Privacy policy
Last updated: 2026-10-28
Who we are
Boulder Kosova L.L.C. (NUI: 812376441), Ukë Bytyçi, Innovation and Training Park, Prizren, Kosovo ("Boulder Kosova", "we"). Contact: info@boulderkosova.com.
What we collect
- Account: first and last name, phone number, email address and password (stored only as a secure hash).
- Optional: date of birth, gender, and your profile photo.
- Visits: the date and time you enter the center, recorded by our entrance scanner when you scan your QR code or card.
- Memberships and payments: the packages you buy at reception, their dates and payment status (paid in cash; we never receive card details).
Why we use it
- To run your membership and let you into the center (your QR code and photo are checked at the entrance).
- To show you your membership, visits and history in the app.
- To contact you about your membership or account (for example a password reset code).
We do not sell your data, show ads, or use your data for tracking or profiling.
Your photo
Reception compares your photo with you at the entrance. When you take or choose a photo in the app, the app checks on your phone (Google ML Kit face detection) that it shows one clear face. This check runs on your device: no face measurements or biometric templates are created for storage or sent to us. Only the photo itself is uploaded. Staff may also take your photo at reception.
Who can see your data
Our authorised staff, and our hosting provider Hostinger, which stores the data on our behalf. Google ML Kit may send anonymous technical data about its own performance to Google. We share nothing else with third parties, unless the law requires it.
How long we keep it
As long as your account is active. Records of memberships, payments and visits are kept for as long as accounting and tax law requires for accounting and legal reasons.
Deleting your account
In the app: Profile > Delete account. Or write to info@boulderkosova.com from the address you registered with.
When you delete your account we immediately: sign you out on all devices, delete your photo, disable your QR code and cards, and erase your password, email, phone, address, date of birth, gender and staff notes. For accounting we keep your name, member number, memberships, payments and visit history.
Your rights
You can ask to see, correct or delete your data, or object to its use, by writing to info@boulderkosova.com. You may also complain to the Information and Privacy Agency of Kosovo.
Security
Data is sent over encrypted connections (HTTPS). On your phone, your login and QR pass are stored in the device's secure storage.
Children
The app is for members aged 13 and over. Younger climbers are registered by reception with a parent or guardian.
Changes
We will post any changes on this page and update the date above.