Privacy Policy
Slopie is a 3D ski map that records your ski and snowboard sessions, on iPhone, on Android and at slopie.app. This policy explains what personal data Slopie handles, why, and the choices you have. Its Turkish version is also the information notice required by Türkiye’s Personal Data Protection Law (KVKK).
Who is responsible
Slopie is run by Alp Yenigün, an individual developer in Türkiye, who is the data controller. Write to support@slopie.app with any question about your data.
What we collect
- Your account. When you sign in with Apple, Google, Strava or an e-mail code: the identifier that service gives us, your e-mail address (with Sign in with Apple, possibly a private relay address) and the name it shares. You get a display name and a username, which you can change. You can use the map and record without an account; your recordings then stay on your phone.
- Your profile and settings. Your date of birth (Slopie is for people 13 and older, and it sets your heart-rate zones) and the country or region you choose; units, sport, language and the privacy choices you make. Optionally your sex and weight (to estimate calories); you can leave them empty.
- Your sessions. While you record, the app uses your phone’s location, altitude and motion to find your runs and lifts. A recording holds the route with times, speeds and altitudes, the resort and the session’s summary: its runs, distances and speeds, its energy (what your Apple Watch measured, or Slopie’s estimate) and, if you record with a heart rate strap, its heart rate through the session, with the average and the highest. If you are signed in, finished recordings are saved to your account. If you allow Slopie to read your heart rate from Apple Health, it is shown on your sessions on your iPhone and stays on your devices: it is never uploaded. Where your profile has no weight, date of birth or sex, Slopie reads them from Apple Health if you allow it, only to estimate a session’s energy and your heart-rate zones on your iPhone; they are never uploaded either. If you allow it, Slopie also saves each session to Apple Health as a workout (the sport, the times, the distance skied, an estimate of the energy and the route). Apple Health keeps it under your control, and deleting the session in Slopie removes it there too.
- Strava, if you connect it. When you sign in with Strava or connect it, Strava gives us your athlete identifier, your name and access keys, which we keep encrypted. Slopie then brings in your ski and snowboard activities from Strava, with their routes, times, speeds, altitudes and heart rate, as sessions in your account that only you see. If you turn on “Upload Sessions to Strava”, your finished sessions are also sent to Strava as activities. Disconnecting Strava, or deleting your account, ends Slopie’s access at Strava.
- Your device. A random identifier for the app on your phone, the app version, your language and, if you allow notifications, a notification token.
- Sign-in codes. We e-mail you a one-time code and keep only a scrambled (hashed) form of it. It expires after 10 minutes and is deleted within an hour after that.
- Technical data. Our servers process your IP address to deliver the service and to limit abuse, for example how many codes one address can request; these counters are deleted after about a day. The website uses the rough location our host derives from your IP address only to open the map near you, and does not store it.
Slopie shows no ads and sells no data. To see which of its ads bring people to Slopie, the website uses the Google tag and the Meta Pixel, which set cookies and tell Google and Meta of your visit and your sign-up, only if you accept them in the cookie banner; then our server also tells Meta of your sign-up. You can change your choice at any time: . Data from Apple Health and Strava never goes to them.
The iPhone app measures Slopie’s Apple Ads without tracking you, so it asks for no permission for that: if an Apple Ads ad brought you, our server asks Apple which campaign and search term it was, and when you start a trial or buy Slopie Pro, the app tells our server the product and its price. Both are kept under a random number for this installation of the app, never with your account. If you are signed in, your account holds whether Slopie Pro is active, which plan it is and until when, so that Pro is there wherever you sign in.
The app measures Slopie’s ads on Facebook and Instagram with Meta’s software only if you allow it: on iPhone by answering Allow to Apple’s question about tracking, on Android by turning on Settings › Ad Measurement. Until then the software sends nothing. Allowed, it tells Meta that the app was installed and opened and that Slopie Pro was bought, with technical data about your phone such as its model, system, language, IP address and advertising identifier. Your activities, routes and location never go to Meta. You can withdraw at any time: on iPhone in Settings › Privacy & Security › Tracking, on Android in Slopie’s Settings. Meta uses this data under its own privacy policy.
Location
Slopie asks for location access when the map first opens, and only “while using the app”. A recording keeps using location in the background until you finish it, and iOS shows that it is in use (Android with a notification); so does a location share with your friends, until it ends. Otherwise your location is used on your phone to show where you are on the map.
Friends and location sharing
You can add friends in Slopie. A friend sees your display name and username, and your sessions only if you turn on “Friends See My Sessions” (Settings › Privacy; off by default). People signed in to Slopie can find you by your name or username unless you turn off “Show Me in Search”.
Your location is shared only when you share it, only with the friends you pick and only until the end you pick: the end of the day, one hour, or until you turn it off. While a share runs, the app sends your latest position about every 20 seconds. Our servers keep only that latest position, and only while a share runs: it is deleted when you stop sharing and soon after a share runs out.
You can also share by link: a session’s link shows that session, and a location link your position while its share runs, to anyone who has the link, until you turn it off. Friends who see a session, and anyone with its link, see its route and numbers, never its note or its average and highest heart rate; the route’s file holds a strap’s readings if you recorded with one.
Blocking someone ends your friendship, any request and any location sharing between you; they can no longer find you or see anything of yours. If you report someone, we keep the report to review it.
Why we use it
- To provide what you ask for: your account, your recordings, their analysis and syncing (contract: GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
- To keep Slopie secure and working: limits against abuse and error logs (legitimate interests: GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
- With your consent, for optional features such as heart rate from Apple Health, your sessions as workouts in Apple Health, adding your tracks without your name to Slopie’s heatmap of where people ski, notifications, and measuring our ads with Meta. You can withdraw consent at any time in the app, or for Apple Health in Health’s own settings (GDPR Art. 6(1)(a) and 9(2)(a); KVKK Art. 5(1) and 6).
Who can see your data
Your recordings are private by default: only you see them. Slopie shows your data to other people only where you choose to share it, with the settings in the app. We do not sell or rent personal data.
Service providers
These companies run parts of Slopie for us and process data only on our instructions:
- Cloudflare — hosting of slopie.app and its API, the database and the sessions’ tracks (both stored in the European Union), and the map data;
- Resend — sending sign-in code e-mails;
- Apple and Google — sign-in when you choose them; Apple also delivers the iPhone app and its notifications, and says which of our Apple Ads brought an installation; Google delivers the Android app;
- Strava — sign-in and your activities when you connect it, and your sessions when you choose to upload them.
- Google and Meta — measuring our ads on the website, only with your consent.
Transfers abroad
Our database and API run in the European Union. Some providers, and Meta when you allow ad measurement, are based in the United States and may process data there, for example to send an e-mail. Such transfers rely on the safeguards the law provides, such as standard contractual clauses or the EU–US Data Privacy Framework.
How long we keep it
Your account and recordings are kept until you delete them. Deleting a recording removes it from our servers; deleting your account removes your account, settings, recordings, friends and devices at once. Copies in our database provider’s backups are overwritten within 30 days. A record that an account was deleted, without its name or e-mail address, is kept to protect the service.
Your rights
You can get a copy of your data, correct it, delete it (in the app: Settings › Account › Delete Account), object to or restrict its use, and withdraw consent. Write to support@slopie.app; we answer within 30 days. You can also complain to a data protection authority: in Türkiye the Personal Data Protection Authority (KVKK), in the EU the authority where you live.
Children
Slopie is not meant for children under 13, or under 16 in the European Economic Area, and they should not create an account. If you believe a child has given us personal data, write to us and we will delete it.
Security
Connections are encrypted. Sign-in tokens are stored hashed or encrypted, and the app keeps its keys in the iPhone’s Keychain or Android’s Keystore. No system is perfectly secure, but we work to protect your data.
Changes
If this policy changes in a way that matters, we will say so in the app or on this page before the change takes effect.