Privacy Policy
Last updated: August 31, 2026
SkiVert (“we”, “us”) is a mobile app for tracking the vertical feet and lift rides you accumulate while skiing and snowboarding. The app and its backend service are operated by Andrew Anglum. This policy explains what we collect, why, and what choices you have. Questions: support@skivert.app.
The short version
- We collect what's needed to run your account, record your ski activity, and power friends features.
- SkiVert does not use GPS or request your location.
- We do not sell your data, and there are no advertising or third-party analytics SDKs in the app.
- Contact matching uses scrambled (hashed) phone numbers — your address book is never uploaded.
- You can delete your account and data from inside the app at any time.
Information we collect
| Category | What it is | Why |
|---|---|---|
| Account | Email address, username, and — if you choose to add them — first name, last name, and bio. If you register with an email and password, the password is stored only as a salted bcrypt hash. | Create and secure your account; identify you to friends. |
| Sign in with Apple / Google | If you use one of these, we receive a unique account identifier and an email address from Apple or Google (Apple may provide a relay address). | Let you sign in without a separate password. |
| Phone number | Optional. If you add one, we store it, plus a one-way hashed (SHA-256) form. | Help friends find you; the hash is used for contact matching described below. |
| Contacts | Only if you grant contacts permission. Phone numbers from your contacts are hashed on your device; only the resulting hashes are sent to our server to check for matches. Your names, contacts, and raw phone numbers are never uploaded or stored. | Find people you know who already use SkiVert. |
| Ski activity | The lift rides you log (lift, mountain, date and time), mountains you mark as visited, uphill sessions, resulting vertical/day/season statistics, and any reviews or ratings you write. | The core purpose of the app. |
| Friends | Your friend connections and pending friend requests. | Power the friends list and season leaderboard. |
| Push token | If you enable notifications, a device token from Apple. | Notify you about friend requests. |
| Purchases | If you buy an optional in-app feature, Apple processes the payment. We store only a transaction identifier. We never receive your card or payment details. | Unlock the purchased feature for your account. |
| Technical & support data | Our servers and hosting provider automatically log IP addresses and request metadata. If you use the in-app contact form, your message is emailed to us. | Security, abuse prevention, debugging, and responding to you. |
What we do not collect
- Precise or background location / GPS — the app never requests location access.
- Profile photos (not a current feature).
- Apple Health or fitness data.
- Advertising identifiers. No ad or analytics SDKs.
How we use your information
- Operate the app — record rides, compute statistics, and sync your data across devices.
- Provide social features (friends, leaderboard, last-recorded mountain) according to your privacy setting.
- Send friend-request notifications, if you've enabled them.
- Respond to support requests and contact-form messages.
- Protect against fraud, abuse, and technical problems.
- Comply with legal obligations.
Where required (for example, in the EEA/UK), our legal bases are: performance of our contract with you (running the app), your consent (contacts access, notifications), our legitimate interests (securing and improving the service), and compliance with legal obligations.
How your information is shared
Service providers
| Provider | Purpose | Location |
|---|---|---|
| Render | Cloud hosting and the PostgreSQL database that stores your account and activity data | United States |
| Apple | Sign in with Apple, in-app purchases, and the Apple Push Notification service | United States |
| Google Sign-In (if you use it), and Gmail for delivering support and contact-form email | United States |
Other users
People you're connected with can see limited profile information — your username, name, and the mountain you last recorded at — and your season summary if your privacy setting allows it. You control this in Edit Profile.
Legal and safety
We may disclose information if required by law, or where we believe it's necessary to protect the rights, property, or safety of SkiVert, our users, or the public.
We do not sell your personal information, and we do not share it for advertising.
Data retention
We keep your account data for as long as your account is active. When you delete your account, we promptly remove your personal data from our production database; residual copies in encrypted backups are purged on their normal rotation, within 30 days. Support emails may remain in our mailbox. Aggregate mountain and lift information is not personal to you and is retained.
Your rights and choices
- Access and correct — view and edit your profile in the app.
- Delete — use Delete Account in the app (Profile → Edit Profile), or email us.
- Export — email support@skivert.app to request a copy of your data.
- Withdraw consent — turn off contacts access or notifications in iOS Settings at any time.
Depending on where you live, you may have additional rights — including to access, delete, or port your data, to object to or restrict certain processing, to non-discrimination for exercising your rights, and to lodge a complaint with your local data protection authority. California residents: we do not “sell” or “share” personal information as those terms are defined under the CCPA. To exercise any right, contact support@skivert.app; we may need to verify your identity.
Security
Passwords are hashed with bcrypt, data in transit is encrypted with HTTPS/TLS, and access to production data is restricted. No method of transmission or storage is completely secure, but we work to protect your information and to address issues promptly.
Children
SkiVert is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we'll delete it.
International users
Your information is stored and processed in the United States. If you use SkiVert from outside the U.S., you understand that your information will be transferred to and processed there.
Changes to this policy
We'll post any changes on this page and update the “Last updated” date above. If the changes are significant, we'll provide additional notice, such as in the app.
Contact
SkiVert, operated by Andrew Anglum — support@skivert.app