Sendage Privacy Policy

Effective Date: June 11, 2026

This Privacy Policy describes how Hippocurious Interactive Inc. ("we", "us", or "our") collects, uses, and shares your personal information when you use the Sendage mobile application and website (collectively, the "Platform"). By using the Platform, you agree to the practices described in this policy.

1. Who We Are

Sendage is a rock climbing platform operated by Hippocurious Interactive Inc., a company based in Canada. Our App is available globally on iOS and Android devices, and our website and API are hosted on Amazon Web Services (AWS) infrastructure.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name and email address. Authentication is handled securely through Supabase; we do not store passwords directly. Your password is managed through Supabase's authentication service and is never stored in plain text.

2.2 Location Data

With your permission, we collect GPS and location data to provide climbing-related features such as finding crags, logging climbs by location, and displaying nearby routes. You may disable location access at any time through your device settings, though this may limit certain App features.

2.3 Photos and Media

You may choose to upload photos or other media to your profile or climbing logs. Media files are stored in secure cloud storage. You retain ownership of content you upload; by uploading, you grant us a licence to display that content within the Platform. We will not use photos you upload to the Platform in paid advertising or marketing materials without your explicit prior permission.

2.4 User-Generated Content

The Platform allows you to contribute content that helps the climbing community, including:

— Comments on climbs and sends

— Descriptions, directions, and beta for climbing areas and routes

— Profile information visible to other users

Content you contribute may be publicly visible to other Sendage users. Please do not include sensitive personal information in public content. A private profile option is planned for a future release; until then, profiles are publicly accessible to other registered users.

2.5 User Search

The Platform provides search functionality that allows users to find and connect with other registered users by name or username. Only information you have provided in your public profile is surfaced in search results.

2.6 Payment Information

Sendage offers monthly and yearly subscription plans. Payments are processed through:

— Apple In-App Purchases (iOS)

— Google Play In-App Purchases (Android)

— Stripe (for web-based subscriptions)

Subscription management is handled through RevenueCat, which acts as an intermediary to manage entitlements across platforms. We do not directly collect or store your credit card number or payment credentials. Payment data is handled by Apple, Google, Stripe, and RevenueCat under their respective privacy policies. We may retain billing records as required for accounting purposes.

2.7 Usage Analytics

We collect anonymized or aggregated data about how you interact with the Platform, such as features used, session duration, and navigation patterns. This data is used solely to improve the Platform experience.

2.8 Device Information & Crash Logs

We automatically collect technical data including device type, operating system version, unique device identifiers, IP address, and crash or diagnostic logs. This data is used to maintain and improve Platform stability and performance.

2.9 Over-the-Air App Updates

Our App is built using React Native with Expo. We may deliver over-the-air (OTA) updates to the App using Expo's update service. These updates may collect basic technical metadata (such as device platform and app version) to ensure updates are delivered correctly. No additional personal information is collected through this process.

3. How We Use Your Information

We use the information we collect to:

— Create and manage your account

— Provide, personalize, and improve the Platform and its features

— Process subscription payments and manage billing entitlements

— Display user-generated content including comments, climbing beta, and route descriptions

— Enable user search and community discovery features

— Provide location-based climbing features (with your consent)

— Deliver over-the-air App updates

— Monitor and fix technical issues, crashes, and bugs

— Analyze usage trends to improve the Platform

— Communicate with you about your account or changes to our services

— Comply with legal obligations under applicable law

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We use trusted third-party service providers to help us operate the Platform:

— Supabase — user authentication and storage of email addresses and media files

— Amazon Web Services (AWS) — cloud hosting for our website, API, database, and file storage infrastructure

— RevenueCat — subscription and entitlement management across iOS, Android, and web

— Apple / Google — in-app subscription payment processing

— Stripe — web-based subscription payment processing

— Expo — React Native app build tooling and over-the-air update delivery

— Google Analytics — used on the Sendage website to collect anonymized usage data such as page views, session duration, and traffic sources. Data is processed by Google in accordance with Google's Privacy Policy.

All service providers are contractually required to protect your data and use it only for the purposes we specify.

4.2 Public Platform Content

Content you contribute to the Platform — such as climb comments, route beta, area descriptions, and your public profile — is visible to other registered Sendage users. You control what information you include in public-facing content.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, safety, or property of Sendage, our users, or the public.

4.4 Business Transfers

If Sendage is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice within the Platform before your information becomes subject to a different privacy policy.

5. Data Storage & Infrastructure

Your data is stored on servers located in the United States through Amazon Web Services (AWS). Authentication data and media files are managed through Supabase, which also operates on cloud infrastructure. We select reputable cloud providers with strong security practices and data protection commitments.

We may migrate or add storage providers in the future. Any such changes will not reduce your privacy protections, and this policy will be updated accordingly.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Platform's services. If you delete your account, we will delete or anonymize your personal data within 30 days. Backup copies are typically purged within 90 days. Billing and transaction records are retained for a minimum of 7 years as required for accounting and legal compliance. After account deletion, we are not responsible for copies of your content that may temporarily persist in caches, third-party systems, or content others have shared or interacted with.

7. Cookies and Tracking

The Sendage website uses cookies and similar tracking technologies to support core functionality and analytics. A cookie is a small text file stored on your device by your browser.

We use the following tracking technologies:

— Google Analytics cookies, which collect anonymized data about how visitors use the website, including pages visited, session duration, and traffic sources. This data is processed by Google and does not identify you personally.

— Session cookies necessary for login and account functionality.

You can disable cookies through your browser settings. Disabling cookies may affect the functionality of the website. Our mobile App does not use browser cookies; analytics and session management in the App are handled through the services described in Section 4.1.

8. Your Rights & Choices

Depending on where you live, you may have the following rights regarding your personal information:

— Access — Request a copy of the personal data we hold about you

— Correction — Request correction of inaccurate or incomplete data

— Deletion — Request deletion of your personal data and account

— Portability — Request a portable copy of your data

— Objection / Restriction — Object to or request restriction of certain processing

— Withdraw consent — Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at support@sendage.com. We will respond within 30 days and may need to verify your identity before processing your request.

Account Deletion

You may request deletion of your account and associated personal data at any time. Account deletion can be initiated within the App where the feature is available. If you experience any difficulty, or prefer to request deletion directly, please contact us at support@sendage.com and we will process your request promptly.

Upon deletion, your account and personal data will be permanently removed from our systems within 30 days, subject to any legal retention obligations. Note that content you have contributed to the Platform (such as route descriptions or climbing beta) may be retained in anonymized or de-identified form to preserve the integrity of the climbing data for the community.

9. Children's Privacy

Sendage is intended for users aged 13 and older. We do not knowingly collect personal information from anyone under the age of 13. If you are under 13, please do not use the Platform or provide any personal information.

If you are a parent or guardian and believe your child under 13 has created an account or provided personal information, please contact us immediately at support@sendage.com and we will promptly delete that information and close the account.

10. Push Notifications

Sendage does not currently send push notifications. We plan to introduce this feature in a future update. When push notifications are available, you will be asked for explicit permission before any notifications are sent, and you may opt out at any time through your device settings or within the App.

11. International Data Transfers

Sendage is based in Canada. Your information is stored and processed on servers located in the United States through our cloud service providers. By using the Platform, you consent to the transfer of your information to the United States and other countries that may have different data protection rules than your country of residence.

For users in the European Economic Area (EEA) or United Kingdom, we ensure that cross-border data transfers are conducted in compliance with applicable data protection laws, including through standard contractual clauses or other approved mechanisms where required.

12. Canadian Privacy Law (PIPEDA)

As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. We collect only the personal information necessary for the purposes described in this policy, and we obtain meaningful consent before collection where required.

You have the right to access your personal information held by us and to challenge its accuracy. To submit a privacy inquiry or complaint, contact us at support@sendage.com.

13. Security

We take the security of your personal information seriously and implement industry-standard safeguards including:

— Encrypted data transmission (HTTPS/TLS)

— Secure authentication via Supabase (passwords are never stored in plain text)

— Access controls limiting internal access to personal data

— Reputable cloud infrastructure providers with strong security certifications

— Regular monitoring and security reviews

No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify you and any applicable regulators as required by law.

14. Third-Party Links and Services

The Platform may contain links to third-party websites or integrate with external services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through the Platform.

15. Subscriptions

Sendage offers monthly and annual subscription plans that unlock premium features. Subscriptions are managed through RevenueCat and billed via:

— Apple (iOS) — governed by Apple's Privacy Policy and Terms of Service

— Google (Android) — governed by Google's Privacy Policy and Terms of Service

— Stripe (web) — governed by Stripe's Privacy Policy

You can manage or cancel your subscription at any time through your Apple ID settings, Google Play account, or Stripe billing portal. Cancellation takes effect at the end of your current billing period.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the services we offer. When we make material changes, we will:

— Update the "Effective Date" at the top of this policy

— Post a notice within the App or on our website

— Where required by law, notify you by email

Your continued use of the Platform after changes take effect constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Hippocurious Interactive Inc.
Operating the Sendage Platform
Canada
Email: support@sendage.com

We are committed to resolving any privacy concerns promptly and transparently.