Privacy Policy
1. Introduction
This Privacy Policy describes how Aliaksei Khitro ("we," "us," or "our") collects, uses, and protects information when you use the SlopeLab mobile application ("the App"). We are committed to protecting your privacy and handling your data responsibly.
By using the App, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the App.
2. Information We Collect
2.1 Location Data
The App uses your device's GPS to track your ski and snowboard sessions. This includes latitude, longitude, altitude, speed, and timestamps recorded at regular intervals while a session is active. All location data is stored locally on your device and is not transmitted to our servers.
The App requires location permission (including background location access) to function. Background location is used solely to continue tracking your session while the device is locked or the App is in the background.
2.2 Analytics Data
We use Amplitude to collect anonymous product analytics that help us understand how the App is used and improve the experience. We send the following custom events:
- App opens (with a flag indicating whether it is a first-ever launch)
- Onboarding steps viewed and completed (including ride type and skill level you select)
- Session lifecycle events: started, paused, resumed, and stopped (with aggregate metrics such as run count, total duration, and top speed)
- Run completion events (with metrics such as distance, vertical drop, and duration — no GPS coordinates)
- Paywall shown, dismissed, and subscription purchased or restored (these events are only sent when in-app subscriptions are active; they are not sent in the current free beta release)
In addition, the Amplitude SDK automatically collects standard technical information: device model, operating system version, app version, and approximate country (derived from your IP address at the time of the event).
Amplitude analytics are not linked to your identity — the App has no user accounts. We do not send your GPS tracks, precise location coordinates, or any data that could identify you personally.
We do not collect Apple's Identifier for Advertisers (IDFA) or any other advertising identifier. The App does not participate in ad tracking and does not require an App Tracking Transparency (ATT) prompt. The Amplitude SDK does assign a randomly generated device identifier — seeded from Apple's Identifier for Vendor (IDFV) — to associate analytics events from the same device across sessions. This identifier is not linked to your name, email, or any personal data, and is not used for advertising or cross-app tracking.
2.3 Subscription and Payment Data
Note: The current release is a free beta. In-app purchases and subscriptions are not active in this version. The remainder of this section describes how payment data will be handled in future paid releases.
Subscription purchases are processed entirely through the Apple App Store. We do not collect, process, or store your payment information (credit card numbers, billing addresses, etc.). Apple may share limited transaction information with us (such as subscription status and purchase dates) to manage your access to premium features.
2.4 Information We Do NOT Collect
We do not collect:
- Your name, email address, or other personal contact information (unless you contact us directly)
- Photos, contacts, or other device data unrelated to the App's functionality
- Health or fitness data from HealthKit or similar frameworks
- Data from other apps on your device
3. How We Use Your Information
We use the information we collect for the following purposes:
- Providing the service: Processing your GPS data on-device to classify runs, lifts, and rest periods and compute session statistics.
- Improving the App: Using anonymous analytics to identify bugs, understand usage patterns, and prioritize new features.
- Managing subscriptions: Verifying your subscription status to enable or disable premium features.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Data Storage and Security
4.1 On-Device Storage
Your GPS session data, run history, and session statistics are stored locally on your device using Apple's on-device database framework. This data is not transmitted to any external server. If you delete the App, this data is permanently removed.
4.2 Third-Party Services
Analytics data processed by Amplitude is subject to Amplitude's own privacy policy and security practices:
- Amplitude Privacy Policy: https://amplitude.com/privacy
When the Resort Trails map overlay is enabled, map tiles are fetched from OpenSnowMap's servers. These requests are made by your device directly to OpenSnowMap and may include your approximate location (derived from the map area being viewed). OpenSnowMap is an open-source project built on OpenStreetMap data; tile requests are subject to OpenSnowMap's own terms of use.
4.3 Data Retention
- On-device data: Retained until you delete the App or manually delete sessions within the App.
- Analytics data: Retained by Amplitude for up to 24 months, after which it is deleted.
5. Data Sharing
We do not sell your data. We may share limited, non-personal information in the following circumstances:
- Service providers: Amplitude (analytics) receives anonymous event data as described above, solely to provide analytics services to us. OpenSnowMap's tile servers receive map tile requests (which may include approximate location) when the Resort Trails overlay is enabled.
- Legal requirements: We may disclose information if required to do so by law or in response to valid legal processes (e.g., a court order or subpoena).
- Business transfers: If the App or its assets are acquired by or merged with another entity, your information may be transferred as part of that transaction. We will notify you of any such change.
6. Your Rights
6.1 All Users
You have the right to:
- Delete your on-device data at any time by deleting sessions within the App or uninstalling the App.
- Revoke location permissions through your device's Settings at any time (note: the App will not function without location access).
- Contact us to request information about what data, if any, we hold about you.
6.2 European Economic Area (EEA) Users — GDPR Rights
If you reside in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):
- Right of access: Request a copy of any personal data we process about you.
- Right to rectification: Request correction of inaccurate personal data.
- Right to erasure: Request deletion of your personal data.
- Right to restrict processing: Request that we limit how we use your data.
- Right to data portability: Request your data in a structured, machine-readable format.
- Right to object: Object to processing of your personal data for certain purposes.
- Right to withdraw consent: Withdraw your consent at any time where processing is based on consent.
To exercise any of these rights, contact us at support@slopelab.app. We will respond within 30 days.
Legal basis for processing (GDPR): We process analytics data based on our legitimate interest in improving the App. We process location data based on your explicit consent (granting location permissions).
Right to lodge a complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.
Data Protection contact: For GDPR inquiries, contact support@slopelab.app.
6.3 California Users — CCPA/CPRA Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to delete: Request deletion of personal information we have collected.
- Right to opt-out of sale: We do not sell your personal information.
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, contact us at support@slopelab.app.
6.4 Do Not Track Signals
SlopeLab is a native mobile application and does not respond to web browser "Do Not Track" signals, as they are not applicable to native apps. The App does not track you across third-party websites or services.
7. Children's Privacy
The App is not intended for anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at support@slopelab.app.
8. International Data Transfers
If you are located outside the United States, please be aware that anonymous analytics data may be processed in the United States or other countries where our service providers operate. By using the App, you consent to the transfer of this data to the United States and other jurisdictions that may have different data protection laws than your country. For EEA users, such transfers are conducted in compliance with GDPR requirements, including appropriate safeguards such as Standard Contractual Clauses.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last Updated" date at the top. We encourage you to review this Privacy Policy periodically. Your continued use of the App after changes are posted constitutes acceptance of the revised Privacy Policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact:
Aliaksei Khitro
Email: support@slopelab.app