Liftline — Privacy Policy
Last updated: August 7, 2026
About these summaries: Each section begins with a short plain-English summary for convenience. The summaries are not part of this Privacy Policy and do not change the provisions that follow. If a summary and the full text differ, the full text controls.
1. Introduction
Basically: This Policy explains how Liftline handles information across its consumer and club features, public pages, and forms. Liftline asks separately when it needs permission for a particular practice, such as precise location access.
Caradhras Technologies, Inc. ("Liftline," "we," "our," or "us") operates a platform that connects skiers and snowboarders. This Privacy Policy explains what information we collect, how we use it, how we share it, and your choices regarding your information.
This Privacy Policy applies to Liftline's mobile app, authenticated web app, public website and shared pages, waitlist and club forms, and public guest-event RSVP feature. It does not apply to a third-party site or service that you choose to visit.
By using Liftline, you acknowledge the practices described in this Privacy Policy. When we need your permission for a particular practice, such as access to precise location, we request it separately.
2. Information We Collect
Basically: Liftline collects information you provide, information generated when you use the Service, and limited information from other users and service providers. This includes profile and account information, content and communications, trip and club activity, location, device, and usage data.
Information You Provide
When you create an account and use Liftline, you may provide the following information:
- Account information: Phone number, email address (optional), and information you submit through a waitlist, club inquiry, or support request.
- Profile information: Display name, username, birthdate, gender, bio, profile photos, skill level, sport preference, mindset, terrain preferences, home city/town, favorite resorts, ski pass type, club affiliations, and optional external social-profile links. Liftline assigns an avatar to each account; users cannot currently select or change it.
- Communications: Messages you send to other users through the Service, including direct messages and club or trip channel messages.
- Posts and other content: Posts, replies, reactions, mentions, photos, conditions reports, check-ins, insider tips, and other content you create or upload.
- Trips and transportation: Planned resorts and dates, trip audience and participation, invitations and join requests, ride availability or needs, vehicle and snow-tire information, and transportation notes.
- Clubs, events, and RSVPs: Club membership and role, club settings and announcements, event details, RSVP status, and related administrative drafts. A guest using a public event link may provide a name, phone number, Going or Interested status, and consent to event-related texts from the club.
- Safety, moderation, and support: Reports, block requests, report reasons, content or profile information associated with a report, and support correspondence.
Information Collected Automatically
When you use Liftline, we automatically collect certain information:
- Location data: With your permission, we collect your precise geographic location using your device's location services. Location data is used to show you nearby users and to display your approximate distance to other users. Liftline uses foreground or when-in-use location readings and does not currently request continuous background location access. We also collect selected resorts and places, home-city coordinates, event or meeting locations, trip destinations, and locations attached to posts or check-ins. We may use location, activity timestamps, and plans to organize resort-specific content, identify overlapping trips, and infer current or planned mountain presence. You may disable location services at any time through your device settings, but this may limit some functionality of the Service.
- Usage data: We collect information about how you interact with the Service, including screens viewed, features used, search or filter selections, timestamps, referring pages, campaign information, Liftline entity identifiers, errors, and notification outcomes. We use PostHog, a product analytics platform, to collect and analyze this usage data. Analytics may be associated with a stable account, browser, device, post, club, event, trip, or guest-RSVP identifier. On some web pages, PostHog may also collect autocaptured interactions or session-replay representations where those features are enabled. Information submitted through certain forms, such as a waitlist email or referral response, may be included with the related analytics event.
- Device information: Device type, operating system, browser type, app or browser version, language, and screen resolution.
- Log data: IP address, user agent, access times, requested URLs, referring URLs, error information, and server or network logs.
- Authentication and local-storage information: Authentication cookies or tokens, invitation and signup state, settings, device-secure credentials, and locally cached app content. Some cached information may remain on a browser or device until it expires, is overwritten, or the user clears app or browser storage.
- Notification information: Browser-push subscription endpoints and keys, device or Expo push tokens, notification preferences and mutes, delivery status, opens, and related engagement outcomes.
Information from Third Parties
- SMS verification: We use Twilio to verify your phone number during account creation. Twilio processes your phone number to deliver and check verification codes. Twilio's privacy policy governs its handling of this data.
- Other users, guests, and clubs: We receive content that mentions, depicts, messages, invites, reacts to, reports, or otherwise relates to you; trip and event participation information; club membership and role decisions; and information another person submits about an interaction.
- Devices and service providers: We receive authentication results, push-delivery status, place and map results, hosting and security logs, analytics, and error information.
- User-directed imports: When a club administrator asks Liftline to extract event details from a public URL, pasted text, or flyer, Liftline may retrieve and process that material.
- Derived information: We derive age from birthdate, approximate distance from coordinates, activity or presence indicators, trip overlaps, relationship-based audiences such as People you may know, and information used to detect fraud, abuse, or safety concerns. People you may know can be inferred from interactions such as messages, shared club membership, favorites, posts, replies, or reactions and does not necessarily mean both people have declared a friendship.
3. How We Use Your Information
Basically: Liftline uses information to operate and improve the Service, connect users and clubs, support trips and events, provide safety and moderation tools, communicate with you, and comply with law.
We use the information we collect to:
- Provide, operate, and maintain the Service.
- Display your profile to other users, including your display name, username, age calculated from your birthdate, profile photos, assigned avatar, and other profile information you provide. Your exact birthdate is not used as a public profile field in standard user-facing screens.
- Show your approximate distance from other users based on your location.
- Facilitate messaging between users.
- Determine and display your online status to other users.
- Provide posts, replies, reactions, check-ins, trip planning, ride coordination, clubs, channels, events, RSVPs, and public sharing features.
- Send you service-related communications, including account verification and security alerts, and notifications selected in your preferences.
- Enable a club to contact a guest about the specific event for which the guest provided a phone number and consented to club texts. Liftline does not use a guest-RSVP phone number for Liftline marketing.
- Process reports and blocks, moderate content, investigate fraud or abuse, protect users and the Service, and enforce our Terms.
- Monitor and analyze usage patterns to improve the Service.
- Detect, prevent, and address technical issues, fraud, or abuse.
- Provide artificial-intelligence-assisted club tools. For example, a club administrator may submit a flyer, public URL, pasted text, or instruction for event extraction or drafting. A person reviews relevant output before it is published or used to take action.
- Comply with law, respond to legal process, exercise or defend legal claims, or complete a corporate transaction.
4. How Your Information Is Shared
Basically: Information is shared according to the feature, audience, and settings you use; with clubs and vendors that help operate Liftline; and when legally required. Public or pass-along links are not private and may be forwarded or copied.
Via Public Sharing
Liftline allows users to share posts, events, and trips via public or pass-along web links. When content is shared this way, the content and certain associated information become viewable on a web page that may not require a Liftline account. A page marked noindex is intended to discourage ordinary search indexing; it is not private and does not prevent forwarding, screenshots, caching, archiving, or link previews.
For shared posts, the publicly viewable information includes:
- The post content (text, photos, location, and reactions)
- The author's display name, username, and profile photo or assigned avatar
- The resort and terrain associated with the post, if any
- Replies to the post and the display names, usernames, and profile photos or assigned avatars of users who have replied
For shared events, the publicly viewable user information may include:
- Display names of a small number of users who have RSVP'd "going" to the event
- Profile photos or assigned avatars of a small number of users who have RSVP'd to the event ("going" or "interested")
Club event discussion takes place in an event thread within the club channel. Public and pass-along web previews of events do not display that event-thread discussion.
A shared preview for a members-only club event omits member identities and does not show event-thread discussion but may still show the club, event description, date, resort or meeting location, and aggregate attendance information to anyone holding the link.
For shared trips, the preview may show the host's display name and profile image or assigned avatar, resort, dates, host note, and participant count. A signed-in holder of a working share link may also see a limited number of participant images. Public and nonpublic trip links or entry codes may be forwarded and may allow a holder to request access, join, or create an account and join, depending on the trip settings.
When a public post, event, or trip link is shared on third-party platforms (such as iMessage, Slack, or social networks), those platforms may fetch and display preview metadata, including the content, associated names and profile images or assigned avatars, and a preview image.
Information that is not intended to be included on public post, event, or trip pages:
- Phone numbers
- Email addresses
- Exact birthdates
- Raw profile coordinates
- Other posts, events, or trips not being shared
- Direct messages
- Club-channel event-thread discussion
If you delete a post in the Liftline app, the corresponding public web page will become unavailable. If an event is removed or cancelled, its public web page will be updated or removed accordingly. However, Liftline cannot remove copies of content that have been screenshotted, archived, cached, or independently distributed by others before deletion.
With Other Users
Depending on the feature and its audience or visibility setting, the following information may be visible to other Liftline users:
- Display name
- Username
- Age calculated from your birthdate
- Profile photos and the avatar assigned by Liftline
- Bio
- Gender
- Skill level, sport, mindset, and terrain preferences
- Home city/town
- Favorite resorts
- Ski pass type
- Approximate distance from the viewing user
- Online status and last active time
- Club affiliation and administrator role
- Posts, replies, check-ins, plans, trips, and RSVP status
- Optional external social-profile links
- Ride availability or needs, vehicle and snow-tire information, and transportation notes you choose to provide
Some of the information above can be hidden from other users through Ghost Mode privacy controls in Profile > Settings. See "Your Choices" below for details.
Your phone number, account email, exact birthdate, and raw profile coordinates are not used as public profile fields in standard user-facing screens.
With Clubs and Club Administrators
Club members can see permitted club-channel content and a roster containing names, usernames, profile images or assigned avatars, and administrator status. Club administrators can manage membership and roles, invitations, announcements, events, RSVPs, and certain club-channel content.
For a guest who RSVPs through a public event link, the owning club's administrators can see the guest's name, phone number, RSVP status, and submission timing and may text the guest about that event. Ordinary members receive only aggregate guest counts. Clubs and their administrators are responsible for their off-platform messages and for using guest information only for the event-related purpose presented when it was collected.
With Service Providers
We share information with third-party service providers who assist us in operating the Service:
- Supabase: Database hosting, authentication, realtime features, and file storage. Supabase stores account data, profile information, messages, posts and other content, club and trip information, and uploaded images.
- Twilio: SMS verification. Twilio processes your phone number and verification information to deliver and check authentication codes.
- Vercel: Web and API hosting. Vercel processes requests to serve the application and related logs.
- PostHog: Product analytics. PostHog receives usage data, stable account or device identifiers, Liftline entity identifiers, errors, and, where enabled, web session-replay or autocapture data. Certain form events may include information submitted with the form.
- Google Maps Platform: Place search, geocoding, reverse geocoding, and time-zone results. Google may receive a typed query, selected place, address, or coordinates used in a request.
- Expo, Apple Push Notification service, and browser push providers: App delivery and push notifications. These providers receive device or subscription tokens and the notification payload needed for delivery.
- Anthropic: Artificial-intelligence-assisted club event extraction, drafting, and related task-specific processing. Inputs may include administrator instructions, pasted or public-page text, flyer images, and limited club or activity information relevant to the task.
- Cloudinary: Delivery of static Liftline marketing videos. Liftline does not currently use Cloudinary for user-uploaded content.
These providers process information to provide services to Liftline, subject to applicable agreements, configurations, and legal obligations.
At Your Direction and Through Third-Party Links
We share information when you direct us to do so, choose an audience, send a message, join a club or trip, RSVP, create or forward a link, or use a third-party registration or social-profile link. A third party you visit receives information under its own terms and privacy policy.
For Legal Reasons
We may disclose your information if required to do so by law or in response to valid legal process, such as a subpoena, court order, or government request. We may also disclose information when we reasonably believe it is necessary to protect rights, safety, and security; investigate fraud or abuse; enforce our Terms; respond to an emergency; or establish, exercise, or defend legal claims.
In Connection with a Business Transfer
If Liftline is involved in financing, due diligence, a merger, acquisition, reorganization, bankruptcy, sale of assets, or a similar corporate transaction, your information may be disclosed or transferred as part of that transaction, subject to appropriate protections.
5. Data Storage and Security
Basically: Liftline and its providers store and process information primarily in the United States and use reasonable safeguards, but no system is completely secure. Liftline does not currently use a fixed retention schedule and generally keeps information unless it is deleted through an available feature or account deletion.
Your data is stored and processed by Supabase, Vercel, and the other service providers described above, primarily in the United States and in other locations where a provider operates. We implement reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS), authentication, and database and storage access controls.
However, no method of electronic storage or transmission over the internet is completely secure. We cannot guarantee the absolute security of your information.
Liftline does not currently use a fixed retention schedule. Unless information is deleted through an available product control or account deletion, Liftline generally retains it. Account deletion removes the authentication account, profile, and most user-owned records from the active production database, but some information may remain in backups, logs, provider systems, safety, moderation, or legal records, content retained by another user, and aggregated or de-identified records. Guest RSVPs, waitlist submissions, and club inquiries are separate records and may not be removed by account deletion.
6. Your Choices
Basically: You can update profile information, use available audience and visibility controls, manage location and notifications, and initiate account deletion. Some laws may provide additional rights, which can be requested by email.
Account and Profile
- You can update or correct your profile information at any time through the app.
- You can initiate account deletion through the app or web settings. Section 5 describes information that may remain after deletion.
- You can delete individual posts and change or clear certain plans, RSVPs, memberships, messages, or other content where the feature provides that control.
Audiences, Clubs, Links, and Blocking
- You can choose the available audience for a trip or other shareable content and decide whether to enable a public or pass-along link. Review the audience before sharing.
- You can stop certain trip links or change an audience, but someone who already received information may have copied it, and an existing participant may retain access as permitted by the feature.
- You can leave clubs when permitted by the club's role rules, and club administrators can change roles or remove members.
- You can block another user. Blocking limits discovery, direct messaging, and other supported interactions.
Visibility Controls (Ghost Mode)
Liftline provides Ghost Mode privacy controls in Profile > Settings that let you limit what other users can see about you:
- Hide online status: Other users will not see whether you are currently active on Liftline or when you were last active.
- Hide distance: Other users will not see your approximate distance from them.
- Hide profile from Explore: Your profile will not appear when other users passively browse the Explore tab. Your profile may still appear in resort-specific or other contextual views if you have a related check-in or plan.
These controls can be enabled or disabled individually at any time. Ghost Mode is not a private-account mode. It does not stop location collection, erase a stored location, hide content you publish, hide check-ins or plans, hide club membership or event RSVPs, remove you from direct conversations, or prevent permitted audiences or link holders from seeing shared content.
Location
- You can enable or disable location permissions at any time through your device or browser settings.
- Disabling location will stop new device-location readings through that permission and may prevent Liftline from showing your distance to other users or providing other location-based features.
- Disabling permission does not delete location already saved with your profile or content. You can change certain location fields through the Service or contact us about previously stored location.
Communications
- SMS authentication codes and important account or security notices are service communications and may be required to use or secure an account.
- You can manage push notification preferences through Liftline, your device settings, and your browser settings, and you can mute supported conversations, threads, and club or trip channels.
- A club's event-related text to a guest occurs outside Liftline's notification settings. A guest can ask the club sender to stop. Liftline does not send these guest-event texts or use the guest number for Liftline marketing.
Privacy Requests
Depending on where you live and subject to applicable law, you may have rights to access, correct, delete, or obtain a copy of certain personal information, withdraw consent for certain processing, or appeal a denied request. You may submit a request or appeal by emailing support@theliftline.app. We may verify and respond to the request as permitted or required by applicable law.
7. Children's Privacy
Basically: Liftline's interactive features are intended only for people 18 and older. If Liftline learns that an under-18 user submitted information through an interactive feature, it will take reasonable steps to delete or de-identify it, subject to limited exceptions.
Liftline is not intended for anyone under the age of 18. Account onboarding uses a self-reported birthdate to apply the 18+ eligibility requirement; Liftline does not independently verify every user's age or identity. The guest RSVP feature is also intended only for people age 18 or older.
Public shared pages may be viewed without an account. If we learn that we have collected personal information through an interactive feature from a person under 18, we will take reasonable steps to delete or de-identify that information, subject to safety, legal, and recordkeeping needs. A parent or guardian may contact support@theliftline.app.
8. International Users
Basically: Liftline is operated in the United States, and information from users outside the United States may be processed here or wherever Liftline's providers operate.
Liftline is operated in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to and processed in the United States and other locations where our service providers operate, where data protection laws may differ from those in your country.
9. Changes to This Privacy Policy
Basically: Liftline may update this Policy and will provide reasonable notice of significant changes. Consent will be requested when legally required.
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy within the app or by other reasonable means. If a change materially affects how we collect, use, or share personal information, we will obtain consent where required by law.
10. Contact
For privacy questions or requests, email support@theliftline.app.