Privacy Policy

1. Controller

The controller responsible for processing personal data in the Pistr app and on this website is:

Dennis Donner (sole proprietor)
Eduard-v-Winterstein-Straße 11
14480 Potsdam
Germany
app-support@donner.io

For all privacy questions and requests, please write to app-support@donner.io. We have not appointed a data protection officer.

2. Overview

Pistr is a ski app for maps, ski-day recording, statistics, weather and friends. Much of it happens on your device. Some data has to leave your device so the app can work – for example, to sync your ski days with your account or to load map tiles. The short version:

• Pistr requires an account. Your recorded ski days, including the full GPS track, are synced to your account.
• Friends you have accepted can see your ski-day statistics; your GPS tracks are visible only to you.
• Pistr only writes workouts to Apple Health and never reads Health data. No Health data and no GPS coordinates are sent to analytics services.
• Pistr does not use the advertising identifier (IDFA), does not ask for tracking permission, shows no ads and does not sell your data.
• You can delete your account and the data stored with it at any time in the app.

3. Account and profile

To use Pistr you create an account with email and password or with Sign in with Apple. Accounts are managed by our backend provider Supabase. We process:

• your email address (with Sign in with Apple, possibly an Apple relay address) and an account ID;
• your password, which is handled by Supabase’s authentication service; the app keeps your sign-in session in the iOS Keychain;
• the app language at sign-up;
• your profile: display name and your invitation code.

With Sign in with Apple, Apple can pass your first name to the app. Pistr stores it on your device and suggests it as your display name; if you do not choose another name, it can be saved as your display name. You can change your display name in the app at any time. Your display name is visible to other signed-in Pistr users, for example when they receive an invitation from you or compare statistics with you.

4. Friends

You can invite friends with a link (https://pistr.donner.io/friend.html?code=…) or a QR code that the app creates on your device. The invitation contains your invitation code. When someone accepts, a friendship is stored on the server, first as a request and then as accepted.

Accepted friends can see your ski-day statistics – such as the date, ski area name, runs, distance, vertical, speeds, times and the estimated calories – and compare them with their own. They cannot see your GPS tracks. You can remove friends in the app.

5. Location and ski recording

With your permission, Pistr uses your device’s precise location:

• Map: while you use the app, to show your position on the map and for route planning. For this, lower accuracy (about 100 m) is enough.
• Recording a ski day: when you start a recording, Pistr asks for “Always” access and temporary precise location so that recording continues with the screen locked. Background location is used only while a recording is running.

Recordings are first stored on your device. When you are signed in, each ski day is synced to your account: start and end time, ski area name, statistics (distance, vertical, runs, speeds, times on pistes and lifts, estimated calories), the detected runs and lift rides, and the full GPS track – every recorded point with time, latitude, longitude, altitude, speed and accuracy. This lets you access your ski days on all your devices. During a recording, a Live Activity can show your current statistics on the Lock Screen; this happens locally on your device only.

6. Condition reports

You can report the current conditions in a ski area. The report contains your account ID, the ski area, the snow type, an optional rating (1–5), whether the lifts are running and an optional free-text note.

7. Apple Health and body weight

If you allow it, Pistr saves each completed ski day as a downhill skiing workout in Apple Health, including distance and estimated active energy. Pistr requests no read access to Apple Health. The workouts are managed by Apple Health on your device; we do not receive them.

You can optionally enter your body weight to improve calorie estimates. The value is stored only on your device and is never uploaded. Only the calculated calorie estimate is part of your synced ski-day statistics. Analytics only records that a weight was set or cleared – never the value itself.

8. Camera: QR codes and AR

Pistr uses the camera only when you open the QR scanner to add a friend, or the augmented-reality view to replay a recorded run. Camera images are processed on your device. Pistr does not save or upload photos or videos.

9. Maps, ski-area data and offline maps

To display maps, the app loads map styles, map tiles, satellite imagery and elevation data directly from map providers (see section 15). Like every web request, these requests transmit your IP address and reveal which map area is being loaded. Your GPS position is not sent with them.

Ski-area data (pistes, lifts, points of interest) is based on © OpenStreetMap contributors (ODbL) and loaded from our backend. If you download a ski area for offline use, the map data is stored on your device.

10. Weather

For weather, the app sends only the ID of the selected ski area to our backend. The backend looks up the coordinates of that ski area and requests the forecast from Open-Meteo. Your own position is not sent.

11. In-app purchases

Purchases are processed by Apple through the App Store. We do not receive your payment details. To manage your purchases and restore them on other devices, Pistr uses RevenueCat. RevenueCat receives an anonymous app user ID generated by RevenueCat, your purchase history and technical device information (e.g. app version, OS version, language). To connect purchase data with our app analytics, the app also passes the Amplitude IDs to RevenueCat. Your email address and account ID are not passed to RevenueCat.

12. Analytics, crash reports and install attribution

Amplitude

We use Amplitude (EU data center) to understand how Pistr is used and to improve it. The app sends events such as “ski day started”, “ski area selected”, “route started”, “purchase completed” or “setting changed”, together with app version, platform, language and region setting of your device, summary values (e.g. number of ski days and friends, your selected ski area, sign-in method, status of the location permission), coarse usage figures (e.g. distance only in ranges such as “5–15 km”) and your account ID as user ID. For purchases, the product, amount, currency, transaction ID and your purchase status are recorded. Spot IDs are hashed. Amplitude is configured not to record your IP address, the device identifier (IDFV), your carrier, or a city or region derived from your location; only the country is derived. No GPS coordinates and no Health data are sent. Automatic screen and interaction tracking is switched off.

Firebase (Google)

We use Firebase Crashlytics, Firebase Performance Monitoring and Google Analytics for Firebase. Crashlytics sends crash reports (stack trace, device model, OS and app version) so we can fix errors. Performance Monitoring measures app start times and network request durations. Google Analytics for Firebase collects automatic usage events (for example first launch, sessions and app updates) with an app instance ID, device and app information and a coarse location derived from the IP address. We do not send custom events or user IDs to Firebase. Advertising features, the advertising ID (IDFA) and the device ID (IDFV) are switched off for Firebase.

Install attribution (Apple)

Once after installation, the app asks Apple’s AdServices framework for an attribution token and sends it to Apple to find out whether Pistr was installed through an Apple Search Ads campaign. The result (e.g. campaign, country, paid yes/no) is stored on your device and added to the Amplitude analytics. No advertising identifier and no tracking permission are used for this.

Pistr does not use any advertising networks and does not track you across apps or websites of other companies.

13. Support by email

If you contact us by email, we process your email address and your message to answer your request. If you use “Contact support” in the app, the prepared email also contains your app version and your RevenueCat app user ID so we can help with purchase questions. You can remove this information before sending.

14. This website

This website uses no cookies, no analytics, no advertising and no content from third parties; fonts, styles and images are delivered from this website itself. When you open a page, your browser transmits technical information to the web server (such as IP address, time, requested page and browser type), which is necessary to deliver the page.

If you click the language switcher, your choice (“en” or “de”) is saved in your browser’s local storage under pistr-lang so that the start page opens in your language next time. This value stays in your browser. The friend invitation page reads the invitation code from the address to prepare the link that opens Pistr.

15. Service providers and transfers to third countries

We use the following service providers. Where they process data on our behalf, we have concluded or accepted data processing agreements with them.

Some of these providers are located in the USA or other countries outside the EU/EEA, or may access data from there. In these cases, the transfer is based on an adequacy decision of the European Commission – for the USA the EU–U.S. Data Privacy Framework, where the recipient is certified under it; for Switzerland the adequacy decision for Switzerland – or on the EU standard contractual clauses.

16. Legal bases

• Art. 6(1)(b) GDPR (contract): account, sync of your ski days, friends, condition reports, maps, weather, purchases and support requests about your account.
• Art. 6(1)(a) and Art. 9(2)(a) GDPR (consent): writing workouts to Apple Health and the optional body weight, to the extent this is health data. You give consent by granting the Health permission or entering the value, and you can withdraw it at any time (see section 19).
• Art. 6(1)(f) GDPR (legitimate interests): analytics, crash reports and performance measurement (stable, improved app), install attribution (understanding how people find Pistr), delivering this website and the security of our systems.

17. Retention and deletion

• Account and synced data (profile, ski days, GPS tracks, friendships, condition reports) are stored until you delete your account.
• Delete account: in the app under Account → Delete account. This deletes your profile, ski days, GPS tracks, condition reports, friendships and your login from our backend, and then the recordings and saved routes on that device. Workouts in Apple Health and App Store purchases are not affected; you manage them with Apple. Uninstalling the app or signing out does not delete your account.
• Data on your device stays there until you delete it or the app.
• Analytics and crash data are kept only as long as needed for the purposes above and within the retention periods set in the respective service. They are not deleted automatically with your account; write to us if you want them deleted.
• Support emails are kept as long as needed to handle your request, and longer only where the law requires it.

18. Your rights

Under the GDPR, you have the right to access your data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21): where we process data based on legitimate interests, you can object at any time for reasons arising from your particular situation – for example to analytics. Just write to app-support@donner.io.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
www.lda.brandenburg.de

19. Permissions and how to revoke them

Pistr does not request access to your contacts, photos, motion data or notifications, and does not ask for tracking permission.

20. Children

Pistr is not directed at children under 16. If you are under 16, please use Pistr only with the consent of a parent or guardian. If we learn that we have processed a child’s data without such consent, we will delete it.

21. Security

All connections between the app and our backend and service providers are encrypted (HTTPS). Your sign-in session is stored in the iOS Keychain. Access rules in our database ensure that your GPS tracks can only be read by you. We never receive your payment details.

22. Changes to this policy

We update this privacy policy when the app or the legal situation changes. The current version is always available on this page; the date at the top shows when it was last changed.