Your data lives on your phone. We don't want it, we don't take it, and we have nowhere to send it. That's the whole policy. Everything below is just us explaining how seriously we mean that.
While a session is active, Snorkel records:
That's it. Not your name. Not your email. Not your contacts, your other apps, or your browsing habits.
Everything stays on your device, in Apple's on-device database. If you delete the app, it's gone. No server to request deletion from, because there is no server.
No advertising SDKs. No analytics frameworks. No crash reporters that phone home. No social login. No "share your run" data pipelines that send your route anywhere. No targeted advertisements. No "marketing campaigns."
Snorkel has zero lines of code that observe your behavior for someone else's benefit.
You also won't see a "help us improve by sharing anonymous usage statistics" prompt anywhere in this app. That's not an oversight. "Anonymous" is usually doing a lot of heavy lifting in that sentence, and we'd rather not be in that business at all.
There's also no "aggregated and anonymized data may be shared for commercial purposes" clause buried somewhere in this policy. There's nothing to aggregate. Your data never leaves your phone.
This isn't policy, it's architecture. Your ski data lives on your device. Snorkel operates no server, no backend, no database that holds your sessions. The promises in this document aren't commitments you have to trust us to keep. They're the only thing the app can do with your tracking data.
Our business model: you download the app, the app works, that's the whole transaction.
Snorkel asks for "Allow While Using" location access, not "Always Allow." We only need your location when you've tapped Start Day.
iOS background location mode lets us keep recording even when the screen is off or you switch apps mid-run. That's the only reason background access exists here.
Snorkel keeps a small diagnostic log on your device. It records app events and errors, things like "resort database loaded," "barometric altimeter seeded," or "save failed: disk full."
The log may include operational values we actually need to fix bugs: sensor readings (GPS accuracy, barometric seed altitudes, elevation spike rates), session dates during bulk operations like Resegment or Delete All, and counts of items being processed. It does not record your raw GPS route, the contents of your sessions, or your friends' names, phone numbers, or photos.
This log lives entirely on your device and is never sent anywhere automatically. If something breaks and you contact support, you may be asked to share it. You'll see exactly what's being shared before it goes anywhere, nothing leaves your phone without your explicit tap. We use it only to fix your specific issue. It doesn't go into a tracking system, a bug farm, or anywhere else. Once the issue is resolved, we're done with it.
You can view, send, or clear it from Settings → About → Send Diagnostic Log.
Export it as GPX or CSV whenever you want and take it anywhere. Delete individual sessions or nuke everything from Settings. There's no account to close, no "submit a deletion request and wait 30 days," and no data warehouse to purge.
It's your ski day. It should be your data.
If something here doesn't add up or you want to know more, reach out via the App Store support link. We actually read those.
Last updated: April 2026