Liftline — Privacy Policy
Last updated: October 31, 2026
About these summaries: Each section begins with a short plain-English summary for convenience. The summaries are not part of this Privacy Policy and do not change the provisions that follow. If a summary and the full text differ, the full text controls.
1. Introduction
Basically: This Policy explains how Liftline handles information across its consumer and club features, public pages, and forms. Liftline asks separately when it needs permission for a particular practice, such as precise location or contacts access.
Caradhras Technologies, Inc. ("Liftline," "we," "our," or "us") operates a platform that connects skiers and snowboarders. This Privacy Policy explains what information we collect, how we use it, how we share it, and your choices regarding your information.
This Privacy Policy applies to Liftline's mobile app, authenticated web app, public website and shared pages, waitlist and club forms, and public guest-event RSVP feature. It does not apply to a third-party site or service that you choose to visit.
By using Liftline, you acknowledge the practices described in this Privacy Policy. When we need your permission for a particular practice, such as access to precise location or your contacts, we request it separately.
2. Information We Collect
Basically: Liftline collects information you provide, information generated when you use the Service, and limited information from other users and service providers. This includes profile and account information, content and communications, trip and club activity, location, device, and usage data, and, if you connect your contacts, which members' phone numbers are saved in them.
Information You Provide
When you create an account and use Liftline, you may provide the following information:
- Account information: Phone number, email address (optional), and information you submit through a waitlist, club inquiry, or support request.
- Profile information: Display name, username, birthdate, gender, bio, profile photos, skill level, sport preference, mindset, terrain preferences, home city/town, favorite resorts, ski pass type, club affiliations, and optional external social-profile links. Liftline assigns an avatar to each account; users cannot currently select or change it.
- Communications: Messages you send to other users through the Service, including direct messages and club or trip channel messages.
- Posts and other content: Posts, replies, reactions, mentions, photos, conditions reports, check-ins, insider tips, and other content you create or upload.
- Trips and transportation: Planned resorts and dates, trip audience and participation, invitations and join requests, ride availability or needs, vehicle and snow-tire information, and transportation notes.
- Clubs, events, and RSVPs: Club membership and role, club settings and announcements, event details, RSVP status, and related administrative drafts. A guest using a public event link may provide a name, phone number, Going or Interested status, and consent to event-related texts from the club.
- Safety, moderation, and support: Reports, block requests, report reasons, content or profile information associated with a report, and support correspondence.
- Contacts (optional): If you choose to connect your contacts, the Liftline app reads the phone numbers saved in your device's contacts. On devices that support it, you can share only some of your contacts. Before any number leaves your device, the app writes it in international format and converts it into a code using a one-way function (SHA-256), and it skips your own number. Names, email addresses, photos, notes, and other contact details are not sent. Liftline compares the codes with codes of members' verified sign-in phone numbers and keeps only a record of which members' numbers are saved in your contacts ("contact matches"). Members who have turned on Hide from contacts, and members you have blocked or who have blocked you, are not matched. Liftline does not keep the codes, and it keeps no record of contacts who are not Liftline members. Because the number of possible phone numbers is limited, the codes do not make the numbers anonymous, which is one reason Liftline does not keep them. While your contacts are connected, the app checks again from time to time, such as once a week, so that friends who join later can be suggested.
- Contacts you invite: When you use Invite a contact, your device's contact picker gives the app only the contact you pick. The app checks that one number the same way to see whether it belongs to a member. If it does not, your messaging app opens with an invitation and link that you can edit and send from your own phone number. Liftline does not send the invitation and does not keep the contact's name or number.
Information Collected Automatically
When you use Liftline, we automatically collect certain information:
- Location data: With your permission, we collect your precise geographic location using your device's location services. Location data is used to show you nearby users and to display your approximate distance to other users. Liftline uses foreground or when-in-use location readings and does not currently request continuous background location access. We also collect selected resorts and places, home-city coordinates, event or meeting locations, trip destinations, and locations attached to posts or check-ins. We may use location, activity timestamps, and plans to organize resort-specific content, identify overlapping trips, and infer current or planned mountain presence. You may disable location services at any time through your device settings, but this may limit some functionality of the Service.
- Usage data: We collect information about how you interact with the Service, including screens viewed, features used, search or filter selections, timestamps, referring pages, campaign information, Liftline entity identifiers, errors, and notification outcomes. We use PostHog, a product analytics platform, to collect and analyze this usage data. Analytics may be associated with a stable account, browser, device, post, club, event, trip, or guest-RSVP identifier. On some web pages, PostHog may also collect autocaptured interactions or session-replay representations where those features are enabled. Information submitted through certain forms, such as a waitlist email or referral response, may be included with the related analytics event. For contact features, analytics record events such as whether contacts access was granted, an approximate count of numbers checked, and how many members were found, but not phone numbers or names.
- Device information: Device type, operating system, browser type, app or browser version, language, and screen resolution.
- Log data: IP address, user agent, access times, requested URLs, referring URLs, error information, and server or network logs.
- Authentication and local-storage information: Authentication cookies or tokens, invitation and signup state, settings, device-secure credentials, and locally cached app content. Some cached information may remain on a browser or device until it expires, is overwritten, or the user clears app or browser storage.
- Notification information: Browser-push subscription endpoints and keys, device or Expo push tokens, notification preferences and mutes, delivery status, opens, and related engagement outcomes.
Information from Third Parties
- SMS verification: We use Twilio to verify your phone number during account creation. Twilio processes your phone number to deliver and check verification codes. Twilio's privacy policy governs its handling of this data.
- Other users, guests, and clubs: We receive content that mentions, depicts, messages, invites, reacts to, reports, or otherwise relates to you; trip and event participation information; club membership and role decisions; and information another person submits about an interaction. If another member who has your phone number saved in their contacts connects contacts, Liftline records a contact match between that member's account and yours, unless you have turned on Hide from contacts or either of you has blocked the other.
- Devices and service providers: We receive authentication results, push-delivery status, place and map results, hosting and security logs, analytics, and error information.
- User-directed imports: When a club administrator asks Liftline to extract event details from a public URL, pasted text, or flyer, Liftline may retrieve and process that material.
- Derived information: We derive age from birthdate, approximate distance from coordinates, activity or presence indicators, trip overlaps, relationship-based audiences such as People you may know, and information used to detect fraud, abuse, or safety concerns. People you may know can be inferred from interactions such as messages, shared club membership, favorites, posts, replies, or reactions and does not necessarily mean both people have declared a friendship. If you connect your contacts, members whose phone numbers are saved in them are also suggested to you. To make this matching possible, Liftline derives a code from each member's verified sign-in phone number using the same one-way function.
3. How We Use Your Information
Basically: Liftline uses information to operate and improve the Service, connect users and clubs, support trips and events, provide safety and moderation tools, communicate with you, and comply with law.
We use the information we collect to:
- Provide, operate, and maintain the Service.
- Display your profile to other users, including your display name, username, age calculated from your birthdate, profile photos, assigned avatar, and other profile information you provide. Your exact birthdate is not used as a public profile field in standard user-facing screens.
- Show your approximate distance from other users based on your location.
- Facilitate messaging between users.
- Determine and display your online status to other users.
- Provide posts, replies, reactions, check-ins, trip planning, ride coordination, clubs, channels, events, RSVPs, and public sharing features.
- If you connect your contacts, suggest the members whose phone numbers are saved in your contacts in your People you may know, labeled "In your contacts." Contact matches affect only the suggestions of the person whose contacts include the number. They do not change what any other user sees, they are not used to decide who can see plans or posts or who receives notifications, and they are not provided to clubs, resorts, or artificial-intelligence features.
- Check the contact you pick with Invite a contact, so that a member is shown to you instead of being sent an invitation, and open your messaging app with an invitation you choose whether to send.
- Send you service-related communications, including account verification and security alerts, and notifications selected in your preferences.
- Enable a club to contact a guest about the specific event for which the guest provided a phone number and consented to club texts. Liftline does not use a guest-RSVP phone number for Liftline marketing.
- Process reports and blocks, moderate content, investigate fraud or abuse, protect users and the Service, and enforce our Terms.
- Monitor and analyze usage patterns to improve the Service.
- Detect, prevent, and address technical issues, fraud, or abuse.
- Limit how many phone numbers an account can check, so that contact features cannot be used to look people up.
- Provide artificial-intelligence-assisted club tools. For example, a club administrator may submit a flyer, public URL, pasted text, or instruction for event extraction or drafting. A person reviews relevant output before it is published or used to take action.
- Comply with law, respond to legal process, exercise or defend legal claims, or complete a corporate transaction.
4. How Your Information Is Shared
Basically: Information is shared according to the feature, audience, and settings you use; with clubs and vendors that help operate Liftline; and when legally required. Public or pass-along links are not private and may be forwarded or copied.
Via Public Sharing
Liftline allows users to share posts, events, and trips via public or pass-along web links. When content is shared this way, the content and certain associated information become viewable on a web page that may not require a Liftline account. A page marked noindex is intended to discourage ordinary search indexing; it is not private and does not prevent forwarding, screenshots, caching, archiving, or link previews.
For shared posts, the publicly viewable information includes:
- The post content (text, photos, location, and reactions)
- The author's display name, username, and profile photo or assigned avatar
- The resort and terrain associated with the post, if any
- Replies to the post and the display names, usernames, and profile photos or assigned avatars of users who have replied
For shared events, the publicly viewable user information may include:
- Display names of a small number of users who have RSVP'd "going" to the event
- Profile photos or assigned avatars of a small number of users who have RSVP'd to the event ("going" or "interested")
Club event discussion takes place in an event thread within the club channel. Public and pass-along web previews of events do not display that event-thread discussion.
A shared preview for a members-only club event omits member identities and does not show event-thread discussion but may still show the club, event description, date, resort or meeting location, and aggregate attendance information to anyone holding the link.
For shared trips, the preview may show the host's display name and profile image or assigned avatar, resort, dates, host note, and participant count. A signed-in holder of a working share link may also see a limited number of participant images. Public and nonpublic trip links or entry codes may be forwarded and may allow a holder to request access, join, or create an account and join, depending on the trip settings.
When a public post, event, or trip link is shared on third-party platforms (such as iMessage, Slack, or social networks), those platforms may fetch and display preview metadata, including the content, associated names and profile images or assigned avatars, and a preview image.
Information that is not intended to be included on public post, event, or trip pages:
- Phone numbers
- Email addresses
- Exact birthdates
- Raw profile coordinates
- Other posts, events, or trips not being shared
- Direct messages
- Club-channel event-thread discussion
If you delete a post in the Liftline app, the corresponding public web page will become unavailable. If an event is removed or cancelled, its public web page will be updated or removed accordingly. However, Liftline cannot remove copies of content that have been screenshotted, archived, cached, or independently distributed by others before deletion.
With Other Users
Depending on the feature and its audience or visibility setting, the following information may be visible to other Liftline users:
- Display name
- Username
- Age calculated from your birthdate
- Profile photos and the avatar assigned by Liftline
- Bio
- Gender
- Skill level, sport, mindset, and terrain preferences
- Home city/town
- Favorite resorts
- Ski pass type
- Approximate distance from the viewing user
- Online status and last active time
- Club affiliation and administrator role
- Posts, replies, check-ins, plans, trips, and RSVP status
- Optional external social-profile links
- Ride availability or needs, vehicle and snow-tire information, and transportation notes you choose to provide
Some of the information above can be hidden from other users through Ghost Mode privacy controls in Profile > Settings. See "Your Choices" below for details.
If another member has your phone number saved in their contacts and has connected contacts, you may appear in that member's People you may know, labeled "In your contacts," showing the same profile information that member could see by searching for you by name. The label tells that member only that their own contacts include your number. Liftline does not notify you when this happens, and it never tells a member who has their number saved. You can turn on Hide from contacts in Profile > Settings to stop appearing this way. Other members can still find you by name.
Your phone number, account email, exact birthdate, and raw profile coordinates are not used as public profile fields in standard user-facing screens.
With Clubs and Club Administrators
Club members can see permitted club-channel content and a roster containing names, usernames, profile images or assigned avatars, and administrator status. Club administrators can manage membership and roles, invitations, announcements, events, RSVPs, and certain club-channel content.
For a guest who RSVPs through a public event link, the owning club's administrators can see the guest's name, phone number, RSVP status, and submission timing and may text the guest about that event. Ordinary members receive only aggregate guest counts. Clubs and their administrators are responsible for their off-platform messages and for using guest information only for the event-related purpose presented when it was collected.
With Service Providers
We share information with third-party service providers who assist us in operating the Service:
- Supabase: Database hosting, authentication, realtime features, and file storage. Supabase stores account data, profile information, messages, posts and other content, club and trip information, contact matches, and uploaded images.
- Twilio: SMS verification. Twilio processes your phone number and verification information to deliver and check authentication codes.
- Vercel: Web and API hosting. Vercel processes requests to serve the application and related logs.
- PostHog: Product analytics. PostHog receives usage data, stable account or device identifiers, Liftline entity identifiers, errors, and, where enabled, web session-replay or autocapture data. Certain form events may include information submitted with the form.
- Google Maps Platform: Place search, geocoding, reverse geocoding, and time-zone results. Google may receive a typed query, selected place, address, or coordinates used in a request.
- YouTube: Some resort webcams play in YouTube's embedded player, and Liftline uses YouTube API Services to keep those webcams current. When YouTube's player or a still image from YouTube loads, or a video plays, YouTube receives information such as your IP address, device and browser information, and the video you watch. YouTube may store or read cookies or similar data on your device and may show its own content, including ads, in its player. Liftline does not ask you to sign in to YouTube and does not receive information from your YouTube or Google account. Liftline's own record of webcam use is limited to the usage data described above, such as which mountain's webcams you opened. Google handles the information YouTube receives under the Google Privacy Policy.
- Expo, Apple Push Notification service, and browser push providers: App delivery and push notifications. These providers receive device or subscription tokens and the notification payload needed for delivery.
- Anthropic: Artificial-intelligence-assisted club event extraction, drafting, and related task-specific processing. Inputs may include administrator instructions, pasted or public-page text, flyer images, and limited club or activity information relevant to the task.
- Cloudinary: Delivery of static Liftline marketing videos. Liftline does not currently use Cloudinary for user-uploaded content.
These providers process information to provide services to Liftline, subject to applicable agreements, configurations, and legal obligations.
At Your Direction and Through Third-Party Links
We share information when you direct us to do so, choose an audience, send a message, join a club or trip, RSVP, create or forward a link, or use a third-party registration or social-profile link. A third party you visit receives information under its own terms and privacy policy.
Road camera photos and video load on your device directly from the California Department of Transportation (Caltrans), which receives standard request information such as your IP address. When you open a resort's webcams page in your browser, that resort's website receives information under its own terms and privacy policy.
For Legal Reasons
We may disclose your information if required to do so by law or in response to valid legal process, such as a subpoena, court order, or government request. We may also disclose information when we reasonably believe it is necessary to protect rights, safety, and security; investigate fraud or abuse; enforce our Terms; respond to an emergency; or establish, exercise, or defend legal claims.
In Connection with a Business Transfer
If Liftline is involved in financing, due diligence, a merger, acquisition, reorganization, bankruptcy, sale of assets, or a similar corporate transaction, your information may be disclosed or transferred as part of that transaction, subject to appropriate protections.
5. Data Storage and Security
Basically: Liftline and its providers store and process information primarily in the United States and use reasonable safeguards, but no system is completely secure. Liftline does not currently use a fixed retention schedule and generally keeps information unless it is deleted through an available feature or account deletion.
Your data is stored and processed by Supabase, Vercel, and the other service providers described above, primarily in the United States and in other locations where a provider operates. We implement reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS), authentication, and database and storage access controls.
However, no method of electronic storage or transmission over the internet is completely secure. We cannot guarantee the absolute security of your information.
Liftline does not currently use a fixed retention schedule. Unless information is deleted through an available product control or account deletion, Liftline generally retains it. Account deletion removes the authentication account, profile, and most user-owned records from the active production database, but some information may remain in backups, logs, provider systems, safety, moderation, or legal records, content retained by another user, and aggregated or de-identified records. Guest RSVPs, waitlist submissions, and club inquiries are separate records and may not be removed by account deletion.
Contact matches are kept while your contacts are connected, and each new check replaces them, so a member removed from your contacts is dropped at the next check. They are deleted when you disconnect your contacts, when the app finds that you have turned off contacts access in your device settings, or when you delete your account. Contact matches that point to you are deleted when you turn on Hide from contacts or delete your account. To prevent misuse, Liftline keeps limited records of each account's contact checks, such as when recent checks happened and a compact estimate of how many different phone numbers were checked in the last 30 days. That estimate cannot be used to recover the numbers, and disconnecting does not reset these records.
6. Your Choices
Basically: You can update profile information, use available audience and visibility controls, manage location, contacts, and notifications, and initiate account deletion. Some laws may provide additional rights, which can be requested by email.
Account and Profile
- You can update or correct your profile information at any time through the app.
- You can initiate account deletion through the app or web settings. Section 5 describes information that may remain after deletion.
- You can delete individual posts and change or clear certain plans, RSVPs, memberships, messages, or other content where the feature provides that control.
Audiences, Clubs, Links, and Blocking
- You can choose the available audience for a trip or other shareable content and decide whether to enable a public or pass-along link. Review the audience before sharing.
- You can stop certain trip links or change an audience, but someone who already received information may have copied it, and an existing participant may retain access as permitted by the feature.
- You can leave clubs when permitted by the club's role rules, and club administrators can change roles or remove members.
- You can block another user. Blocking limits discovery, direct messaging, and other supported interactions.
Visibility Controls (Ghost Mode)
Liftline provides Ghost Mode privacy controls in Profile > Settings that let you limit what other users can see about you:
- Hide online status: Other users will not see whether you are currently active on Liftline or when you were last active.
- Hide distance: Other users will not see your approximate distance from them.
- Hide profile from Explore: Your profile will not appear when other users passively browse the Explore tab. Your profile may still appear in resort-specific or other contextual views if you have a related check-in or plan.
These controls can be enabled or disabled individually at any time. Ghost Mode is not a private-account mode. It does not stop location collection, erase a stored location, hide content you publish, hide check-ins or plans, hide club membership or event RSVPs, remove you from direct conversations, or prevent permitted audiences or link holders from seeing shared content.
Location
- You can enable or disable location permissions at any time through your device or browser settings.
- Disabling location will stop new device-location readings through that permission and may prevent Liftline from showing your distance to other users or providing other location-based features.
- Disabling permission does not delete location already saved with your profile or content. You can change certain location fields through the Service or contact us about previously stored location.
Contacts
- Connecting your contacts is optional. Liftline asks for contacts access only when you choose Find friends, and on devices that support it you can share only some of your contacts.
- You can disconnect your contacts in Profile > Settings. Disconnecting deletes all of your contact matches at once and does not change the contacts on your device. People you have already added to your close friends list stay on it.
- If you turn off Liftline's contacts access in your device settings, the app treats this as disconnecting and deletes your contact matches the next time you open Liftline on that device.
- You can turn on Hide from contacts in Profile > Settings, whether or not you connect your own contacts. While it is on, you do not appear to other members as "In your contacts," and turning it on deletes the contact matches that point to you. Other members can still find you by name.
- Invite a contact does not require contacts access. It uses your device's contact picker, and you decide whether to send the invitation from your messaging app.
Communications
- SMS authentication codes and important account or security notices are service communications and may be required to use or secure an account.
- You can manage push notification preferences through Liftline, your device settings, and your browser settings, and you can mute supported conversations, threads, and club or trip channels.
- A club's event-related text to a guest occurs outside Liftline's notification settings. A guest can ask the club sender to stop. Liftline does not send these guest-event texts or use the guest number for Liftline marketing.
Privacy Requests
Depending on where you live and subject to applicable law, you may have rights to access, correct, delete, or obtain a copy of certain personal information, withdraw consent for certain processing, or appeal a denied request. You may submit a request or appeal by emailing support@theliftline.app. We may verify and respond to the request as permitted or required by applicable law.
7. Children's Privacy
Basically: Liftline's interactive features are intended only for people 18 and older. If Liftline learns that an under-18 user submitted information through an interactive feature, it will take reasonable steps to delete or de-identify it, subject to limited exceptions.
Liftline is not intended for anyone under the age of 18. Account onboarding uses a self-reported birthdate to apply the 18+ eligibility requirement; Liftline does not independently verify every user's age or identity. The guest RSVP feature is also intended only for people age 18 or older.
Public shared pages may be viewed without an account. If we learn that we have collected personal information through an interactive feature from a person under 18, we will take reasonable steps to delete or de-identify that information, subject to safety, legal, and recordkeeping needs. A parent or guardian may contact support@theliftline.app.
8. International Users
Basically: Liftline is operated in the United States, and information from users outside the United States may be processed here or wherever Liftline's providers operate.
Liftline is operated in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to and processed in the United States and other locations where our service providers operate, where data protection laws may differ from those in your country.
9. Changes to This Privacy Policy
Basically: Liftline may update this Policy and will provide reasonable notice of significant changes. Consent will be requested when legally required.
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy within the app or by other reasonable means. If a change materially affects how we collect, use, or share personal information, we will obtain consent where required by law.
10. Contact
For privacy questions or requests, email support@theliftline.app.