Privacy Policy

Last Updated: October 26, 2026

Review mode. Highlighted passages changed on October 23, October 25 and October 26, 2026. Each one has a REVIEW comment above it in the page source.

Fuse Interactive LLC ("Summit," "we," "our," or "us") operates the Summit mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the choices you have. By using Summit, you agree to the practices described here.

If you have any questions, you can reach us at contact@summitapp.live.

The short version. Summit is a social app for skiers and snowboarders. We collect what we need to run it: your account, your profile, the photos and videos you post, the ratings you write, your messages, and — only if you turn it on — your location. We do not sell your information, we do not run ads, and there is no analytics, tracking or crash-reporting software of any kind in this app. Two things are worth reading properly rather than taking on trust, and both have their own section below: location sharing (Section 5), which is off by default, one-way, per-person, and which you can switch off in one tap; and recorded ski days (Section 6), where the GPS track of your day is a file on your phone that we never receive. Photos and videos are checked automatically for explicit content before anyone is likely to see them, and a person at Summit reviews anything borderline (Section 10).

1. Who We Are

Fuse Interactive LLC is the data controller for information collected through the Summit app and the summitapp.live website. We are a limited liability company based in the United States.

Summit is available in most countries. It is not currently offered in the European Economic Area, the United Kingdom, Switzerland or China. Wherever you use it, your information is stored and processed in the United States (Section 13). Section 15 explains the privacy rights you have wherever you live, with the additional rights that apply in the United States; Section 14 covers the EEA, the UK and Switzerland.

2. Where This Privacy Policy Applies

This Policy applies to:

It does not apply to a resort's own website, a webcam provider's player, or any other third-party service you reach by tapping a link in Summit. Those are governed by their own policies.

3. Information We Collect

Information You Provide to Us

Information Collected Automatically

Information We Do Not Collect

We think this list matters as much as the one above. Summit does not collect:

There is no third-party analytics software, crash-reporting software, advertising software or marketing software in the Summit app. The five product events above are recorded in our own database, not sent to anyone else, and are deleted with your account. If that changes, we will update this Policy and tell you before it takes effect.

Two of those events happen before you have an account, because the first two questions in signup come before one exists. Until you finish signing up those records are attached to a randomly generated identifier for your copy of the app and to nothing about you; when you finish, they are attached to your account, which is also what lets them be deleted with it. If you never finish, all we hold is that a copy of the app reached a particular screen.

4. How We Use Your Information

5. Location

Summit is a map-first app and location is the part of it most worth explaining in detail. There are four separate things going on, and they are genuinely separate.

a. Working out which mountain you are on

Several features need to know which ski area you are standing on — offering to file a post at the mountain you are at, offering to record a day, and the Nearby feed. The comparison between your position and the mountains around you happens on your phone, against a list of ski areas that ships inside the app. Your position is not sent to us in order to answer that question.

Summit never asks for location permission just because you opened a screen. The map asks only when you tap the locate button, and the location-sharing switch asks only when you turn it on, because tapping those things is the request.

b. Sharing your position with another person

This is off by default and nothing turns it on but you.

c. Ride groups

If you join a ride group, you share your location with everyone in that group until you leave it or it ends — including members you do not follow, because the person who invited you may have invited others. The app tells you exactly who that will be, by name, before you accept. A group ends at the next local midnight where it was created, and when it ends the sharing ends with it.

d. Find

If you can already see someone's location, you can open Find, which draws an arrow pointing at them. While you have that screen open, their phone uploads its position roughly every 3 seconds or 10 metres instead of the ordinary rate, because at skiing speed a slower rate would leave the arrow far behind.

What this adds up to

If you never turn on location sharing and never join a ride group, your position is never stored on our servers at all. If you do, we hold one row with your latest position, it is readable only by the specific people you chose while the conditions above hold, and it expires out of their reach after 12 hours.

6. Recorded Ski Days and Your Track

When you record a day, your phone writes each GPS fix to a file in the app's own storage, one line at a time. That track is never uploaded to us. It stays on your phone until you delete the day, or delete the app. Recording currently runs only while the app is in the foreground.

Four things derived from a recorded day can leave your phone, each only in a specific circumstance:

What leaves When
Four totals for the day — runs, vertical, distance and top speed Only if you switch on "Attach today's stats" when making a post. It is off by default every time, and the switch says who will be able to see them.
The components of a day's score — vertical, runs, distance, top sustained speed, time skiing, the date, and whether your phone had a barometer Only if you submit that day to a mountain's Top riders leaderboard. The track itself is never sent, and we recompute the score on our server from the components rather than trusting a number from the phone.
Today's four summary numbers Only while you are in a ride group, so the other members can see your day. They are readable only by members of that same group, and they are deleted when you leave it or it ends.
Your result in a group recording session — the same four summary numbers Only if you join a group session somebody started. Results are readable only by the people who took part.

A recorded day is private. It never becomes a post on its own, and nothing about it is shown to anyone unless you do one of the four things above.

7. Your Privacy Settings

Two controls change who can see what:

The Lounge is the exception to a private account. A trip you post to the Lounge is visible to every Lounge user — everyone on Summit who is 18 or over — even if your account is private, because posting a trip is asking riders you don't know to get in touch. The form tells you this before you post. Crews are the opposite: a crew, its dates and its chat are visible only to the people on it and the people invited to it.

8. How We Share Your Information

With Other Users

Visible to other users, subject to your privacy settings in Section 7: your handle, display name, profile photo and banner, bio, ride type, the passes you hold, home mountain, follower and following counts, your posts and their captions and the mountain and place each is filed under, your star ratings and written reviews, your Been and Want to go lists, your comments and reactions, and your rows on a mountain's leaderboard.

Visible to every Lounge user (everyone 18 or over), whatever your privacy settings: your Lounge trips, and to a trip's author, your interest in it.

Visible only to the people you have chosen: your position (Section 5), your messages, and the crews you are on.

Never visible to other users: your email address, your date of birth, and your GPS tracks.

With Service Providers

We use the following third parties to operate Summit. They process information on our behalf, for the purposes described, and nothing in this table involves selling your data.

Provider What it does What it sees
Supabase Database, authentication, file storage and live updates. Hosted in the United States. Everything we store: account, profile, posts and their media files, ratings, comments, messages, follows, notifications, your stored position if you share it, and server logs.
Expo Push-notification delivery, and app build and update infrastructure. Your push token and the text of each notification (for example, "@rider stoked your post").
Apple and Google Deliver push notifications to your device through their own notification services. Your push token and the text of each notification.
Amazon Web Services (Rekognition) Automated checking of uploaded images for explicit, violent or hateful content. See Section 10. A copy of each photo you post or a video's poster frame, and of your profile photo and banner each time you set one. AWS does not retain the image after the analysis call completes.
Discord Our internal moderation queue. When an image is flagged for human review, or when someone files a report, our system posts it to a private channel that only Summit staff can see. For a flagged image: the image, and the handle, display name and account id of the person who posted it. For a report: the handles of the person reporting and the person reported, the reason given, up to 500 characters of the reporter's description, and up to 1,100 characters of the reported content — which, for a reported conversation, includes the copied messages described in Section 3. Discord may hold those messages on its servers until we delete them.
Resend Sends our sign-up and password-reset emails, from noreply@summitapp.live. Your email address and the content of each email, including its one-time code.
Mapbox Map imagery, terrain, and our trail and lift map layers. Also the "nearest named run, lift or place" lookup used by Find. Which part of the map your app is asking for, and your IP address. For Find specifically, the precise coordinates of the person you are finding are sent to Mapbox in the lookup request. Mapbox also receives anonymous usage telemetry from its own map component.
Open-Meteo Weather and snow conditions on a mountain's page and on a post's conditions line. The coordinates of the mountain whose page you are looking at, and your IP address. Never your own position.
Windy Nearby webcams, for mountains where we have not curated the resort's own cameras. The coordinates of the mountain, and your IP address. Never your own position.
Ski resort operators (Alterra, Boyne, Powdr, Vail Resorts, Killington) Live lift status, read from the conditions feed each operator publishes on its own website. Your app requests their public page directly, so they see that request and your IP address. No account, profile or location data is sent to them.
Vercel Hosts the summitapp.live website. Website visitors' IP addresses and the pages they request, in its server logs. Nothing from the app.

For Legal and Safety Reasons

We may disclose information when we reasonably believe it is necessary to comply with a subpoena, court order or other legal obligation; to cooperate with law enforcement; to investigate or prevent fraud, abuse or harm; to protect the rights, safety or property of Summit, our users or the public; or to establish, exercise or defend a legal claim.

In Connection with a Business Transaction

If Fuse Interactive LLC is involved in a merger, acquisition, sale of assets, financing, restructuring or bankruptcy, your information may be transferred as part of that transaction. We will notify you by email or in the app before your information becomes subject to a different privacy policy.

What We Don't Do

We do not sell your personal information. We do not share it for cross-context behavioural advertising. We do not run advertising on Summit, and we do not allow anyone to target you using your information. We do not publish or sell GPS tracks, aggregated or otherwise.

9. Posts, Ratings and What Happens When You Delete Something

Deleting a post, rating or comment removes it from the app. A message cannot be unsent: once sent, it stays in the conversation, visible to the people you sent it to, for as long as you keep your account. Deleting your account deletes every message you have sent, including from other people's conversations.

Photos and videos you post are stored in a public storage bucket, which is how other users' phones load them. Their addresses are not guessable. When you delete a post, its files are deleted from storage, so an address someone had saved stops working. When moderation removes a post, its files are moved out of public storage at the same moment, into private storage only Summit staff can reach, so that a mistaken removal can be reversed on appeal (Section 10). If that clean-up cannot run at once, it is retried automatically until it succeeds.

10. Content Moderation and Automated Decision-Making

Every photo you post, and the poster frame of every video, is checked automatically for explicit, violent or hateful content. We do this to keep Summit usable and to meet the App Store's requirements for apps with user-generated content.

How it works, and what it means for you

  1. You see your post the moment you share it, and the check runs immediately — in practice in a little over a second. Nobody else sees it until it has passed. If our checking system is unavailable, a post that has waited an hour without any verdict is shown anyway, so that an outage on our side cannot hide everything posted to Summit; staff are alerted well before that point, and the check still runs on that post as soon as the system is back. A post the check has objected to is never shown this way.
  2. A copy of the image is sent to AWS Rekognition, which returns labels describing what it contains.
  3. Clearly explicit content is removed automatically with no human involved. Everything else that the system is unsure about is held back from other users and flagged for a person at Summit to look at, through the private Discord channel described in Section 8. A removed post stays visible to you, marked as removed; its files are kept in private storage for 90 days so an appeal can restore it, and are then deleted.
  4. Until a verdict exists, a post is recorded as not yet reviewed, and a scheduled job re-asks for anything still unreviewed after five minutes. "Passed" and "never checked" are deliberately different states in our database.

A video is judged on its poster frame — the still your phone already made. One frame is not the whole clip and we do not pretend otherwise; a video with no usable still goes to a person instead of through the automated check.

Reports go to the same place. When you report something, the report and the details listed for Discord in Section 8 are posted to the same private staff channel, so a person can act on it within the 24 hours our Terms of Service promise. Lounge trips have no image to check; instead, a trip's note cannot contain links or phone numbers.

Reported content is kept for review even if it is deleted. If you delete a post after someone has reported it, it disappears from Summit as usual, but its photo or video is kept in private storage, which only Summit staff can reach, so the report can still be reviewed. It is deleted 90 days later.

Profile photos and banners are checked the same way. Each time you set a profile photo or a banner, it goes through the same automated check as a post, and the same rules decide what is removed. If yours is removed, your profile goes back to having none, we tell you in the app, and you can choose another. The file is kept in private storage, which only Summit staff can reach, for 90 days so that a mistaken removal can be reversed on appeal, and is then deleted. Photos and banners set before we started checking them were checked once as well.

What we deliberately do not act on. Alcohol, swimwear, tobacco and rude gestures are not grounds for removal. Après is part of this sport and a hot tub in April is normal here. We look for nudity, violence and hate symbols, and nothing else.

Your right to human review

If you believe an automated decision was wrong — your post was removed and you disagree, or your account was restricted — email appeals@summitapp.live. A person will review it and we will explain the outcome. Where the law gives you a right not to be subject to a decision made solely by automated means, this is how you exercise it.

11. Photos, Faces and Biometric Information

Photos posted to Summit often contain faces, and the moderation check in Section 10 analyses those photos.

If you live somewhere with a specific biometric privacy law — Illinois under BIPA or Texas under CUBI, for example — the processing described above happens solely to decide whether an image is appropriate, and nothing derived from a face is retained beyond making that decision.

12. How Long We Retain Your Information

We keep information for as long as your account is active, and for the periods below otherwise. Where the honest answer is "until you delete it," we have said that rather than invent a window.

Information Retention
Your account, profile, posts, ratings, comments and messages While your account is active
Everything above, after you delete your account Deleted immediately. Deleting your account from Settings removes your authentication record, which cascades through your profile, date of birth, posts, ratings, comments, messages, reactions, saves, follows, notifications, Been list, stored position, leaderboard rows, Lounge trips, crew and group memberships and invitations, and product events in the same operation. There is no waiting period and no soft-delete window. Your uploaded files are swept at the same time; see the note below.
Your uploaded photo and video files, after account deletion Removed as part of deletion. Your posts' files are deleted by our server along with each post, and retried automatically until that succeeds. Your profile photo and banner are removed by the app as you delete; if that fails, we do not refuse the deletion — someone asking to be deleted gets deleted — so a photo may survive as an orphan with no account pointing at it. Cleaning those up is our problem, not a reason to keep your account.
Your stored position Overwritten by each new upload — we never keep a history. Unreadable by anyone else after 12 hours. Blanked when you pause, and when you stop sharing with the last person on your list. Deleted with your account.
The signal that someone is finding you Never stored. It exists only on a live connection while their screen is open.
Ride groups and the day stats shared inside one The group expires at the next local midnight where it was created, and its memberships and shared day stats are deleted with it. Leaving a group deletes yours immediately.
Group recording session results Kept after the group ends, readable only by the people who took part, until the session or an account is deleted.
Lounge trips and interest Hidden from the Lounge once a trip's last day has passed, and kept until you delete the trip or your account. Interest you showed in a trip is deleted when you take it back, or with that trip or your account.
Crews Kept after the trip, visible only to the people on it. The person who made a crew can delete it before it starts; you can leave a crew at any time, and your membership is deleted with your account.
Group invitations Kept with the conversation they belong to, and deleted with it or with your account.
Your date of birth and previous handles While your account is active. Deleted with your account.
Your recorded GPS tracks On your phone only, until you delete the day or the app. Never on our servers.
Leaderboard rows Until you remove that day, delete the recording it came from, or delete your account. Deleting a recorded day takes it off the board in the same action.
Push notification token Deleted when you sign out, and replaced rather than duplicated when a different account signs in on the same phone.
Reports you file or that name you Retained after the content or account involved is gone. A report copies the reported text at the time it is made, so it survives a deletion, and the reported person's id is detached if their account is deleted. We keep these to recognise repeat behaviour.
Identifiers of a permanently banned account Up to 1 year, to stop the same person simply signing up again.
Product events (Section 3) Deleted with your account. Events recorded before an account existed are attached to it when you finish signing up, so they go too; if you never finish signing up, they are kept against a random app identifier with nothing identifying you attached.
Server logs and technical records 90 days, unless held longer for a security investigation or a legal obligation.
Records relating to a legal claim, investigation or law-enforcement request As long as needed to resolve the matter.

13. How We Store and Secure Your Information

Your information is stored on servers operated by Supabase in the United States. We use encrypted connections, access controls and authentication safeguards, and the rules governing who may read what are enforced in the database itself rather than only in the app — which is why, for example, a block or a pause cuts off access to your location at the next read rather than relying on an app to behave.

If you use Summit outside the United States, your information is transferred to the United States and stored and processed there. Data protection law in the United States may differ from the law where you live. We apply the protections described in this Policy wherever you are.

No system is perfectly secure and we cannot guarantee the security of information sent over the internet. If we become aware of a security incident affecting your information, we will notify you as required by law.

14. If You Are in the EEA, the UK or Switzerland

Summit is not currently offered in the EEA, the UK or Switzerland. If you use it there anyway, for example while travelling, this section applies to you.

Legal Bases

Why we process it Legal basis
Creating and running your account, showing your content to other users, delivering messages, operating the Logbook and leaderboards Performance of our contract with you (Article 6(1)(b))
Moderating content, acting on reports, preventing abuse and fake accounts, securing the service, and improving it Our legitimate interests in running a safe service (Article 6(1)(f))
Access to your location, your photo library, and push notifications; sharing your location with another person Your consent (Article 6(1)(a)), which you can withdraw at any time in Settings or your device settings
Responding to lawful requests and meeting record-keeping obligations Compliance with a legal obligation (Article 6(1)(c))

Your Rights

You have the right to access your personal data; to have inaccurate data corrected; to have your data erased; to restrict or object to our processing of it; to receive it in a portable form; to withdraw consent at any time; and not to be subject to a decision based solely on automated processing — see Section 10 for how to ask a person to review one. Email contact@summitapp.live to exercise any of these.

International Transfers

We are based in the United States and our infrastructure is in the United States, so your information is transferred there. Where that transfer is from the EEA, the UK or Switzerland, it is made on the basis of the European Commission's Standard Contractual Clauses, together with the UK Addendum where the UK GDPR applies.

Complaints

You have the right to lodge a complaint with your local data protection authority. We would rather you came to us first at contact@summitapp.live, but that right is yours regardless.

15. Your Privacy Rights

Wherever You Live

Wherever you live, you can ask us for a copy of the personal information we hold about you, ask us to correct it, and ask us to delete it. You can also delete your account yourself at any time in Settings, which deletes your information as described in Section 12. Email contact@summitapp.live with the subject line "Privacy Request" and tell us what you are asking for. We will respond within the time required by the law where you live. If your local law gives you further rights, tell us which ones you are exercising.

If You Live in the United States

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, Delaware, New Hampshire, New Jersey, Minnesota, Maryland, Nebraska, Kentucky, Rhode Island or another state with a comprehensive consumer privacy law, you may have the following rights:

How to Exercise Your Rights

Email contact@summitapp.live with the subject line "Privacy Request" and tell us which right you are exercising. We may need to confirm details associated with your account before we act, and we will respond within the time your state's law requires.

California "Shine the Light"

California residents may ask about disclosures of personal information to third parties for those parties' own direct-marketing purposes. We make none, so we have nothing to report under this section.

16. Minimum Age

Summit is for people aged 16 and over. We do not knowingly collect personal information from anyone under 16, and we ask for your date of birth during signup to check.

We chose 16 rather than 13 deliberately. The central feature of this app is sharing your real-time position on a mountain with other people, and we would rather not operate that for children. Setting the floor at 16 also means every user is at or above the highest age of digital consent set by any EU member state under Article 8 of the GDPR, so we never have to process a child's data on the basis of a parent's consent.

The Lounge is for people aged 18 and over. It is the one part of Summit built for meeting riders you don't know, so the date of birth you gave us is checked on our server before you can see or post a trip, and the riders the Lounge suggests are 18 or over too.

If we learn that someone under 16 has created an account, we will delete it and the information attached to it. If you believe someone under 16 is using Summit, contact us at contact@summitapp.live or use the reporting tools in the app.

17. Changes to This Privacy Policy

We may update this Policy. If the changes are material, we will tell you by email, in the app, or by another reasonable means before they take effect. The "Last Updated" date at the top reflects the most recent revision. Continuing to use Summit after a change takes effect means you accept the revised Policy.

18. Contact Us

Fuse Interactive LLC
Email (general and privacy requests): contact@summitapp.live
Email (moderation appeals): appeals@summitapp.live
Website: https://summitapp.live
Help, and how to delete your account: summitapp.live/support