Introduction
This Privacy Policy describes how Steezy ("we," "us," or "our") collects, uses, and shares information about you when you use our mobile application and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.
We are committed to protecting your privacy and handling your data in an open and transparent manner.
Information We Collect
Information You Provide Directly
Account Information
- Email address
- Password (encrypted)
- Username
- Full name, given name, family name
- Profile photo
- Bio/description
- Date of birth
- Gender (optional)
Ski Profile Information
- Skill level
- Preferred activity type (skiing/snowboarding)
- Home resort preference
- Skiing frequency
- Performance goals
- Previous tracking methods used
User-Generated Content
- Session notes and comments
- Shared content and social interactions
Information Collected Automatically
Location Data
When you use our recording features, we collect precise GPS location data including:
- Latitude and longitude coordinates
- Elevation/altitude
- Speed and movement data
- Timestamps
This location data is essential to provide our core service of tracking your skiing/snowboarding sessions, calculating statistics (vertical descent, speed, distance), and mapping your runs.
Device Information
- Device type and model
- Operating system and version
- Unique device identifiers
- App version
Usage Information
- Features you use and actions you take
- Session dates and durations
- Performance metrics and statistics
- Interaction with the app interface
Analytics Data
We use third-party analytics services to understand how users interact with our Service. This may include:
- Pages and screens viewed
- Time spent in the app
- Navigation patterns
- Feature engagement
App Tracking Transparency (ATT)
We use Apple's App Tracking Transparency framework to request your permission before tracking your activity across other companies' apps and websites. This tracking helps us:
- Measure the effectiveness of our advertising campaigns
- Improve and personalize your experience
- Understand how users discover and engage with Steezy
You can change your tracking preferences at any time in your device's Settings under Privacy & Security > Tracking. If you opt out of tracking, we will not track your activity across other apps and websites, though we may still collect analytics data within the Steezy app to improve our Service.
Crash and Error Data
We collect crash reports and error logs to improve app stability and fix bugs. This may include:
- Device state at time of crash
- Stack traces and error messages
- App version and device information
How We Use Your Information
We use the information we collect to:
Provide and Improve the Service
- Track and record your skiing/snowboarding sessions
- Calculate performance statistics (speed, vertical, runs, time)
- Display your activity on maps
- Generate session recaps and summaries
- Maintain leaderboards and rankings
Personalize Your Experience
- Customize content based on your preferences
- Provide relevant resort information
- Tailor recommendations to your skill level
Communicate With You
- Send push notifications about your sessions
- Notify you of rank changes and achievements
- Provide customer support
- Send service-related announcements
Maintain Safety and Security
- Detect and prevent fraud or abuse
- Enforce our Terms of Service
- Protect the rights and safety of users
Analytics and Improvement
- Analyze usage patterns to improve features
- Conduct research and development
- Fix bugs and resolve issues
How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
With Your Consent
When you explicitly authorize us to share information.
Public Profile and Leaderboards
Certain information may be visible to other users, including:
- Username and profile photo
- Rank and XP on leaderboards
- Aggregate statistics you choose to share
You can control what information is publicly visible through your privacy settings.
Service Providers
We share information with third-party service providers who perform services on our behalf:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Backend infrastructure, authentication, data storage | Account data, session data |
| Mapbox | Map display and location services | Location coordinates (anonymized) |
| PostHog | Product analytics | Usage data, device info (anonymized) |
| Sentry | Error tracking and crash reporting | Crash logs, device info |
| Apple/Google | Push notifications | Device tokens |
These third-party service providers have their own privacy policies governing the use of your information. We are not responsible for the privacy practices of these third parties, and we encourage you to review their respective privacy policies. Our contractual agreements with these providers require them to protect your data, but we cannot guarantee their compliance.
Legal Requirements
We may disclose your information if required by law, legal process, or government request, or to:
- Comply with applicable laws or regulations
- Enforce our Terms of Service
- Protect the rights, property, or safety of our users or others
- Detect and prevent fraud or security issues
Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
Data Retention
We retain your information for as long as your account is active or as needed to provide you the Service. Specifically:
- Account Data: Retained until you delete your account
- Session Data: Retained indefinitely to maintain your historical records and statistics
- Location Data: Stored as part of session records; GPS paths retained for session replay and analysis
- Analytics Data: Retained in anonymized/aggregated form
- Crash Logs: Retained for up to 90 days
You may request deletion of your account and associated data at any time (see "Your Rights" below).
Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit (TLS/SSL)
- Encryption of sensitive data at rest
- Secure authentication mechanisms
- Regular security assessments
- Access controls and authentication for our systems
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Data Breach Notification
In the event of a data breach that affects your personal information, we will comply with applicable breach notification laws in your jurisdiction. Where required, we will notify affected users and relevant authorities within the timeframes mandated by law.
Limitation of Liability
To the maximum extent permitted by applicable law, we shall not be liable for any unauthorized access to, or alteration, theft, or destruction of your data through accident, fraudulent means, or any other method. You acknowledge that you provide your personal information at your own risk.
Your Rights and Choices
Access and Portability
You may request a copy of your personal data by contacting us.
Correction
You can update your account information through the app settings.
Deletion
You may delete your account at any time through the app settings or by contacting us. Upon deletion:
- Your profile and personal information will be removed
- Your session data will be permanently deleted
- Your leaderboard entries will be removed
- Some anonymized/aggregated data may be retained for analytics purposes; this data is processed in a manner that prevents re-identification of individual users
Location Permissions
You can control location permissions through your device settings. Note that disabling location access will prevent the core session recording functionality from working.
Push Notifications
You can manage notification preferences in the app settings or disable push notifications through your device settings.
App Tracking Transparency
You can control whether Steezy can track your activity across other companies' apps and websites. To change your preference, go to Settings > Privacy & Security > Tracking on your iOS device, or respond to the tracking permission prompt when you first open the app.
Do Not Track
We do not currently respond to "Do Not Track" browser signals.
Children's Privacy
The Service is not intended for children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected personal information from a child under the applicable age, we will take steps to delete that information.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. By using the Service, you consent to the transfer of your information to these countries.
We ensure appropriate safeguards are in place when transferring data internationally, including standard contractual clauses where applicable.
Third-Party Links and Services
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out: You have the right to opt-out of the sale of your personal information. We do not sell personal information.
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, contact us using the information below.
European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Legal Basis: We process your data based on: (a) your consent, (b) performance of a contract, (c) legal obligations, or (d) our legitimate interests.
- Rights: You have the right to access, rectify, erase, restrict processing, data portability, and object to processing.
- Complaints: You have the right to lodge a complaint with a supervisory authority.
To exercise these rights, contact us using the information below.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy in the app
- Updating the "Last Updated" date
- Sending you a notification (for significant changes)
Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
Dispute Resolution
Any disputes arising from this Privacy Policy shall be governed by and resolved in accordance with the dispute resolution provisions set forth in our User Agreement, including any applicable arbitration clauses. By using the Service, you agree to resolve disputes as described therein.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: privacy@steezyapp.com
Consent and Acknowledgment
By using the Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and sharing of your information as described herein. You further acknowledge that:
- You are providing your personal information voluntarily
- We may update this Privacy Policy from time to time, and your continued use constitutes acceptance
- You have reviewed the types of data we collect and understand the purposes for which it is used
- You understand the inherent risks of transmitting information over the Internet
Disclaimer
THIS PRIVACY POLICY IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, WE DISCLAIM ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
WE DO NOT WARRANT THAT OUR SECURITY MEASURES WILL PREVENT ALL UNAUTHORIZED ACCESS, AND WE SHALL NOT BE LIABLE FOR ANY DAMAGES ARISING FROM UNAUTHORIZED ACCESS TO YOUR PERSONAL INFORMATION EXCEPT WHERE SUCH LIABILITY CANNOT BE EXCLUDED BY LAW.
This Privacy Policy is provided for informational purposes. We recommend consulting with a legal professional to ensure compliance with applicable laws in your jurisdiction.