Privacy
Lane C is built so your climbing data stays yours. This page covers the Lane C app (iPhone, iPad, Mac, and Android phones and tablets) and the lanec.app website.
Last updated: 3 August 2026
Who is responsible (controller)
The controller for the Lane C app and this website is BitCrux GmbH, Einsiedlerstrasse 216, 8810 Horgen, Switzerland, UID CHE-301.491.820 (brand names: Lane C and BitCrux). Contact: info@lanec.app.
The app: your videos stay on your device
All video analysis — pose detection, splits and speed — runs entirely on your device. Your recordings, poses and results never reach our servers. Lane C has no account, ads, third-party analytics SDK or cross-app or cross-site tracking. The app sends privacy-protective usage statistics to our self-hosted Matomo: counters for screens and features opened; success or failure category; static or handheld camera; capture and sharing method; edition selected at first launch; the product involved in a purchase; how long an analysis took, in broad time bands; and when the free-tier limit was reached, including how many runs were waiting. Each event also carries the platform and app version. Values are fixed labels or small counts, never free text or content from a run. The network request necessarily reaches us with a source IP address; we shorten it before analytics storage. A fresh random identifier is generated at every app launch, no analytics cookie is set, and events are not linked across launches. Statistics are on by default and can be switched off under Settings › Privacy ('Share anonymous usage statistics'); switching off also deletes queued events. Raw event data is deleted after 180 days. We rely on our legitimate interest in improving Lane C (Art. 6(1)(f) GDPR; Swiss FADP). This does not replace consent where local rules on access to device information require it. Store disclosures classify this as Product Interaction ('App interactions' on Google Play), not linked to you and not used for tracking.
Optional iCloud sync
If you turn on iCloud sync (off by default), your runs are stored in your private CloudKit database under your own Apple ID. Apple hosts it; we cannot read it. Sharing a run card or .lanec package is always user-initiated via the system share sheet — the app itself sends nothing anywhere.
Android: backups, and no cloud sync
Lane C has no cloud sync of its own on Android, so runs, videos and analyses stay on the device. Android Auto Backup copies one settings file to a private area of your Google Drive so preferences and the free-analysis counter can survive reinstallation on the same Google account. Recordings, poses, results and purchase records are excluded. We cannot access the backup. Google states that it is protected by the Google Account credentials and, on Android 9 or later, end-to-end encrypted using the device credentials. You can disable Android backup in system settings. Legal basis: our legitimate interest in preserving settings and keeping the free tier fair (Art. 6(1)(f) GDPR; Swiss FADP).
In-app purchases
Optional purchases are processed through your App Store or Google Play account. We do not receive card or bank details. Apple and Google provide sales and transaction records needed for accounting, entitlement, fraud prevention and support. Google Play may also make an order ID, product and purchase details and the purchaser email address available to us when needed to find an order or handle a refund. We use that information only for those purposes and statutory record-keeping. Lane C has no account or billing backend; the app checks subscription status with the store on your device. Apple and Google process store accounts and payments as independent controllers under their privacy policies. Legal basis: performing the contract and complying with accounting obligations (Art. 6(1)(b) and (c) GDPR; Swiss FADP). Transaction records are retained for the applicable statutory period.
Newsletter and launch updates
If you sign up separately, we and our processor Infomaniak Network SA in Switzerland use your email address and consent record to send Lane C updates. Opening the signup form loads Infomaniak and ALTCHA resources; they receive technical request data such as IP address, time and browser information to deliver and protect the form. Legal bases are your consent for the messages and our legitimate interest in form security (Art. 6(1)(a) and (f) GDPR; Swiss FADP). We keep the subscription until you unsubscribe, and may retain a minimal suppression and consent record to honour your choice and meet legal duties. Withdraw consent through the link in every email or at info@lanec.app.
Website analytics (Matomo)
lanec.app uses self-hosted, cookieless Matomo to understand visits. It processes the page path, referrer, time, browser and device information and a source IP address that we shorten before analytics storage. We do not use this data for advertising, sell it or link visits across unrelated services. Access is limited to us and providers that operate our infrastructure for us. Legal basis: our legitimate interest in operating and improving the site (Art. 6(1)(f) GDPR; Swiss FADP). You may object by writing to us. Raw analytics data is deleted after 24 months. App statistics sent to the same instance are described above and are deleted after 180 days.
Meta ad measurement: pixel and server-side transmission
To measure our ad campaigns we transmit visit data – IP address, browser information (user agent), click IDs from ads and pages viewed – server-side to Meta Platforms. The legal basis is our legitimate interest in effective, affordable advertising (Swiss revFADP). You can object at any time: choosing 'Decline' in the cookie banner or via 'Cookie settings' in the footer stops this transmission immediately. For visitors from the EEA and the United Kingdom it only happens after explicit consent (Art. 6(1)(a) GDPR). The Meta Pixel in your browser, by contrast, is always loaded only after you explicitly accept marketing tracking. Meta receives identifiers and technical and interaction data as described above; we and Meta Platforms Ireland Ltd. are joint controllers for collecting and transmitting this data. Meta then processes it under its own privacy policy, including for measurement and advertising, and may transfer it to Meta Platforms, Inc. in the USA using an applicable adequacy framework or other lawful safeguards.
Server logs
Our web server records technical access logs (IP address, time, requested page, user agent) to operate and secure the site. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Logs are deleted after 30 days at the latest.
Storage on your browser or device
The website stores your theme and cookie choice in browser local storage so it can remember them. These entries are necessary to provide the selected settings and remain until you clear site data or change the choice. Marketing storage is used only after consent. The app stores its settings, runs and results locally as described above. Providing app statistics and marketing consent is optional; an email address is required only if you choose to subscribe to updates. We do not make automated decisions that produce legal or similarly significant effects.
Recipients and international transfers
We disclose data only as needed to infrastructure and hosting providers acting for us; Infomaniak Network SA in Switzerland for newsletters and form security; Apple and its relevant affiliates for App Store distribution, purchases and optional iCloud; Google and its relevant affiliates for Google Play distribution, purchases and Android backup; and Meta Platforms Ireland Ltd. and Meta Platforms, Inc. only after marketing consent. We may also disclose data to professional advisers, courts or authorities where legally necessary. Processing takes place mainly in Switzerland and the EEA. Apple, Google and Meta may process data in other countries, including the USA. Depending on the recipient, transfers rely on an adequacy decision or framework, standard contractual clauses and supplementary safeguards, or another lawful basis. Contact us for more information or a copy of applicable safeguards.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction and portability; object to processing based on legitimate interests; and withdraw consent at any time without affecting earlier processing. Write to info@lanec.app. You may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU/EEA, your local supervisory authority. Runs, videos and analyses remain on your device or your private iCloud, so we hold no copy to provide or delete. Because app events use only a per-launch random identifier, we may be unable to identify records as yours without collecting additional data; this does not limit your rights. You can stop future statistics in Settings › Privacy.
Questions? info@lanec.app