SlopeSense — Privacy Policy

Effective 2026-11-01 · Operated by Robert Swanson · Contact: [email protected] · See also our Terms of Service and US State Privacy Notice.

This Policy explains what personal data SlopeSense collects, how we use and share it, and your choices. State-specific rights (Illinois BIPA, California CCPA/CPRA, and others) and our biometric retention schedule are in the separate US State Privacy Notice.

1. Who we are

SlopeSense analyzes uploaded ski-run video and returns coach-reviewed technique feedback. We are the controller of the personal data described here.

2. Data we collect

  • Account data — name, email, password (stored hashed).
  • Uploaded content — ski-run videos and still frames.
  • Body-position / biometric data — pose keypoints, joint angles, and ski-to-slope edge angles derived from your video.
  • Telemetry — imported Carv data.
  • Coach review data — corrections and labels our coaches add to AI drafts.
  • Payment data — subscription status and billing metadata via Stripe (we do not store full card numbers).
  • Usage / device data — log data, IP, device/browser, and app interactions, collected automatically.

Data about other people. Videos you upload may include other identifiable people (“Subjects”), possibly including minors. You are responsible for having the consent required by the Terms (Sections 8–9) before uploading. We process Subjects’ body-position data to provide the Service.

3. How we use data

  • Provide the Service — analyze video, generate pose overlays and metrics.
  • Human coach review — a coach reviews AI drafts before release to you.
  • Improve our models (optional) — unless you opt out, we use uploaded content and derived data (including coach corrections) to train, validate, evaluate, and improve our models. Training is on by default; switch it off any time in Profile → Privacy settings (see Terms Sections 7 and 10).
  • Billing — process subscriptions via Stripe.
  • Security, support, and legal compliance.

4. How we share data

We do not sell your personal data, and we do not sell biometric or body-position data. We share data with:

  • Service providers (processors) — Google Cloud Platform (hosting and storage), Anthropic (AI assessment drafting), and Stripe (payments). They process data on our instructions.
  • Legal / safety — when required by law or to protect rights and safety.
  • Business transfers — in a merger or acquisition, subject to this Policy.

5. Where data is processed (cross-border)

Uploaded content and derived data are stored and processed on Google Cloud in Canada; AI assessment drafting occurs at Anthropic in the United States; payments are processed by Stripe (United States). By using the Service you understand your data may be processed in these locations.

6. Retention and deletion

We keep personal data only as long as needed to provide the Service, improve our models, and meet legal obligations, then delete or de-identify it. Our specific biometric retention and destruction schedule is in the US State Privacy Notice. Your data belongs to you: at any time you can ask us to purge it from the Service from Profile → Privacy settings or by contacting us, and we complete the purge within 30 days. Training on your data stops the moment you ask; we cannot un-train models already trained, but we stop all new training on it.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or port your data, and to opt out of certain processing. See the US State Privacy Notice for state-specific rights and how to exercise them. You can also manage or cancel your subscription from the billing page and delete your account at any time.

8. Children

The Service is for adults; only adults 18 or older may hold an account. We do not knowingly collect personal information from children under 13. Minors may appear only as Subjects, in video uploaded by a consenting adult, with the consent required by the Terms (Sections 4 and 8).

9. Security

We use reasonable technical and organizational measures (for example, access controls, encryption in transit, signed-URL storage access, and hashed passwords). No system is perfectly secure.

10. Changes and contact

We may update this Policy; material changes take effect on notice. Questions or requests: [email protected].