Privacy Policy
Last Updated: March 2, 2026
Introduction
Carve ("we," "our," or "the app") is a ski tracking application developed by Angel Terziev. This Privacy Policy explains how we collect, use, and protect your information when you use our app.
Information We Collect
Account Information
When you create an account using Sign in with Apple or Google Sign-In, we collect:
- Email address
- Display name (if provided)
- Profile photo URL (if provided via Google Sign-In)
This information is used solely for authentication and displaying your profile within the app.
Location Data
Carve collects precise GPS location data to provide ski tracking functionality. This includes:
- Latitude and longitude coordinates
- Altitude
- Speed and course
- Horizontal and vertical accuracy
- Timestamps
Location data is stored locally on your device only. We do not upload, transmit, or store your location data on any external servers unless you choose to use iCloud Backup (see below).
iCloud Backup (Optional)
If you choose to back up your data to iCloud:
- Your ski activity data is encrypted and stored in your personal iCloud account
- Only you can access this data through your Apple ID
- We do not have access to your iCloud backups
- This feature is optional and user-initiated
Imported Data
If you import activities from other apps (such as Slopes) via GPX files:
- The imported GPS data is stored locally on your device
- We do not access, transmit, or store your imported files on external servers
Crash Reports
We use Firebase Crashlytics to collect anonymous crash reports when the app encounters an error. This data includes:
- Device type and operating system version
- App version
- Crash stack traces
- Anonymous installation identifier
Crash reports do not include your location data, personal information, or ski activity details.
Ski Lift Data
The app fetches publicly available ski lift data from OpenStreetMap via the Overpass API and our Firebase database based on your general location. These requests include only your approximate coordinates to find nearby lifts and are not linked to your identity.
Elevation Data
When you use the 3D Replay feature, the app fetches terrain elevation data from Open Topo Data, a public elevation API. These requests include only the approximate geographic area of your recorded run and are not linked to your identity. Elevation tiles are cached locally on your device to reduce repeat requests.
In-App Purchases
If you make a donation through in-app purchases:
- Transactions are processed by Apple through the App Store
- We receive confirmation of purchase but not your payment details
- Purchase history may be linked to your Apple ID by Apple
Information We Do Not Collect
- We do not upload your location data to our servers
- We do not sell your data to third parties
- We do not use your data for advertising
- We do not track your behavior across other apps or websites
- We do not collect health or fitness data from HealthKit
How We Use Your Information
| Data Type | Purpose | Storage |
|---|---|---|
| Account info | Authentication and profile display | Firebase (Google servers) |
| Location data | Ski activity tracking and statistics | Local device only |
| iCloud backup | Data backup and restoration | Your personal iCloud account |
| Crash reports | Improving app stability | Firebase Crashlytics |
| Lift data requests | Displaying nearby ski lifts | Not stored |
| Elevation data | 3D terrain for replay visualisation | Cached locally on device |
Data Storage
Local Storage
All ski activity data (runs, statistics, GPS tracks) is stored locally on your device in a SQLite database within the app's sandboxed environment.
iCloud Storage (Optional)
If you enable iCloud backup, your ski data is encrypted and stored in your personal iCloud account using Apple's CloudKit service. This backup is controlled by you and can be deleted at any time.
Firebase Authentication
Account credentials are securely managed by Firebase Authentication, a service provided by Google. See Firebase Privacy Policy.
Third-Party Services
Carve uses the following third-party services:
Firebase (Google)
- Services used: Authentication, Crashlytics, Realtime Database, App Check
- Data shared: Email, display name (for auth); anonymous crash data; anonymous lift data requests
- Privacy policy: firebase.google.com/support/privacy
Google Sign-In (Optional)
- Purpose: Optional sign-in method
- Data shared: Google account email and profile
- Privacy policy: policies.google.com/privacy
Apple (Sign in with Apple, iCloud, App Store)
- Purpose: Authentication, data backup, in-app purchases
- Data shared: Apple ID email (may be hidden), iCloud backup data (encrypted)
- Privacy policy: apple.com/legal/privacy
OpenStreetMap (Overpass API)
- Purpose: Fetching ski lift data
- Data shared: Approximate location coordinates (not linked to identity)
- Privacy policy: wiki.osmfoundation.org
Open Topo Data
- Purpose: Fetching terrain elevation data for 3D Replay
- Data shared: Approximate geographic coordinates of recorded runs (not linked to identity)
- Website: opentopodata.org
Data Retention
- Account data: Retained until you delete your account
- Local ski data: Retained on your device until you delete the app or clear app data
- iCloud backup: Retained until you delete it through Settings > Data & Backup
- Crash reports: Retained by Firebase for 90 days
Your Rights
You have the right to:
- Access your data stored locally in the app
- Export your ski activities (feature planned for future updates)
- Delete your account and associated authentication data
- Delete your iCloud backup through Settings > Data & Backup
- Delete your local ski activity data by deleting the app
To delete your account, go to Settings > Account > Delete Account within the app.
Children's Privacy
Carve is rated 4+ and is suitable for all ages. The app does not knowingly collect personal information from children under 13 beyond what is required for account authentication. For users under 13, we recommend parental supervision when creating accounts and using location-based features.
Data Security
We implement appropriate security measures to protect your information:
- Authentication is handled by Firebase and Apple using industry-standard security
- Local data is stored within iOS's sandboxed environment
- iCloud backups are encrypted end-to-end
- No sensitive data is transmitted over the network (except for authentication)
- Firebase App Check helps protect our backend services from abuse
International Data Transfers
Your account information may be processed by Firebase (Google) and stored on servers located in the United States or other countries. By using Carve, you consent to the transfer of this information. Your ski activity data remains on your device or in your personal iCloud account.
California Privacy Rights
If you are a California resident, you have the right to request information about our data collection practices. Carve does not sell personal information. Contact us at the email below for any requests.
European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under the General Data Protection Regulation including the right to access, correct, delete, or port your data. Since your ski data is stored locally or in your personal iCloud, you have direct control over it. For account data, contact us at the email below.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. Significant changes may be communicated through the app or via email.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: angel@angelterziev.com
Developer: Angel Terziev