Privacy Policy - Bee-Ski

Bee-Ski ("we", "our", or "us") operates the Bee-Ski mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, and informs you of your rights under applicable privacy laws including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the California Online Privacy Protection Act (CalOPPA), and the General Data Protection Regulation (GDPR).

By using Bee-Ski, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect the following categories of personal information:

Account Information: When you create an account, we collect your email address and a password you choose. This is required to provide you with the Service.

Location Data (Precise Geolocation): With your explicit permission, we collect GPS location data while you use the app to track ski runs and share your location with group members. Location data is only collected when the app is actively in use or when background tracking is enabled by you. You may revoke location permission at any time through your device settings.

Activity Data: We collect ski run statistics including vertical feet, speed, distance, and duration to provide performance tracking features.

Device Information: We may collect device identifiers and basic device information to facilitate device linking and app functionality.

Usage Data: We may collect information about how you access and use the Service, including your IP address, browser type, and pages visited.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

Consent: For collecting and processing location data. You may withdraw consent at any time.
Contract Performance: To provide the Service you signed up for, including account management, ski tracking, and group features.
Legitimate Interests: For service improvement, security, and fraud prevention, where these interests are not overridden by your data protection rights.
Legal Obligation: Where we are required to process your data to comply with applicable laws.

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Bee-Ski app and services
Enable real-time location sharing with your chosen group members
Track and display your ski run statistics and performance data
Authenticate your account and manage device linking
Send service-related communications (account verification, security alerts)
Respond to your requests or inquiries
Detect, prevent, and address technical issues and security threats

Location Data & Sharing

Your real-time location is only shared with members of groups you explicitly join. Location sharing can be disabled at any time through the app or your device settings. We do not sell or share your location data with third parties for advertising or marketing purposes.

Disclosure of Your Information

We may share your information in the following situations:

With group members: Your location and activity data is shared with members of groups you voluntarily join.
Service providers: We may share data with third-party vendors who assist us in operating the Service (hosting, infrastructure). These providers are contractually obligated to protect your data.
Legal requirements: We may disclose your data if required by law, court order, or governmental authority.
Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is subject to a different privacy policy.

We do not sell, rent, or trade your personal information to third parties.

Data Retention

We retain your account information and activity data for as long as your account is active or as needed to provide the Service. Ski run history and statistics are retained to provide season-over-season performance tracking. If you request deletion of your account, we will delete or anonymize your personal data within 30 days, unless we are legally required to retain it.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including encryption of data in transit (HTTPS/TLS) and at rest. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Third-Party Services

Bee-Ski may use third-party services for hosting, analytics, and map data. These services have their own privacy policies governing their use of your information. We encourage you to review the privacy policies of any third-party services you interact with through our app.

Your Rights Under GDPR (EEA/UK Users)

If you are a resident of the European Economic Area, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation:

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data, subject to certain legal exceptions.
Right to Restrict Processing: You can request that we limit how we use your data.
Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format.
Right to Object: You can object to our processing of your data based on legitimate interests.
Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise these rights, contact us at support@bee-ski.org. We will respond within 30 days. If you believe your rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.

Your Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

Right to Know: You can request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
Right to Correct: You can request correction of inaccurate personal information.
Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. Bee-Ski does not sell or share your personal information as defined under the CCPA/CPRA.
Right to Limit Use of Sensitive Personal Information: You can request that we limit the use of sensitive personal information (such as precise geolocation) to purposes necessary to provide the Service. Location tracking can be disabled at any time through your device settings.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise these rights, contact us at support@bee-ski.org. We will verify your identity before processing your request and respond within 45 days.

Categories of personal information collected in the preceding 12 months:

Identifiers (email address, device identifiers)
Geolocation data (precise GPS location, with your consent)
Internet or electronic network activity (usage data, IP address)

We do not sell personal information. We have not sold personal information in the preceding 12 months.

CalOPPA Compliance (California Online Privacy Protection Act)

In accordance with CalOPPA, we agree to the following:

Users can visit our site and app anonymously (without creating an account) to view public content.
This privacy policy link is accessible from our home page and contains the word "Privacy."
You will be notified of any privacy policy changes on this page.
You can change your personal information by logging into your account or by emailing us.

Do Not Track (DNT) Signals: We honor Do Not Track signals. When a DNT signal is detected, we do not track, plant cookies, or use advertising.

International Data Transfers

If you are accessing Bee-Ski from outside the United States, your data may be transferred to and processed in the United States where our servers are located. By using the Service, you consent to this transfer. We take steps to ensure that your data receives an adequate level of protection in accordance with applicable data protection laws.

Children's Privacy (COPPA)

Bee-Ski is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@bee-ski.org. If we discover that we have collected data from a child under 13 without verified parental consent, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. For significant changes, we may also notify you via email. Your continued use of Bee-Ski after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us:

Email: support@bee-ski.org
Website: bee-ski.org/contact