Privacy Policy

This Privacy Policy explains how Dyno, operated by Pang Wei Zhe, collects, uses, and protects your information when you use the Dyno mobile application. By using Dyno, you agree to the practices described below.

1. Information We Collect

We collect the following information when you use Dyno:

Account information: email address, full name, and username provided during sign-up
Profile information: profile photo (avatar) you choose to upload
Climbing data: gym location, grade, date, and video recordings of your climbs that you choose to log
Social data: friend connections you make and direct messages you send within the app
Device token: push notification token to send you in-app notifications
Usage data: points earned, weekly goal progress, and streak history
Anonymous crash data: when the app crashes or hits an error, we collect the stack trace, device model, iOS version, and app version (via Sentry) so we can fix bugs. This data is not linked to your account or identity.
Product analytics: screen views, taps, and app lifecycle events (via PostHog), linked to your Dyno user ID, to help us understand usage patterns and improve the app. We do not record your screen or capture personal content.

2. How We Use Your Information

To provide and operate the Dyno app and its features
To display your climbing history, progress, and leaderboard ranking
To enable social features such as friend connections and direct messaging
To send push notifications about friend requests and messages (you can disable these in your device settings)
To calculate and display weekly points and goal progress

3. Third-Party Services

Dyno uses the following third-party services to operate. Each has its own privacy policy:

Supabase

Provides our database, authentication, file storage, and real-time messaging infrastructure. Your account data, climbing logs, messages, and profile information are stored on Supabase servers.
supabase.com/privacy

Mux

Processes and hosts the climbing videos you upload. Videos are transmitted to Mux for encoding and streaming.
mux.com/privacy

Apple Sign-In

Used as a primary authentication method. If you sign in with your Apple ID, your name and email (or a private relay email) are shared with Dyno to create your account.
apple.com/legal/privacy

Google Sign-In

Used as an optional authentication method. If you sign in with Google, your Google account email and name are shared with Dyno to create your account.
policies.google.com/privacy

Expo (Push Notifications)

Used to deliver push notifications to your device. Your device push token is stored and used solely to send you notifications from Dyno.
expo.dev/privacy

Sentry (Crash Reporting)

Used to collect anonymous crash reports and error data so we can diagnose and fix bugs. Dyno is configured to not send personally identifiable information (PII), IP addresses, or user content to Sentry. Any session replays captured have all text and images masked before upload.
sentry.io/privacy

PostHog (Product Analytics)

Used to understand how people use Dyno so we can improve the experience — for example, which features are popular, which screens have drop-off, and where users encounter friction. We collect screen views, taps, and app lifecycle events, linked to your Dyno user ID. We do not record your screen or capture personal content. Session replay is disabled.
posthog.com/privacy

4. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your data is only shared with the third-party services listed above as necessary to operate the app.

Climbing videos and profile information you mark as public within the app will be visible to other Dyno users. Content you keep private is only visible to you.

5. Data Retention and Account Deletion

Your data is retained for as long as your account is active. You can permanently delete your account and all associated data at any time directly from within the app: go to Profile → Settings → Danger Zone → Delete Account. Deletion is immediate and cannot be undone — your profile, climbing videos, messages, friends, and all associated data will be removed from our servers.

If you are unable to access the in-app deletion for any reason, you may also contact us at the email below and we will process your request within 30 days.

6. Children's Privacy

Dyno is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Security

We take reasonable measures to protect your information, including server-side access controls and encrypted data transmission. However, no method of transmission over the internet is 100% secure.

8. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and data
Opt out of push notifications via your device settings

To exercise any of these rights, contact us at tobypang8@gmail.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy, please contact:

Pang Wei Zhe
tobypang8@gmail.com

Last updated: April 12, 2026