (streaks, stats, quality)Contract
Profile data (aggregated)Generating anonymised insights reportsLegitimate interest
Submitted spot photosDisplaying spots in the app and on our channelsContract / Legitimate interest
Push notification tokenEvent and crew notificationsConsent
Location dataShowing nearby spots on the mapConsent

4. Anonymised Insights

We generate anonymised, aggregated reports about outdoor fitness usage patterns. These reports contain statistics such as “120 users aged 18–34 train outdoors in Wandsworth” — they never identify individual users.

We may share these anonymised insights with:

  • Local councils (to improve outdoor fitness infrastructure)
  • Sports organisations (e.g. Sport England, London Sport)
  • Fitness equipment manufacturers
  • Academic researchers

No individual user data is ever shared. All insights are aggregated and anonymised before sharing. It is not possible to identify any individual from these reports.

5. Spot Photos & Watermarking

When you submit a photo of a calisthenics spot through the app — for example, when suggesting a new spot or adding a photo to an existing one — you grant 8MIND LTD a non-exclusive, royalty-free, worldwide licence to use, display, reproduce, and modify that photo within the CaliSpot app, website, and related marketing materials.

We may add a CaliSpot watermark, logo, or other branding to photos you submit before displaying or sharing them. This helps attribute content to the CaliSpot community and protects against unauthorised re-use elsewhere.

By submitting a photo, you confirm that you took it yourself or have permission to share it, and that it does not identify other people without their consent. You can request removal of any photo you submitted by emailing 8mindltd@gmail.com.

6. Third-Party Services

ServicePurposeData Shared
SupabaseDatabase, auth, storageAccount, profile, usage data
Cloudflare R2Image hosting (spot photos)Submitted photos
Firebase (Google)Real-time presenceUser ID, spot ID
OneSignalPush notificationsDevice token, user ID
AppleSign in, In-App PurchasesName, email (your choice)
Amazon AssociatesAffiliate product linksNo personal data

We do not sell your personal data to any third party.

7. In-App Purchases

CaliSpot offers optional in-app purchases (e.g. promoting events). These are processed by Apple through StoreKit. We do not collect or store any payment information — Apple handles all billing.

8. Your Rights (UK GDPR)

You have the right to:

  • Access your data — request a copy of everything we hold about you
  • Correct your data — update your profile in the app at any time
  • Delete your data — use “Delete Account” in Profile → Settings, or email us
  • Object to processing — you can object to our use of your data for anonymised insights
  • Data portability — request your data in a machine-readable format
  • Withdraw consent — turn off notifications or location in your device settings

To exercise any of these rights, email 8mindltd@gmail.com. We will respond within 30 days.

9. Data Retention

  • Active accounts: We retain your data for as long as your account is active.
  • Deleted accounts: All personal data is permanently removed. Anonymised statistics that cannot identify you may be retained.
  • Session data: Retained while your account is active and deleted when your account is deleted.
  • Submitted spot photos: May be retained after account deletion as they form part of the CaliSpot spot directory, unless you specifically request their removal.

10. Data Security

Your data is stored securely on Supabase servers with row-level security policies. Passwords are hashed and cannot be read by us or anyone else. All data transmission uses HTTPS encryption.

11. Children

CaliSpot is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it.

12. Cookies

The CaliSpot website does not use tracking cookies. We use basic analytics to understand page visits.

13. Changes

We may update this privacy policy from time to time. If we make significant changes, we will notify you through the app. The “Last updated” date at the top shows when the policy was last revised.

14. Contact & Complaints

For any questions about this privacy policy or your data, email 8mindltd@gmail.com.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.