Datenschutz für unsere Apps Glisso

Privacy policy

Stand: 09.11.2026 · Version 10

Delete Glisso friends profile and related data: In the app, open Settings → Live with friends → Delete friends profile. Without the app, submit a deletion request at https://hub.marketport.de/support/glisso or email info@marketport.de with the subject “Delete Glisso friends profile” and, where available, your friend code. See section 16 below for scope, verification and separate deletion of local/Health/cloud copies.

Privacy Policy for Glisso

Updated: 9 November 2026 · App version 1.0.0

1. Controller and contact

The controller is market port GmbH, Splieterstraße 27, 48231 Warendorf, Germany. Email: info@marketport.de. Privacy contact: Nils Möllers, Keyed GmbH, info@keyed.de, telephone +49 (0) 2505 639797. Support and privacy requests can also be submitted at https://hub.marketport.de/support/glisso.

2. Scope and local data

Glisso records skiing, snowboarding and sledding activities on iOS, Android and compatible watches. Data includes GPS points and timestamps, speed, elevation, routes, runs, statistics, ski-pass information, settings and imported files. Activities are initially stored locally. The online features below transmit the data specified for each feature. All features are free; an optional one-time purchase removes advertising.

3. Location and background recording

Glisso uses precise device location to record and analyse activities. With background location permission, recording can continue while the screen is locked. Location may also be used for nearby resorts, maps and weather. Permissions can be changed in system settings; recording is limited without location access. Online maps, weather and optional live sharing are described below. When these features are enabled, location data does not necessarily remain exclusively on the device.

4. Apple Health, Health Connect and watches

With your permission, Glisso may read heart rate and, where applicable, body weight, and write workouts with routes, distance, duration and energy expenditure to Apple Health or Health Connect. Compatible watches can transfer recordings to the phone through the relevant device connection. Health data is used for personal activity analysis, not advertising or advertising profiles. Access can be revoked in Health or Health Connect; records already saved there may need to be deleted there separately.

5. Optional iCloud or Google Drive backup

Backup is off by default. Exactly one service can be active: iCloud on Apple devices or Google Drive on Android, OR the Glisso Data Server (section 5a). Switching disables the previous backup provider; existing copies are not automatically deleted. If enabled, day metadata, edits, ski-pass information, any included health summaries and recorded GPS points are backed up to your iCloud app area (iOS) or Google Drive app-data area (Android). Android uses your Google sign-in and only the hidden Glisso app folder (drive.appdata), without access to your other Drive files. Google processes the selected account sign-in; Glisso does not store your account name or email address on the Glisso Data Server. iCloud/Drive backups do not have the additional device-bound content encryption described in section 5a. Backup is intended for devices using the same cloud service; Glisso does not provide a shared Apple/Google account. This feature does not upload photos or videos. Equipment profiles, service history and fall events are not part of this day backup; associated equipment identifiers may form part of day metadata. Cloud copies and exported files may remain after uninstalling the app.

5a. Optional encrypted backup for your own devices

The Glisso Data Server is off by default and must be enabled manually in settings. Linking devices does not ask for a name, email address or date of birth. Each installation receives a technical identity and device key. An additional device is linked only through the unique identifier of the initially configured device, a matching verification code and explicit approval on that initial device; requests expire after ten minutes. This is separate from sharing with friends.

Before upload, the app encrypts ski-day metadata, edits and raw GPS points, including any saved numeric health summaries (X25519, HKDF-SHA256 and XChaCha20-Poly1305). Private keys remain on the devices; the server does not receive a key that can read backup contents. Equipment profiles, service history, general settings, photos and videos are not uploaded by this day-backup feature.

The server processes encrypted contents, technical device/group identifiers, public keys, short-lived encrypted key handovers, sizes and modification times, IP addresses and ordinary connection/security logs. These technical identifiers and connection data can be personal data. We do not require a real name and do not create advertising profiles from ski days or health data; a blanket statement that no personal data is processed at all would therefore be inaccurate.

New devices cannot be approved without the initial device. Without an existing device holding the required keys, we cannot recover encrypted backups. The initial device can revoke other devices; this does not remotely erase copies already stored on them. Disabling backup does not automatically delete existing server copies. App deletion controls and the contact methods in section 13 are available for deletion requests; suitable proof of the technical identity is needed to locate the data.

6. Live sharing with friends and Glisso Data Server

The friends feature assigns the installation a technical anonymous identity without requiring an email address or real name. Glisso Data Server processes the user identifier, authentication data, automatically generated pseudonym, friend code and friendship links. These identifiers are pseudonymous personal data. Recovery after losing the locally stored sign-in is not guaranteed.

Only when live sharing is enabled during a recording does Glisso send the current precise position, altitude, speed, sport, vertical distance, run count and update time to Glisso Data Server, approximately every 30 seconds. Each update replaces the current position; it does not create a complete GPS history. Access is limited to the identity itself and friends connected by code. Adding a friend creates a mutual connection. Removing the friendship revokes further access.

The Glisso Data Server is operated by market port GmbH on a self-hosted server at IONOS in Germany (supabase-glisso.marketport.de). Complete activity days are stored only if backup is explicitly enabled and are encrypted in the app before upload (section 5a). Current live-position data for connected friends is instead expressly processed in plaintext on this server. When sharing or recording stops, the app attempts to delete the position. After 15 minutes without an update, friends can no longer retrieve it; an automatic cleanup runs every five minutes to remove expired entries. Outages may delay physical deletion. Profiles and friendship links remain until removal or a deletion request. Uninstalling the app alone does not delete this server data.

7. Equipment and suspected falls

Equipment profiles, maintenance intervals, day assignments and service history are managed locally. Reminders are explainable usage-based suggestions and do not measure the actual condition of materials.

Experimental phone fall detection is off by default. If you enable it and grant motion access, it processes acceleration, rotation and the latest available GPS speed locally during a visible, active recording. Raw motion-sensor data is not saved or uploaded. Supported watches may, if requested, transfer available system fall events and your answers to the phone. The local history retains the time, source and answer. No automatic emergency call is made and no event is sent to friends, advertising services or a Glisso server. Detection may produce false alarms and miss falls.

8. Media, import, export and notifications

On Android, you choose day photos through the system photo picker. Glisso copies only the selected images and available capture times into the local folder for that day; the app does not need access to your entire gallery or to videos. Removing the selection or deleting the day deletes these Glisso copies and leaves the gallery originals unchanged. On Apple devices, photos are associated with a day by capture time after your device permission. There is no automatic media upload to a Glisso server. Imported GPX and backup files are processed locally. When exporting or sharing, you choose the file and recipient; the recipient's privacy terms then apply. Season, service and weather notices and fall prompts are generated locally. Glisso does not require its own push server for these features.

9. Maps and weather

Offline map packs are downloaded from downloads.marketport.de. Requests generate technical connection data such as IP address, request time and requested file. Online maps and satellite views use Apple or Google map services depending on the platform; the provider processes requests needed for map display and location features. Offline maps reduce online requests. Map data includes OpenStreetMap data.

For forecasts, Glisso contacts MET Norway (api.met.no). It sends coordinates rounded to two decimal places (approximately one kilometre), altitude rounded to 50 metres where available, IP address and technical request information; no name or Glisso user identifier is sent. Forecasts are cached locally. Weather is disabled by default and can be enabled in settings from age 16. Weather data: MET Norway, CC BY 4.0.

10. Advertising and a one-time ad-free purchase

After advertising configuration is released, small Google AdMob banners may appear in season and resort overview screens, never during recording or on watches. Glisso requests non-personalised ads and does not supply GPS coordinates, routes or health data to the advertising SDK. Non-personalised advertising still involves data processing: Google may process IP addresses and an approximate region derived from them, device/app information, app-set or technical identifiers, diagnostics and ad impressions/interactions. Glisso does not request ATT tracking; the Android advertising-ID permission is blocked in the app.

Before requesting ads, the required privacy choices are checked using Google's User Messaging Platform. Where required, consent is the basis for device access and associated processing; without a permitted ad request, no banner is loaded. Required privacy choices can subsequently be changed in the app's advertising privacy settings. Information: https://policies.google.com/technologies/ads and https://policies.google.com/privacy.

The non-consumable one-time purchase “Glisso ad-free” costs €4.99 in Germany; elsewhere the displayed local store price applies. It is not a subscription and does not unlock additional features. Apple or Google handles payment. Glisso receives no payment-card details, but receives product/transaction information to check entitlement. Entitlement is cached locally and can be restored on devices using the same store; it is not automatically transferred between Apple and Google.

11. Purposes and legal bases

Requested recording, analysis, synchronisation, live sharing, weather, import/export and purchase management provide the respective service (Article 6(1)(b) GDPR). Optional permissions and processing that requires consent rely on consent (Article 6(1)(a) and, for health data, Article 9(2)(a) GDPR). Necessary security and operational processing relies on the legitimate interest in a secure, functioning service (Article 6(1)(f) GDPR). Consent may be withdrawn for the future. Optional features may be unavailable or limited without the required data access.

12. Recipients and international processing

Depending on your use, connected friends, Apple, Google, market port GmbH and IONOS (Glisso Data Server), MET Norway and technical hosting/download providers process the data described above. An EU database location does not rule out international support or service processing. Transfers outside the EU/EEA are subject to Articles 44 et seq. GDPR, including applicable adequacy decisions or standard contractual clauses where required. Provider information: https://www.apple.com/legal/privacy/, https://policies.google.com/privacy. Recipients you choose for exports process shared content under their own responsibility.

13. Retention and deletion

Local activities, equipment, service and fall histories remain until deleted in the app or by removing app data. Cloud copies and files may need separate deletion; day deletions are reconciled when cloud sync is enabled and completes successfully. Current live positions are subject to the periods in section 6. Profile/friendship deletion can be requested through info@marketport.de or https://hub.marketport.de/support/glisso; proof identifying the relevant app identity may be needed. Technical logs and support data are kept only as needed for operational, security or support purposes and applicable statutory retention duties. Statutory evidence or retention requirements may require longer retention of individual business records.

14. Your rights and updates

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection (Articles 15–21), withdrawal of consent (Article 7(3)), and complaint to a competent supervisory authority (Article 77). Contact info@marketport.de or the privacy contact in section 1. Glisso does not provide solely automated decisions producing legal or similarly significant effects under Article 22 GDPR. We update this policy when features or processing change; the published language version applies.

15. Age groups and protection of children

On first launch, a neutral screen asks for an age group with no answer preselected. Only the chosen age group is stored on the device, not a date of birth. It is not sent to a Glisso server or advertising service and does not constitute verified age or parental consent. Parents or guardians should set up the app and supervise system permissions for young children.

Until an age group has been selected and for users under 16, Glisso Data Server/friends and live location sharing, cloud backup, weather requests, online maps, new map downloads and external resort links are blocked in the app. Local recording and analysis, bundled or previously downloaded offline maps, equipment and maintenance history, local fall prompts, import/export and connection to the user's own watch remain available. Recipients selected for exports and device/watch services have their own applicable terms.

Advertising and purchase services are not initialized for users under 18; no ads or purchase offers are shown and ad-free use is free. The one-time EUR 4.99 purchase is intended only for adults. From age 16, cloud backup, weather and live sharing remain optional; a technical server sign-in is created only after manually activating the Glisso Data Server; a friends profile is created only after activating the friends feature. Age groups do not update automatically; no date of birth is stored to calculate age.

16. Delete your friends profile and related data

In Glisso, open Settings → Live with friends → Delete friends profile and expressly confirm deletion. The technical Glisso Data Server sign-in, profile and friend code, all associated friendships and the current live position are permanently removed from the server. The app turns off live sharing and signs the installation out. If the server cannot confirm deletion, the app does not claim success; you can retry later. A new profile is created only after explicitly activating the feature again.

Without the app installed, you can also request deletion at https://hub.marketport.de/support/glisso or info@marketport.de with the subject “Delete Glisso friends profile”. Where possible, provide the affected friend code so that we can identify the data; appropriate proof may be required and we will inform you about processing your request. If this installation is the initial device of a Glisso Data Server group, deleting its technical identity also deletes the associated encrypted server backup and disconnects linked devices from that group. Local copies already downloaded to those devices remain. Local activity days, Health entries, exported files and iCloud or Google Drive backups remain; delete these separately in the app or the respective service if required. No payment or subscription is required for this deletion.