Privacy Policy
All Seasons Crew ("ASC", "we") makes a session-tracking and social app for snowboarding, skiing, surfing, skateboarding, BMX and mountain biking. This policy covers the app and this website. Short version: we collect what the features need, we don't sell your data, location is shared only when you choose and only with friends, and you can delete everything.
1. What we collect
| Data | Why | Who can see it |
|---|---|---|
| Email, password (hashed), username, display name, birthdate | Your account; birthdate decides whether you're under 18 (see §5). We never show your birthdate to anyone. | You. Username, display name and avatar are visible to other users. |
| Profile: bio, city/state, sports and skill levels, avatar | Your profile and matching you with riders of your sports. | Per your privacy settings (public / friends / private); minors are friends-only. |
| Sessions you log (sport, spot, date, duration, stats, rating, tricks) | Your log, stats, passport, achievements, leaderboards (opt-in). | You; friends if you allow it; leaderboards only if you opt in. |
| GPS tracks (only when you tap Record) | Distance, vertical, run count, top speed for that session; the map of your track. | Only you. Shared posts get a static map image with your privacy zones removed — never the raw track. |
| Live location (only when you turn it on for a session or check in) | Let accepted friends see where you're riding right now. | Accepted friends only; expires automatically (max 12 h) or when you stop. |
| Photos and video clips you post | Posts, tutorials, attempt clips, chat photos. | The audience you pick (public / friends / crew). We strip location and device metadata from every photo and clip before it's stored. |
| Posts, comments, likes, messages, plans, crews, reports | The social features. | Per the visibility you choose; direct messages only their participants. |
| Favorite spots | Conditions scores and spot alerts for those spots. | You. |
| Push notification token, notification preferences | Sending the notifications you've turned on. | Us (delivery only). |
| Basic technical data (IP address, device type, request logs) | Security, abuse prevention, keeping the service running. Logs are rotated within days. | Us. |
This website itself sets no cookies and runs no analytics or ad trackers.
2. Location, specifically
- Foreground location powers the map, nearby spots and check-ins.
- Background location is used only while you are recording a session and only after you start it. Recording stops when you tap Stop or when the app detects you've been stationary. You can revoke the permission any time in iOS Settings.
- Privacy zones: you can define circles (home, work…) that are trimmed out of anything that leaves your own view — GPX exports and shared map images.
- Live location is rounded and shown only to accepted friends. Under-18 accounts can only ever share with mutual friends.
3. How we use data
To run the features above, keep the service secure, respond to reports, and improve the product using aggregate (not individual) usage. We do not sell personal data, run third-party ad tracking, or use your content to train AI models.
4. Third parties
- Hosting: the API, database and media storage run on virtual servers we operate with a hosting provider; nightly backups stay on that infrastructure and roll off after 14 days.
- Conditions data comes from public sources — NOAA (NDBC, CO-OPS), Open-Meteo, OpenSkiMap, OpenStreetMap, and Windy Webcams. We send them spot coordinates, never your identity.
- Push notifications are delivered through Apple (APNs) via Expo's push service; they receive your device token and the notification text.
- Video links you paste (YouTube, Instagram) open the other platform, subject to its terms.
5. Under-18 riders
ASC is for riders 13 and up. If your birthdate says you're under 18, the app runs in a friends-only mode by design: you don't appear in search or on public boards, your posts and plans are visible to accepted friends only, messages and live location work only with friends, and adults can't reach you unless you both accept a friend request. We do not knowingly collect data from children under 13; if you believe a child under 13 has an account, contact us and we'll remove it.
6. Your choices & rights
- Change visibility (profile, sessions, stats, passport), discoverability, leaderboards opt-in and notification preferences any time in the app.
- Export your GPS tracks as GPX from any recorded session.
- Block and report from any profile, post, comment, message or plan.
- Delete your account: Profile tab → Delete account (bottom of the screen), or email us (below). Deletion removes your profile, sessions, tracks, posts, media, messages and friendships immediately; backups roll off within 14 days.
- Residents of the EU/UK/California may also request access, correction or portability by email; we honor those requests for everyone.
7. Security & retention
All traffic is encrypted (TLS). Passwords are hashed. Database access is role-separated with row-level security so the API can only read what the signed-in user is allowed to see. Media is stored in a private bucket and served through short-lived signed links. We keep data for as long as your account exists, except: live location (≤ 12 h), request logs (days), moderation reports (until resolved plus a record of the outcome).
8. Changes & contact
We'll post changes here and note the date above; material changes get an in-app notice. Questions or requests: colasante16@gmail.com.