Skip to content
syl.cat

Privacy policy

Last updated: 23 October 2026

Sylcat is a parkour social network: a map of spots, meetups, challenges, gyms and schools. This policy explains what data we handle, why, and what you can do about it. If anything is unclear, write to hola@syl.cat.

Who is responsible

Sylcat, contact: hola@syl.cat. When a gym or school uses Sylcat to manage its students, the school is responsible for the data in its form (health, emergency contact, attendance) and Sylcat processes it on the school's behalf.

What data we handle

  • Account: email, name, @handle, date of birth, country and language. You sign in with a code sent by email, with Apple or with Google; we never store passwords.
  • Profile: photo, the year you started, Instagram or YouTube links and training stats. Under-18s' profiles are not public.
  • Location: your exact location is used on your phone to show what is near you. Our servers only receive an approximate cell (a few hundred metres) for "who trains nearby" and street mode, and we delete it after 24 hours. We keep the city you choose as home.
  • What you post: spots, photos, comments, links to Instagram videos, meetups, challenges and reports.
  • Game: XP, level, monthly position, badges and paws.
  • Payments: when you buy an entry, a pass or a fee, or launch a promotion, Stripe processes the payment; we keep the amount, the status and who was paid, never card or bank details. Sylcat Pro is bought on the App Store, Google Play or on the web through RevenueCat.
  • Schools and families: if you sign up (or sign your child up) at a school, the health and allergies form, the emergency contact, the authorisations, attendance and the technique passport.
  • Tax details of gyms and schools: company name, tax ID, registered address and sales, for their invoices and the DAC7 report to the Spanish tax office.
  • Waiting list: if you leave your email for us to tell you about the launch or your sport, we keep that email and the city or sport.
  • Technical: push notifications (device token), app errors and aggregate usage to improve it.

Why, and on what basis

  • To provide the service you ask for (contract): your account, the map, meetups, challenges, purchases and schools.
  • With your consent: your phone's location, notifications, photo consent and the health data in a school's form. You can withdraw it at any time.
  • Legitimate interest: community safety, moderation and preventing abuse.
  • Legal obligation: invoicing (Verifactu), DAC7 and keeping accounting records.

We do not sell your data or show personalised advertising to under-18s. Gym promotions only use the area and, for adults, the level.

Minors

  • In Spain you can have your own account from age 14. Younger children's accounts are created and managed by their parent or guardian from a family account.
  • Minors have no public profile or public stats, get no personalised promotions, cannot post medium or high risk challenges and do not use street mode with the app closed.
  • In school rankings, minors show with their first name only.

How long we keep it

  • Location cell: 24 hours.
  • Moderation records: 1 year.
  • Accounting and payment records: 6 years.
  • Waiting list: until we tell you or you ask us to delete it, at most 24 months.
  • Your account: until you delete it. Deleting it removes your profile, videos, challenges and stats; the spots you added stay on the map without your name.

Who we share it with

Only with providers that help us run the service, under a processing agreement and, when they are outside the European Economic Area, with standard contractual clauses:

  • Vercel (hosting, Frankfurt region), Neon (database in the EU) and Cloudflare R2 (photos and videos, EU jurisdiction).
  • Stripe (payments) and RevenueCat, Apple and Google (Sylcat Pro).
  • Resend (email), Expo (push notifications), Sentry and PostHog (errors and usage, in the EU).
  • OpenFreeMap (maps) and Meta, only when you open an Instagram video.

When a gym or school sells to you or signs you up, it receives the data it needs to do so.

Your rights

You can access, correct, delete or take away your data, object to or restrict its use, and withdraw your consents. "Download my data" in Settings gives you a copy in a file, and "Delete account" deletes it. For anything else, write to hola@syl.cat. If you think we got it wrong, you can complain to the Spanish Data Protection Agency (aepd.es).