Global Privacy Policy

This Privacy Policy explains how SkiScout Tracker ("SkiScout", the "App", "we", "us", or "our") collects, uses, discloses, stores, transfers, and protects personal information when you use our mobile application, website, support channels, and related services (collectively, the "Services"). It also explains the privacy choices and rights that may be available to you.

1. Who We Are and Who Controls Your Data

The controller/business responsible for the processing described in this Policy is SkiScout.ai.

Privacy contact: skiscoutai@gmail.com.

2. Scope

This Policy applies to personal information processed through SkiScout Tracker. It does not govern third-party websites, apps, resorts, emergency services, map providers, or other services that operate under their own privacy notices.

3. Information We Collect

3.1 Account and Profile Information

• Email address, display name, account identifier, authentication status, and profile information you choose to provide.
• Information provided through Sign in with Apple or another supported authentication provider, subject to your settings with that provider.
• Friend connections, invitations, blocking preferences, privacy settings, and social-feature configuration.

3.2 Precise Location and Route Information — Required for the Service

SkiScout is a location-based sports tracking service. Precise location is required for the App to perform its core purpose. When you use SkiScout, the App processes precise GPS coordinates, timestamps, altitude/elevation, direction, speed, route, start/end points, and related motion-derived information in order to track your activity, calculate performance statistics, display your route, and provide the App's location-based features.

If you do not want SkiScout.ai to process your precise location for these purposes, do not use the App. Disabling or refusing location permission will prevent the App from providing its core tracking functionality.

SkiScout.ai uses location information only to provide, operate, secure, maintain, and improve the Services and to provide location-sharing features that you intentionally activate. SkiScout.ai does not sell your precise location information, does not use it for third-party advertising, and does not use it for unrelated commercial profiling.

3.3 Activity and Performance Information

We process information generated from a skiing, snowboarding, mountain-biking, or other supported activity, such as distance, duration, speed, vertical change, runs, route, timestamps, and performance statistics. We do not intend the App to provide medical diagnosis or medical advice. However, some jurisdictions may treat fitness, activity, or location-derived information as sensitive personal information or consumer health data.

3.4 Live Location and Social Information

Processing your location by SkiScout.ai is required for the App's core tracking service. Separately, if you affirmatively enable live sharing, the App may make your current or recent location visible to the friends or other users you select, subject to the controls shown in the App. Live sharing with other users is optional unless the particular feature you choose clearly requires it. You can stop sharing with other users by ending the tracking session or using the available sharing controls.

3.5 Public Sessions and Leaderboards

A session is not intended to become public merely because it was recorded. If you expressly choose to publish a session or participate in a public leaderboard, information such as your display name, activity statistics, route or route portions, timing, and ranking may become visible to other users or the public. Public route information can reveal places you visited. Review the publication screen carefully before making a session public.

3.6 Device, Network, Diagnostic, and App Information

Depending on the production configuration, we may process device model, operating-system version, app version, language, IP address, network information, app events, crash logs, performance diagnostics, push-notification tokens, security signals, and similar technical information.

3.7 Support and Communications

If you contact us, we process the content of your request, your contact details, and related correspondence so we can respond, investigate issues, and maintain appropriate records.

3.8 Payments and Subscriptions

Purchases made through Apple's App Store or another authorized platform are processed by that platform. We generally receive transaction status, entitlement, subscription, and receipt-validation information rather than your full payment-card details.

3.9 Biometrics and Device Authentication

If you use Face ID, Touch ID, or comparable device authentication, biometric matching is performed by the device operating system. We do not receive your facial geometry, fingerprint template, or other underlying biometric template from Apple's biometric system. Credentials stored for device authentication should remain in the device's secure storage.

4. Sources of Personal Information

We obtain information directly from you; automatically from your device when you use enabled features; from authentication, app-store, infrastructure, analytics, crash, mapping, and security providers; and, where applicable, from other users who send you friend requests or interact with your public content.

5. Why We Use Personal Information and Our Legal Bases

Purpose	Examples of Data	EEA/UK Legal Basis
Create and operate your account	Email, display name, account ID	Performance of a contract
Record sessions and calculate statistics	Precise location, route, speed, elevation, activity data	Performance of a contract; consent where required for device/location permissions or sensitive data
Provide live-location sharing you activate	Precise current/recent location, selected recipients	Consent and/or performance of a user-requested feature, depending on applicable law
Publish sessions or public leaderboard entries you choose to publish	Profile, activity, route, stats	Consent and/or performance of a user-requested feature
Maintain friends/social features	Connections, invitations, blocks	Performance of a contract; legitimate interests for safety and abuse prevention
Secure the Services, prevent fraud and abuse	Account, device, IP, security logs	Legitimate interests; legal obligation where applicable
Debug, maintain and improve reliability	Diagnostics, crashes, app events	Legitimate interests; consent where required
Optional analytics or non-essential measurement	App events, device/app information	Consent where required; otherwise legitimate interests where permitted
Provide customer support	Account details and correspondence	Performance of a contract; legitimate interests
Comply with law and enforce rights	Relevant account, transaction, security or activity records	Legal obligation; legitimate interests

Where we rely on legitimate interests, those interests include operating a safe and reliable service, securing accounts, preventing fraud, investigating abuse, improving performance, and protecting our users and legal rights. We balance those interests against the impact on users.

6. Device Permissions and Just-in-Time Notices

The App may request operating-system permissions for precise location, background location (if a session needs to continue while the App is not in the foreground), notifications, motion/fitness data, or other features. The permission screen and in-app notice should explain why the permission is needed. You can change device permissions in your operating-system settings, although disabling a required permission may prevent the related feature from working.

Live location sharing must be controlled separately from basic session recording. Enabling tracking should not be treated as automatic permission to disclose live location to friends or the public.

7. How We Share Personal Information

We may disclose personal information only as described below:

• People you choose. Friends or other recipients may receive live location or shared-session information when you enable those features.
• Public users. Information you intentionally publish may be visible publicly.
• Service providers/processors. Infrastructure, authentication, database, cloud hosting, security, diagnostics, communications, support, and similar vendors may process information for us under contractual restrictions.
• Mapping providers. Map-tile or mapping requests may reveal IP address and the geographic area being viewed. Current providers include OpenFreeMap, OpenSnowMap, Waymarked Trails, and other OpenStreetMap-based services used in the production build.
• Google/Firebase. We use Google Firebase for functions such as authentication and data storage. If the production build also uses Firebase Analytics, Crashlytics, Cloud Messaging, App Check, or other Firebase services, those services must be listed in the final vendor inventory.
• Apple. Apple may process information for Sign in with Apple, App Store subscriptions, device authentication, push notifications, and platform services under Apple's own terms and privacy practices.
• Legal/safety disclosures. We may disclose information when reasonably necessary to comply with law, court process, enforceable governmental requests, protect rights or safety, investigate fraud or abuse, or establish/defend legal claims.
• Corporate transactions. Information may be transferred in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar transaction, subject to applicable law.

8. Sale, Sharing, Targeted Advertising, and Profiling

SkiScout.ai does not sell personal information, including precise location information. We do not disclose precise location for cross-context behavioral advertising, targeted advertising, data-broker activity, or unrelated commercial profiling. We do not use precise location to serve third-party advertisements.

We do not use solely automated decision-making to make decisions that produce legal or similarly significant effects on users, unless we expressly disclose such processing and provide rights required by law.

9. Sensitive Personal Information and Consumer Health Data

Precise geolocation may be classified as sensitive personal information in some jurisdictions. Fitness or performance data may also fall within broad definitions of consumer health data in some U.S. states. We use such information only to operate, provide, secure, maintain, and improve SkiScout's tracking and related features, and where required we obtain the permission or consent required by applicable law. We do not sell this information, use it for third-party advertising, or use it to infer medical diagnoses.

Where applicable law grants additional rights concerning sensitive or consumer health data—such as consent, deletion, access, withdrawal, or restrictions on disclosure—we will honor those rights as required.

10. International Data Transfers

SkiScout may be used internationally, and our service providers may process information in countries different from the country where you live. Those countries may have different data-protection laws.

Where EEA, Swiss, or UK law requires a transfer mechanism, we use an applicable lawful mechanism, such as an adequacy decision, the European Commission Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, or another mechanism permitted by law, together with supplementary safeguards where appropriate.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described above, including to provide the Services, comply with law, resolve disputes, prevent fraud, and enforce agreements. The intended framework is:

Data	Intended Retention
Account/profile	While the account is active, then deleted or de-identified subject to legal and security retention needs.
Saved sessions/routes/stats	Until the user deletes them or the account is deleted, unless a shorter product retention rule applies.
Transient live-location state	Only as needed to provide live sharing; it should not be retained as a separate live-tracking history unless required for a saved session or security purpose.
Public content	Until the user removes it, closes the account, or it is removed under our rules, subject to cached/back-up copies.
Security and diagnostic logs	Retained only as long as needed for security, debugging, and legal compliance, unless needed longer for an active investigation or legal requirement.
Support records	Retained based on support, legal, and dispute-resolution needs.
Backups after deletion	Removed or overwritten through normal backup cycles, unless law requires longer retention.

12. Account and Session Deletion

You may delete local session history using available in-app controls. If the App allows account creation, it should also provide an in-app method to initiate deletion of the account and associated personal information. Deleting an account is intended to remove or de-identify account data and associated server-side data that we are not legally required to retain.

Deleting the App from your device does not necessarily delete your account or server-side data. Subscription cancellation may also require action through the applicable app-store account.

13. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, which may include access controls, authentication, encryption in transit, secure cloud infrastructure, logging, least-privilege access, vendor controls, and security review. No service can guarantee absolute security.

If we become aware of a personal-data breach, we will investigate and provide notifications to regulators or affected individuals when required by applicable law.

14. Your Privacy Rights

Depending on where you live and subject to legal exceptions, you may have rights to request access to personal information, correction, deletion, restriction, objection, portability, withdrawal of consent, information about processing, and review of certain automated decisions. You may also have the right to complain to a privacy or data-protection authority.

To exercise a right, contact skiscoutai@gmail.com or use the in-app privacy/account controls. We may need to verify your identity before completing a request. Authorized agents may submit requests where applicable law permits. We will not unlawfully discriminate against you for exercising privacy rights.

14.1 EEA, Switzerland, and United Kingdom

Where the GDPR, UK GDPR, Swiss data-protection law, or equivalent rules apply, you may have rights of access, rectification, erasure, restriction, objection, and portability, as well as the right to withdraw consent at any time for processing based on consent. Withdrawal does not affect processing lawfully carried out before withdrawal. You may lodge a complaint with your local supervisory authority.

14.2 California

Subject to applicability thresholds and exceptions, California residents may have rights to know/access, correct, delete, obtain information about categories of collection/disclosure, opt out of sale or sharing, and limit certain uses/disclosures of sensitive personal information. Precise geolocation may be treated as sensitive personal information. Our current intended practice is not to sell personal information for money or use precise geolocation for cross-context behavioral advertising.

14.3 Other U.S. States

Residents of states with comprehensive privacy laws may have rights to access, correct, delete, obtain a portable copy, opt out of targeted advertising, sale, or certain profiling, and appeal a denied request. Where consent is required to process sensitive data such as precise geolocation, we will seek consent as required. Rights vary by state and may depend on statutory applicability thresholds.

14.4 Other Countries

Users in other jurisdictions may have additional local rights. We will honor mandatory rights that apply to our processing of your personal information.

15. Children and Minors

The Services are intended for adults aged 18 and older unless we expressly launch a separate, legally compliant minor/family experience. We do not knowingly permit children to create standard accounts or knowingly collect precise live-location data from children through the standard service. If you believe a minor has provided personal information in violation of this rule, contact us so we can investigate and take appropriate action.

If we later offer the Services to minors, we will implement age-appropriate design, parental/guardian consent where required, heightened location-sharing controls, and other protections required by applicable law before doing so.

16. Location Safety and Anti-Stalking Protections

You may not use SkiScout to track another person without their knowledge and lawful authorization, stalk or harass someone, evade safety controls, scrape location data, or republish another user's precise location without permission. We may suspend accounts, limit features, preserve evidence, or cooperate with lawful authorities where necessary to address credible misuse.

17. Third-Party Links and Services

Third-party services linked from or integrated with SkiScout are governed by their own privacy policies. We encourage you to review them. Their privacy and security practices are not controlled by us except to the extent they act as our contracted processors.

18. Changes to This Policy

We may update this Policy to reflect product, legal, security, or business changes. We will update the "Last updated" date and provide additional notice when required by law or when a change materially affects how we process personal information. Where consent is required for a new purpose, we will seek it before starting that processing.

19. Contact Us