Privacy policy

Information the app uses

• Account information: when you sign in with Apple or Google, we receive a provider account identifier and the name, email address and profile information that the provider supplies. Apple may provide a private relay address. Our sign-in service stores account records and session credentials. Depending on the sign-in method, records can include provider tokens, IP address and user-agent information.
• Passkeys: when you register a passkey, the service stores its public key, credential identifier and authenticator metadata. Your credential provider manages the private key.
• Ski-day information: with your permission, the app records location, timestamps, altitude, motion and derived metrics such as speed, distance and vertical. Apple Watch can relay recorded samples to your phone.
• Crew and sharing: the service stores profile, friendship, crew and session membership information. During a shared session, your crew can receive your live position and speed. Joining and sharing can expose information to other members of that crew.
• Tracks and Dispatches: the phone stores recorded data locally. Online features can upload track archives, ski-day summaries and Dispatch information to our services.
• Technical information: our hosting providers process requests, including network and diagnostic information, to deliver and secure the service.

How we use this information

We use this information to authenticate accounts, record ski days, provide mountain navigation, share crew locations, save Dispatches and diagnose service problems. Google access is limited to basic sign-in scopes: openid, email and profile. The app does not request access to your Gmail, Drive or Calendar.

Service providers and storage

We use Apple and Google for their respective sign-in methods, Convex for account and social data, and Cloudflare for live crew services, track storage and this website. Map and resort content providers can receive network requests needed to display maps or download content. These providers may process information outside Australia.

The website does not add advertising trackers or analytics scripts. Hosting providers can still process technical request information.

Your choices

You can control location and motion permissions in device settings, end a recording session, and sign out of the app. Some features require those permissions or an internet connection. Removing the app does not by itself delete server-side account records or uploaded tracks.

To request access, correction, or deletion of your account and stored data, email lach.jacobs@gmail.com. We may ask you to verify ownership before acting on a request. The current pre-release app does not provide a complete self-service deletion flow.

Retention and security

Account, ski-day and uploaded track records remain in the service until removed through a supported deletion process or a verified request. Backups and technical logs may retain records after removal from active storage. We have not established a fixed retention period for every category during this pre-release stage.

The app stores session credentials in the system Keychain and uses HTTPS for hosted services. No storage or transmission method guarantees absolute security. Avoid sharing sensitive routes with people you do not trust.

Changes and contact

We will update this page when the service or its data practices change. For privacy questions or complaints, contact Lachlan Jacobs at lach.jacobs@gmail.com.