NEU Ski · iOS app

NEU Ski App — Privacy Policy

Effective date: 15 November 2026
Last updated: 15 November 2026. First version: 1 September 2024.

1. Who is responsible

This policy explains how the NEU Ski Slopes iOS app (“NEU”, “the app”) handles your information, including Crews (private groups with live location, chat and meet points) and NEU Social (“Who’s at the Resort?”: public resort lists, public profiles, chat requests and 1:1 chats). The website www.neuski.xyz and NEU’s integrations in ChatGPT and Claude have their own policies.

Controller: Guillem Bruix Barcelo, a self-employed professional established in Spain, trading as NEU Ski (“we”).
NIF: 46981809P
Address: Carrer Irena Sendler 4, 08018 Barcelona, Spain
Privacy contact: hola (at) neuski . xyz

2. Using NEU without an account

You don’t need an account to use maps, weather, resort pages and activities. For these features we don’t collect personal identifiers directly, unless you contact us.

Your preferences: your favourite winter sport and your favourite, visited and “want to go” resorts are stored on your device and, depending on your iCloud settings, in your iCloud account.
Subscriptions and purchases: handled by Apple and RevenueCat. We may use anonymised or aggregated data (such as plan type or renewal status) for analytics and support.
Measurement and analytics: see section 12.

Crews and Social need an account created with Sign in with Apple. We receive an Apple user ID and, if you choose, your name and email (which may be a private relay address).
You choose a display name and colour. Crew members see your display name. On public lists and profiles only your first name is shown.
Age. Crews are for people aged 16 and over. Public features (resort lists, public profiles, photos and chat requests) are for people aged 18 and over.
We may use Apple’s age range feature. For public features we also ask for your date of birth. It is stored privately, is never shown to anyone, can’t be read back through the app, and is used only to check that you’re 18 or over. Only your age (a number) is shown on public profiles.
You can set your date of birth once. To correct it, contact us.

4. Live location (Crews)

Your location is shared only when you turn sharing on, only with the Crews you choose, and only for the time you choose (up to 14 hours). You can stop at any time.
Sharing is reciprocal: you see your Crew’s positions only while you share yours too.
We keep only your latest position while you share, and delete it when sharing ends. No location history is kept. Session records (start and end times, without positions) are deleted after 30 days.
Your battery level is shared with your Crew while you share.
Your live location is never shown on public lists or profiles.

5. Chat and meet points

Crew chats and 1:1 chats are stored on our servers so they can be delivered and shown on your devices. They are not end-to-end encrypted.
Messages are visible only to the members of that Crew or that 1:1 chat. New Crew members see only messages sent after they joined.
Meet points are messages that contain a map position you chose. They appear on members’ maps until 17:30 that day (or for 3 hours, if that ends later) and stay in the chat.
Messages are kept until they are deleted: by you, with “Delete for everyone”; by moderation; when the Crew is deleted; or when you delete your account.
An automatic filter masks offensive words in messages.

6. Public profile and “Who’s at the Resort?”

Joining a resort’s list is your choice, and you confirm it with an explicit consent switch each time. While you’re on a list, every signed-in adult using NEU can see:

your first name, age, photos (up to 3) and sport;
your short bio, if you add one;
the resort and your arrival and departure dates;
what you’re looking for, your skill level and your ride-sharing preference.

To open other people’s profiles you must be on a list yourself. You can leave a list at any time. Trips are deleted automatically the day after departure.

7. Photos

Photos are processed on your phone before upload: they are resized and photo metadata, including GPS location, is removed.
Your photos are visible to your Crew members, to people you have a 1:1 chat or a chat request with, and to signed-in adults while you’re on a resort list.
You can remove your photos at any time. They are deleted when you delete your account.
Photos are not automatically scanned at this time. They are moderated through user reports and manual review.

8. Chat requests and 1:1 chats

NEU PRO subscribers can send a chat request, with an optional short intro, to people on a resort list. The recipient can accept, decline, or block and report.
The sender isn’t told when a request is declined.
Accepting a request creates a private 1:1 chat.
Requests that aren’t answered expire after 30 days.

9. Notifications

If you allow notifications, we store your device’s push token to send Crew and chat notifications through the Apple Push Notification service.
Notification content (for example the Crew name, the sender’s name and the beginning of a message) passes through Apple’s servers.

10. Safety and moderation

You can block people. You’ll no longer see each other on lists, profiles or chats, and you’ll leave any Crew you share.
You can report people, messages and profiles. Reports, including a copy of a reported message, are kept so we can review them. We aim to act within 24 hours.
We may hide content and suspend accounts that break the Terms of Use: https://www.neuski.xyz/en/app-terms

11. How we use information

To provide the app and its features, including Crews, chat, meet points and resort lists.
To manage subscriptions and entitlements.
To keep the community safe: moderation, reports, blocking and abuse prevention.
To measure installs and in-app events for our ad campaigns, optimise marketing and prevent fraud.
To analyse app usage and reliability and improve the app.

Supabase stores Crew and Social data (database, photo storage and real-time messaging), hosted in the EU (Frankfurt, Germany).
Apple provides Sign in with Apple, push notifications, iCloud storage of your preferences and App Store purchases.
RevenueCat processes purchase history, subscription status, device and app information and transaction details to handle purchases and check your NEU PRO subscription.
AppsFlyer processes device and app information, IP address, timestamps, limited event data and, where permitted, advertising identifiers, for attribution, analytics and fraud detection.
Meta (Aggregated Measurement) may receive limited install and in-app event data through AppsFlyer for ad measurement, subject to Apple’s App Tracking Transparency.

We share only the data each provider needs. Crew and Social content (messages, photos, location, profiles, date of birth) is not shared with AppsFlyer or Meta. We don’t sell your personal information.

13. Your choices

App Tracking Transparency: the app asks your permission for cross-app tracking. If you decline, advertising identifiers aren’t shared and attribution is limited.
Device settings: you can reset or limit advertising identifiers, and turn location and notifications on or off at any time.
Partner opt-outs: some partners offer their own opt-outs, described in their privacy policies.
Delete your Crew account at any time in the app (Crews tab → Delete Crew Account). This deletes your profile, date of birth, photos, trips, memberships, devices and messages, stops any sharing and revokes Sign in with Apple. Crews you own pass to another member.

Performance of the service you asked for (Art. 6(1)(b)): providing the app, managing subscriptions, and Crews, chat and resort lists.
Consent (Art. 6(1)(a)): joining a public list, sharing your location, notifications, and advertising identifiers and cross-app tracking (ATT). You can withdraw consent at any time.
Legitimate interest (Art. 6(1)(f)): keeping the community safe (moderation and abuse prevention), performance analysis, fraud prevention and improving the app, balanced against your rights.

Data categories we process: device and app information, purchase and subscription data, limited event data, IP address, advertising identifiers, in-app preferences, and, if you use Crews or Social, your account, profile, date of birth, photos, trips, messages, live location while you share, and push tokens.

15. How long we keep data

Live location: only your latest position, while you share. Deleted when sharing ends. Session records (no positions) are deleted after 30 days.
Trips on resort lists: deleted automatically the day after departure.
Chat requests: expire after 30 days if not answered.
Messages: until deleted by you, by moderation, with the Crew or with your account.
Profile, date of birth, photos and push tokens: until you remove them or delete your account.
Reports: as long as needed to review them and keep the community safe.
Other data: only as long as needed for the purposes above or as the law requires. Providers apply their own retention periods.

16. International transfers

Crew and Social data is stored in the EU. Some providers (such as Apple, RevenueCat, AppsFlyer and Meta) may process data outside your country, including in the US, with safeguards where required, such as the EU–U.S. Data Privacy Framework or standard contractual clauses.

17. Security

We use reasonable administrative, technical and organisational measures, such as encrypted connections and access rules that limit data to the people it’s meant for. Data on your device and in iCloud is protected by Apple’s security. Providers protect data under their own policies. No system is completely secure.

18. Your rights

Under the GDPR you can ask for access, rectification, erasure, restriction or portability of your data, object to processing based on legitimate interest, and withdraw consent at any time. Write to hola (at) neuski . xyz. You can also contact our providers directly through their privacy policies, and complain to your data protection authority; in Spain, the AEPD: https://www.aepd.es/

19. California (CCPA/CPRA)

Categories: identifiers (where permitted), commercial information, network activity, coarse IP-based location, device information and, if you use Crews or Social, account and profile data, messages, photos and precise location while you share.
Sources: your device and your use of the app, and RevenueCat, AppsFlyer and Meta.
Purposes: providing the app, managing subscriptions, analytics and attribution, ad optimisation, fraud prevention and community safety.
Sale and sharing: we don’t sell personal information. “Sharing” for cross-context behavioural advertising may occur where permitted; you can opt out by declining ATT and adjusting your device’s ad settings.
Precise location: used only to show it to the Crews you choose while you share. We don’t use it for any other purpose.
Your rights: to know, delete and correct, and to opt out of sale or sharing. We won’t discriminate against you for exercising them.
Requests: email hola (at) neuski . xyz with “CCPA Request” in the subject. We may need to verify your identity. Authorised agents must provide proof of authorisation.

20. Children

NEU isn’t directed to children under 13 (or the minimum age in your country), and we don’t knowingly collect their personal information. Crews are for people aged 16 and over, and public features for people aged 18 and over. If you think a child has given us data, contact us and we will delete it.

21. Third-party policies

Apple: https://www.apple.com/legal/privacy/
Supabase: https://supabase.com/privacy
RevenueCat: https://www.revenuecat.com/privacy
AppsFlyer: https://www.appsflyer.com/legal/privacy-policy/
Meta: https://www.facebook.com/privacy/policy/

22. Changes and contact

We will update this policy when features or processing change and revise the dates above. We will tell you in the app about significant changes. By using the app you acknowledge this policy.

Questions or requests: hola (at) neuski . xyz