Privacy Policy

Introduction

Welcome to Mökki ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

Information We Collect

Account Information

• Email address — Used for authentication and account recovery
• Password — Stored securely using industry-standard encryption

Profile Information

• Display name — How you appear to other house members
• Profile photo — Avatar image for your account
• Venmo handle — For manual payment coordination between house members
• Rider type — Optional skiing/snowboarding preference
• Tagline — Optional personal description

User-Generated Content

• Chat messages — Text messages up to 2,000 characters
• Media attachments — Photos (up to 10MB) and videos (up to 100MB)
• B-Roll content — Shared photos and videos with captions
• Expenses — Amounts, categories, descriptions, and receipt images
• Bulletin posts — Notes and announcements
• Events and itineraries — Trip planning information

Device and Technical Information

• Push notification tokens — To send you notifications
• Device identifier — For device-specific functionality
• Platform information — iOS, Android, or Web
• Timestamps — When content is created or modified
• Read receipts — For chat message delivery status

Biometric Data

If you enable biometric authentication (Face ID or Touch ID), biometric data is stored locally on your device only. We never transmit or store biometric data on our servers.

Information We Do NOT Collect

How We Use Your Information

• Provide and maintain the Mökki service
• Enable house features — Chat, expenses, bulletin, events, and B-Roll sharing
• Send notifications — Trip updates, new messages, and expense alerts
• Process expense tracking — Calculate splits and balances between house members
• Display weather information — Using resort coordinates (not your location)
• Authenticate your account — Verify your identity and secure access

Information Sharing

With House Members

When you join a house, other members can see your display name, profile photo, chat messages, expenses you create, B-Roll content you share, and events/bulletin posts you create.

With Service Providers

What We Never Do

Data Storage and Security

Your data is stored on Supabase cloud infrastructure. We implement appropriate security measures including:

• HTTPS/TLS encryption for all data transmission
• Secure token storage for authentication
• Row-level security in our database
• Encrypted password storage using industry-standard hashing

Your Rights

For All Users

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data
• Export your data
• Opt-out of push notifications at any time

For European Union Residents (GDPR)

If you are in the EU, you also have the right to:

• Data portability — Receive your data in a structured format
• Restrict processing — Limit how we use your data
• Object to processing — Object to certain uses of your data
• Withdraw consent — Withdraw previously given consent
• Lodge a complaint — File a complaint with a supervisory authority

For California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it's used
• Delete your personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination — Exercise your rights without penalty

Categories of Personal Information Collected: Identifiers (email, display name), Internet or network activity (device info, platform), User-generated content (messages, photos, expenses).

We do not sell personal information. We have not sold personal information in the preceding 12 months.

Data Retention

• Account data — Retained until you delete your account
• Messages and content — Retained until manually deleted by users or house deletion
• Push tokens — Retained until you unregister from notifications or delete your account
• Expense records — Retained until the associated house is deleted

Children's Privacy

Mökki is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at mattkettelkamp@gmail.com, and we will delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States where Supabase infrastructure may be located. If you are located in the European Economic Area (EEA), we ensure appropriate safeguards are in place for international transfers, including standard contractual clauses approved by the European Commission.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last Updated" date, and sending a notification through the app for significant changes.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Summary