Last updated: 2026-10-20
Anna Stec
skistec.kontakt@gmail.com
This policy covers the skistec.com website, the SkiStec app for Android phones and the SkiStec app for Wear OS watches. The website and the core app features (maps, snow and weather, recording ski days, SkiStec AI) work without an account.
We do not sell data, we show no ads in the app and we do not track your location in the background except while you are recording a ski day yourself.
The website and the app server run on Netlify. Like any web server, the provider automatically logs technical connection data: IP address, date and time of the request, browser or app type and referrer. This serves solely to operate and secure the service. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
The website stores the following in your browser’s local storage. These are not tracking cookies and are never transmitted — they stay on your device and you can delete them in your browser settings. They are required for features you asked for, so they do not require consent.
| Name | Purpose | Duration |
|---|---|---|
sk_lang | remembers the chosen language | until you delete it |
sk_theme | remembers light or dark theme | until you delete it |
sk_weather_v1 | temporary copy of the forecast to avoid refetching | 3 hours |
sk_lang_hint_dismissed | remembers you dismissed the language suggestion | until you close the tab |
If you click "Use my location", your browser will ask for permission. Without it, your location is not read. Coordinates are used solely to calculate distances to resorts and are sent to the OSRM routing service for that purpose. We do not store your location. Legal basis: consent (Art. 6(1)(a) GDPR), which you may withdraw in your browser settings.
When you tap "Start recording", the app saves your GPS position, altitude, speed and accuracy roughly every second. This runs as a service with a visible notification — also with the screen off — and stops when you end the recording (or automatically after a long stop or when you leave the resort). The app does not request "always" location access and does not read your location in the background outside recording.
Recordings and their summaries (runs, lifts, speeds, records, badges) are stored only on your phone. If Android backup is enabled, the system may copy them to your Google account according to your phone settings. You can delete a single day or all recordings in the app (Profile → Settings).
After a recording ends, the app downloads terrain tiles (Mapterhorn) for the area where you skied to calculate vertical accurately. The tile server sees your IP address and the map area, not the track itself.
When you open the app, your current location is read to show nearby resorts and distances. It is not stored anywhere.
Day videos and GPX files are created on your phone and go anywhere only if you share them yourself. Your avatar photo stays on your phone.
Offline maps: when you download a resort map, map and terrain tiles are saved in the app storage on your phone. You can delete them in Profile → Settings → Offline maps.
Reminders ("You are at a resort — record?" and on group trip days) are scheduled on your phone as local notifications — nothing is sent to a server for this.
Legal basis: performance of the service you request (Art. 6(1)(b) GDPR); you grant location access in Android settings and can revoke it at any time.
The watch can record a day on its own, using its GPS and barometer. The recording is transferred from the watch to your phone over Bluetooth or Wi-Fi using Wear OS services (Google Play Services) — directly between your devices, without our server. The phone sends your favourite resorts, daily goal and records to the watch.
Heart rate from the watch sensor is read during recording only to show it on the "Health" screen (with a calorie estimate). It is not saved in the recording and not sent anywhere. You can revoke sensor access in the watch settings.
The watch downloads the resort’s piste map and weather from our server (the server then sees the IP address).
The question you type into SkiStec AI, together with earlier messages of that conversation, is sent to our server and from there to Google Gemini, which prepares the answer. In the app we attach your approximate location (rounded to about 1 km) and your favourite resorts so the answer fits you. We do not store conversations on the server. Conversation history is kept on your phone only if you turn it on in settings. Google processes requests under its own terms — do not include personal data in your questions.
The microphone is switched on only when you tap the microphone icon. Speech is converted to text by the speech recognition service on your phone (usually Google). We do not record or store audio.
Legal basis: performance of the service you request (Art. 6(1)(b) GDPR).
If you turn on snow alerts, the app subscribes in Firebase Cloud Messaging to "topics" for your favourite resorts (e.g. resort + cm threshold). Once a day our server sends a notification to a topic when the forecast exceeds the threshold — it does not know who is subscribed and no account is needed. Google assigns the device a notification identifier. Turning alerts off in app settings unsubscribes you. Legal basis: consent (Art. 6(1)(a) GDPR).
If the phone or watch app crashes or hits an error, Firebase Crashlytics sends us a technical report: device model, system and app version, time and place of the error in the code, and a random installation identifier. The report contains no location, recordings or message content. It is used only to fix bugs and kept by Google for up to 90 days. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — a working app.
Location (precise, while in use) — detecting the resort, recording days, sharing your position with friends. Notifications — ongoing recording, meet-ups and messages from friends, snow alerts, reminders. Microphone — spoken questions to SkiStec AI and voice messages in chat. Battery optimisation exemption (requested in settings) — so the system does not interrupt recording. On the watch additionally: body sensors (heart rate), rotation sensor (direction arrow to a friend) and vibration. You can revoke any permission in system settings; the related feature will then stop working.
An account is needed only for social features (friends, groups, chat, reviews, leaderboards). You create it with email and password or a Google account. We store: email address (not shown to others), chosen nickname, badge colour, year of birth (to check age) and — for users aged 13–15 — a parent’s email address. We send one consent request to that address (via Brevo); the account starts working once the parent clicks it. Other users see only your nickname and a coloured letter badge, never the name from your Google account. Your profile (season, records, badges) is visible only to your friends.
On the server we store summaries of your days (numbers, runs, records, badges) — needed for leaderboards and the profile your friends see. The full GPS track of a day is uploaded only for days visible to friends (so they can view the map and replay); days marked "hide" stay only on your phone.
Live location: while recording and when you turn on "Share location" for a chosen time, your position is sent about every 20 seconds and is visible to your accepted friends and members of your groups. It is not stored as history — it disappears when recording or sharing ends. If you wear the watch, your phone passes friends’ positions to it over Bluetooth (Wear OS services).
Groups and meet-ups: the group name, members (nickname and badge) and meet-ups (place on the map, time, "I’ll be there" list) are visible to group members. We send push notifications about new meet-ups and messages via Firebase Cloud Messaging, for which we store your phone’s notification identifier. You can mute a chat.
Chat: text, voice (audio recording up to 30 s) and "I am here" (position at the time of sending) messages are stored on the server — in trip groups until about a week after the trip, in other conversations for 30 days — and then deleted. Only participants have access, and the administrator if a violation is reported.
Resort reviews (ratings, text, date and conditions) are public with your nickname — also on skistec.com. Leaderboards show your nickname and results to friends and group members. You appear in a resort leaderboard with your nickname only if you turn on "Show me in the resort leaderboard"; otherwise your result only counts towards the anonymous "60/80/100 km/h club" (a number of people). Sections that look like car rides are not counted.
Safety and moderation: texts and nicknames are checked by an automatic filter; anyone can report content or block a person. Reports are reviewed by the administrator, who may remove content or suspend an account.
Account, chat and live-location data are stored with Google Firebase (Google Ireland Ltd.). Some data may be processed by Google outside the European Economic Area under standard contractual clauses.
Legal bases: performance of the service (Art. 6(1)(b) GDPR) — account, friends, chat, leaderboards; consent (Art. 6(1)(a) GDPR) — live location sharing and visibility at the resort, withdrawn with one switch; legitimate interest (Art. 6(1)(f) GDPR) — safety and moderation.
Deleting your account: in the app (Friends → your badge in the top right corner → Delete account) or by email to the address above — details at skistec.com/en/delete-account. We immediately delete your profile, nickname, friends, shared days, reviews and invite code; your chat messages disappear at the latest when their retention period ends (up to 30 days). Recordings on your phone stay.
The website and the apps use the services below. Your device connects to them, which transmits your IP address.
On the website we use Google Analytics 4 for visit statistics in Consent Mode: until you consent in the banner it sets no cookies and transmits no personal data — only anonymous, aggregated traffic data. Once you consent, it sets cookies and transfers data to Google, including outside the EEA. On resort pages we show an OpenStreetMap without consent and an embedded Google Map (which sets its own cookies) after consent. You can withdraw consent at any time ("Cookie settings" in the footer). The mobile app does not use Google Analytics. Legal basis: consent (Art. 6(1)(a) GDPR); for anonymous data, legitimate interest (Art. 6(1)(f) GDPR).
Resort pages include links to Booking.com for accommodation and flights via the Travelpayouts affiliate network, which credits us a commission on completed bookings — this does not affect your price. On the website the Travelpayouts script loads only after you consent in the cookie banner. Legal basis: consent (Art. 6(1)(a) GDPR).
The website and apps link to resort websites, maps and search engines. Once you follow such a link, that site’s privacy policy applies.
You have the right to access, rectify, erase, restrict processing of, object to and port your data, to withdraw consent at any time and to lodge a complaint with a supervisory authority (in Poland: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw). Recording data kept only on your phone is under your control — you can delete it in the app. For other data, write to the address in section 1.
The website and the app (without an account) are available to everyone and collect no data identifying a child. Features requiring an account ("Friends") are available from age 13; users aged 13–15 can create an account only after a parent or guardian confirms consent (Art. 8 GDPR). A parent may request deletion of a child’s account at any time.
We may update this policy, for example when adding features. The date of the last change appears at the top, and we will announce material changes in the app.