Privacy Policy

1. Introduction

This Privacy Policy explains how ThamesCo (“we,” “us,” or “Company”) collects, uses, stores, and protects your personal information when you use the SnowRun mobile application (“App”) and website at getsnowrun.com (“Website”).

We do not sell your personal data. We do not share your data with advertisers. We do not engage in cross-app tracking.

By using SnowRun, you agree to the collection and use of information in accordance with this Policy. Please also review our Terms of Service .

2. Data We Collect

2.1 Account Information

When you create a SnowRun account, we collect:

• Name
• Email address
• Profile photo (if you choose to upload one)
• Referral code (if provided during sign-up)

2.2 GPS and Activity Data

When you record a ski run, we collect:

• GPS coordinates (latitude, longitude, altitude) captured during your run
• Speed, distance, and elevation data derived from GPS
• Run start and end timestamps
• Resort association (which resort you are skiing at)

GPS data is collected only while you actively record a run. We do not track your location in the background when the App is not in use.

2.3 Health Data

With your explicit permission, SnowRun may read the following data from Apple HealthKit (iOS) or Google Health Connect (Android):

• Heart rate during ski runs
• Active calories burned during ski runs

Health data is read-only and is never uploaded to our servers. It stays on your device and is used solely to display health metrics within the App. We do not store, transmit, or share health data.

2.4 Device Information

We automatically collect limited device information to ensure the App functions correctly:

• Device model and operating system version
• App version
• Device language and region settings

2.5 Location Data

Beyond GPS run recording, we use your device's location to:

• Identify your nearest ski resort
• Show resort-specific maps and trail information
• Enable navigation to resort facilities

2.6 User-Generated Content

Content you voluntarily submit, including:

• Issue reports (trail hazards, closures)
• GPS tracks shared with the community
• Profile information

3. How We Use Your Data

We use your personal data to:

• Provide and maintain the SnowRun service (run tracking, resort maps, statistics)
• Authenticate your identity and manage your account
• Process subscriptions and in-app purchases (via the Apple App Store or Google Play Store)
• Send service-related notifications (via platform push notification services)
• Improve the App through aggregated, anonymized usage analytics
• Respond to your support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not use your data for targeted advertising or behavioral profiling.

4. Data Sharing

We do not sell, rent, or trade your personal data to any third party.

We may share limited data with the following categories of service providers, solely for the purpose of operating SnowRun:

• Cloud infrastructure providers — for hosting our servers and storing your data securely (data is hosted in Singapore, Japan, and Australia)
• Email service providers — for sending transactional emails (account verification, password reset)
• Apple and Google — for processing payments and delivering push notifications through their respective app stores and notification services

All service providers are contractually obligated to protect your data and may only use it for the specific purposes we designate.

We may also disclose your data if required to do so by law or in response to valid legal process (e.g., a court order or government request).

5. Analytics

SnowRun uses custom first-party analytics built into our own API. We do not use third-party analytics services such as Firebase Analytics, Mixpanel, Google Analytics, or similar tools.

We do not access mobile advertising identifiers (such as Apple's IDFA or Google's Advertising ID) and do not engage in cross-app tracking. Our analytics are limited to understanding how the App is used in aggregate to improve the service.

6. Push Notifications

With your permission, we send push notifications through platform notification services (Apple APNs on iOS, Google FCM on Android). Notifications may include service updates, friend activity, daily challenges, and promotions. You can manage or disable push notifications at any time through your device's Settings app.

7. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures, including:

• Encryption in transit — all data transmitted between the App and our servers is protected using SSL/TLS encryption with certificate pinning
• Encryption at rest — sensitive data such as map assets is encrypted using AES-256-GCM
• Access controls — access to personal data is restricted to authorized personnel on a need-to-know basis
• Authentication — user accounts are protected through industry-standard authentication protocols

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Data Hosting and International Transfers

Your data is hosted on servers located in Singapore, Japan, and Australia. We are based in Malaysia.

If you are accessing SnowRun from outside these regions, your data will be transferred to and processed in Singapore, Japan, and Australia. By using the App, you consent to this transfer. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

9. Data Retention

We retain your personal data for as long as:

• Your account is active
• It is needed to provide you with the SnowRun service
• We are required to retain it by law (e.g., financial records)

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain certain information for a longer period.

Accounts that have been inactive for 24 consecutive months may be flagged for deletion. We will notify you at least 30 days before deleting an inactive account.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data and account
• Data export — request export of your data in GPX or JSON format
• Opt-out — manage push notification preferences through your device settings; manage email communications via unsubscribe links

To exercise any of these rights, contact us at support@getsnowrun.com . We will respond within business days.

11. Rights for EU, EEA, and UK Residents (GDPR)

If you are located in the European Union, European Economic Area, or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) and the UK GDPR:

• Legal basis for processing — we process your data based on: (a) your consent (e.g., HealthKit access, push notifications); (b) performance of a contract (e.g., providing the service you subscribed to); (c) legitimate interests (e.g., improving the App, preventing fraud)
• Right to data portability — you may request your data in a structured, commonly used, machine-readable format (GPX or JSON)
• Right to restrict processing — you may request that we restrict the processing of your data in certain circumstances
• Right to object — you may object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint — you have the right to lodge a complaint with your local data protection supervisory authority

To exercise these rights, contact us at support@getsnowrun.com .

12. Rights for California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to know — you may request information about the categories and specific pieces of personal information we have collected about you
• Right to delete — you may request deletion of your personal information
• Right to opt out of sale — we do not sell your personal information. As such, there is no need to opt out
• Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights

To submit a CCPA request, contact us at support@getsnowrun.com .

13. Malaysian Personal Data Protection Act (PDPA)

As a company based in Malaysia, we comply with the Personal Data Protection Act 2010 (PDPA). We process your data only for the purposes described in this Policy, take reasonable steps to keep it accurate and secure, and respect your right to access, correct, or withdraw consent for processing at any time.

14. Canadian Privacy Rights (PIPEDA)

If you are a resident of Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) provides you with the following rights:

• Access — you may request access to the personal information we hold about you
• Correction — you may request correction of inaccurate information
• Consent withdrawal — you may withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions
• Complaint — you have the right to file a complaint with the Office of the Privacy Commissioner of Canada

15. Children's Privacy

SnowRun is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information as quickly as possible.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@getsnowrun.com .

16. Cookies and Tracking Technologies

The SnowRun website may use essential cookies to ensure basic functionality. We do not use advertising cookies, tracking pixels, or third-party analytics scripts on our website.

The SnowRun App does not use cookies. We do not access mobile advertising identifiers or use any cross-app tracking technologies.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide at least 30 days' notice through the App (via an in-app notification) or by email to the address associated with your account.

We encourage you to review this Policy periodically. Your continued use of the App after any changes take effect constitutes your acceptance of the updated Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data export requests, please contact support@getsnowrun.com and specify whether you would like your data in GPX or JSON format.