Privacy Policy

Last updated: 3 August 2026

1. Who we are

FriSki (“we”, “us”) is a group ski-tracking app: members of a private, invite-only group share their live position on a resort map, receive proximity audio alerts, and coordinate meeting points.

FriSki is operated by Morel Avraham. For any privacy question, or to exercise the rights described in section 7, contact friskisupport@gmail.com.

2. Data we collect

Category	What exactly	Where it lives
Account	Sign-in identity (Sign in with Apple, Google, or an email one-time code), display name, avatar colour, optional profile photo	Supabase
Live location	Latitude and longitude, altitude, battery level, timestamp. Only your most recent fix is stored on our servers — one row per person, overwritten on each update. Collected in the background during an active group session.	Supabase
Ghost mode	Whether you have chosen to appear approximate or hidden to your group	Supabase
Messages	Group chat messages and quick signals	Supabase
Groups	Group name, membership, invite code, meeting points	Supabase
Push token	A device token used to deliver notifications	Supabase
Safety reports	If you report a message: the reported text, who sent it, who reported it, and the reason you chose. Kept even if the message is later deleted, so a report can still be acted on.	Supabase
Crash data	Crash reports and diagnostic breadcrumbs. No clipboard contents and no location payloads.	Sentry
Feedback	Optional in-app survey answers	Supabase
Waitlist	If you sign up for beta access on this website (not the app): your email address and, optionally, which of skier / group / resort best describes you	Supabase

Day statistics — distance, vertical drop, top speed — are calculated and stored on your device only and never reach our servers.

3. Real-time location sharing, and how it works

Sharing runs only during an active group session. It starts when you enter one of your groups and stops when you leave, or when you turn sharing off in Settings.
On Android a persistent notification (“FriSki is tracking your location”) is shown the entire time tracking runs.
Your position is visible only to members of groups you joined by invitation. Access is enforced on the server with row-level security, and the real-time channel carrying positions is authorised per group member — leaving or being removed from a group ends access immediately.
Ghost mode shows you as approximate or hidden to your group while you can still see everyone else.
We store only your latest position. We do not build a movement history on our servers.

4. Legal bases (GDPR Article 6)

Performance of a contract — providing the map, chat, groups and meeting points.
Consent — background location and push notifications, both granted through operating-system permissions you can revoke at any time.
Legitimate interest — crash reporting, and acting on abuse reports.

5. Retention

Live location: your latest fix is kept until the next one overwrites it, or until you delete your account.
Messages, groups, meeting points and profile: kept until you delete them or delete your account.
Safety reports: kept while the report is open and for a reasonable period after it is resolved, so repeat behaviour can be recognised.
Crash data: retained under Sentry’s standard retention window.
Waitlist signups: kept until the beta closes or you ask us to remove your email — email friskisupport@gmail.com.
We do not yet run an automated time-based purge job, so we do not claim timed deletion beyond what is described here.

6. Deleting your account

In the app: Settings → Account → Delete account. This immediately and irreversibly erases your profile and photo, your authentication record, your group memberships, your stored location and your push token.

Content you shared with a group — messages, meeting points and feedback — remains, but is detached from you so it can no longer be traced to your account. Removing one person’s messages would leave holes in a history the rest of the group still relies on. The deletion page lists exactly what is erased and what is detached.

If you cannot reach the app, see deleting your FriSki account for how to request deletion by email.

7. Your rights

You have the right to access, correct, erase, restrict and port your data, and to object to processing. You can exercise most of these in the app directly — profile editing and account deletion — or by emailing us. You may also lodge a complaint with your local data protection authority.

8. Sharing

We do not sell your data, and we do not share it with advertisers. We rely on these processors to run the service: Supabase (database, authentication, real-time), Sentry (crash reporting), Expo and EAS (build and push infrastructure), and Apple and Google (sign-in and push delivery). Your location and messages are shared only with your group members, as described in section 3.

9. International transfers

Data is hosted in the European Union (Supabase, eu-central-1). Processors may transfer data outside the EU under standard contractual clauses.

10. Children

FriSki is not directed at children under 13, or the higher minimum age your country requires. Signing up requires confirming that you are 13 or older.

11. Changes

We will post any changes on this page and update the date at the top. Material changes are announced in the app.