OneTwo SkiThis privacy policy applies to the OneTwo Ski app on iPhone and Apple Watch. Visiting this website is additionally covered by the website's general privacy policy.
Visiting this website: audience measurement and hosting
Notice about tracking: When you open this page, your visit is counted anonymously with GoatCounter (audience measurement). GoatCounter sets no cookies and stores nothing on your device. Your IP address is not stored. Only the page visited, the referring page (referrer), browser, operating system, approximate country, language and screen size are recorded. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an overview of page views).
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Server log files are created for technical reasons. Details on GoatCounter, hosting and your right to object are in the general privacy policy of this website. This measurement concerns only the visit to the website, not the use of the app.
1. Controller
Christian Drapatz
Kämpenstrasse 42
45147 Essen
Germany
Email: support@onetwoapps.com
No data protection officer has been appointed; one is not required by law.
2. Basic principle: processing on your devices
OneTwo Ski has no server of its own, no user account, no sign-in, no advertising, no analytics, no third-party SDKs and no tracking. Everything the app stores and calculates happens on your iPhone or Apple Watch. The developer has no access to this data. Data only leaves your devices in the cases described below: Apple services (maps, Apple Health, optional iCloud), exports you trigger and support emails.
3. What the app stores on your device
- Activities: route with timestamps, speed, altitude, vertical, runs and lifts with slope names, gradient per run, name, description, tags, color tags.
- Photos along the route with location and viewing direction. Photos are saved again without the original image metadata (EXIF).
- Settings, statistics goals and the state of a running recording (to restore it after a crash).
- Health values (see sections 6 to 8): heart rate series, average and maximum heart rate, active energy, heart rate zones, training load and your body data.
- Sample data, if you create it under Settings › General › Sample data: made-up example activities from Obertauern. Before that, all activities and photos on this device are deleted (if you like, you first save them yourself as GPX files). Sample data stays on this device, does not go to iCloud or Apple Health, and can be removed there again.
The data lives in the app's protected storage (system file protection). It is part of your device's normal backup, on your computer or as an iCloud Backup if you turned that on in iOS. Such a backup is managed by Apple or your computer, not by the app.
Retention: until you delete the data in the app or remove the app.
4. Location
The app uses your location to record the route of a recording you started, also with the screen locked. In the background, location only runs while a recording is running or paused; during that time the system shows the blue location indicator. In the foreground the app also uses location without a recording, for example for your position on the map, the current altitude, the location of a photo and the suggestion of a ski area. The app only asks for “While Using the App”. Your location is not transmitted to the developer.
5. Other permissions
The app asks for each permission only when you use the matching feature. All are optional; without them only that feature is missing.
- Motion (barometer): more accurate altitude, vertical and gradient. The app only stores the readings with your activities.
- Camera: photos during an activity.
- Photos (add only): Only if you turn on “Also add to Photos” does the app put a copy in your library. The app never reads your library.
- Apple Health: see section 6.
6. Apple Health and health data
Heart rate, body data and values calculated from them are health data within the meaning of Art. 9 GDPR. The app only processes them if you explicitly turn this on. You find both switches under Settings › Logging › With Apple Health; both are off by default. iOS then asks in its own dialog which data you allow.
“Pull heart rate from Health” – what the app reads from Health:
- heart rate (during and after the activity), resting heart rate,
- weight, date of birth and biological sex.
With “Save to Health” the app also reads workouts, but only to find your Apple Watch workout and not save it twice.
“Save to Health” – what the app writes to Health:
- for each saved activity, a workout with sport, duration, breaks, route, distance, elevation gain and active energy.
The app does not write heart rate or body data to Health.
The app uses data from Apple Health only for the features described here. It is not used for advertising or marketing, not sold, not passed on to third parties and not stored in iCloud.
You can change what you allow at any time in the Health app under Profile › Apps › OneTwo Ski or with the switches in the app. Workouts already saved in Health stay there even if you delete them in the app; you delete them in the Health app.
7. Body data and calorie calculation
Body data: Under Settings › Logging › Body metrics you can enter weight, year of birth, sex and resting heart rate yourself. The app fills empty fields from Health if “Pull heart rate from Health” is on. If Health differs later, the app asks whether to use the new value. Body data stays on this device only (and in its backup). It is never synced via iCloud and never written back to Health.
Calculations, all on the device:
- Active energy (calories): If Apple Watch measures the workout, the app uses its value. Otherwise it estimates from heart rate (formula by Keytel 2005, with weight, age and sex) or, without heart rate, from movement (MET values per sport, with weight). Lifts, gondolas and breaks do not count. The app always shows the method.
- Heart rate zones: from resting and maximum heart rate (Karvonen; maximum heart rate is estimated from age using Tanaka if you don't enter it).
- Training load: TRIMP of the last 7 days compared with the last 28 days.
These values are estimates for personal guidance, not a medical assessment. OneTwo Ski is not a medical device. The app makes no decisions about you within the meaning of Art. 22 GDPR and passes nothing on to third parties.
Without body data or heart rate the app works fully; individual values are then missing (shown as “–”) or energy is estimated from movement only.
8. Apple Watch, widget, Live Activity and Siri
- Apple Watch: During a recording the watch starts a workout session (setting “Watch readings”, can be turned off). It measures heart rate and active energy and shows the values. If “Save to Health” is on and allowed in Health, the watch saves the workout to Health itself; the iPhone takes over this workout and adds the route instead of creating a second one. The watch mirrors the session to your iPhone using Apple's system features. The status the iPhone sends to the watch contains no locations and no heart rate values.
- Live Activity: shows sport, duration and speed; heart rate only if you turn that on in Settings (off by default).
- Widget: shows your last activity (name, distance, duration), no health values. One tap opens the app.
- Siri shortcuts: start and control the recording on your device.
9. iCloud sync (optional)
The app works fully without iCloud. Sync is off by default. If you turn it on, the app syncs activities, photos including route images and some settings (e.g. color theme, map style) between your devices through the private CloudKit database of your own iCloud account. The developer has no access to it.
Not synced are heart rate, active energy, heart rate zones, training load, body data, statistics goals, the language and device-specific switches. The app removes these values from every activity before syncing.
If an activity was changed on two devices, you decide in the conflict manager which version applies. You can turn sync off at any time and delete the app's data in iCloud in Settings. Apple's privacy policy applies to iCloud: apple.com/legal/privacy.
10. Backups
All data the app stores on the device, including health values, is part of the normal device backup. Whether this backup is on your computer or in iCloud is your choice in iOS Settings. The app itself does not upload any health values to iCloud; in an iCloud Backup they are protected by Apple like all other device data.
11. Export and sharing
- GPX and TCX: You can share an activity as a GPX or TCX file. It contains your route with locations, altitudes and times. Heart rate (GPX and TCX) and active energy (TCX) only go into the file if you turn on “With heart rate” when sharing, and only for that one export.
- Share image: shows the map and key figures, but never health values.
- Photos: you share them via the system share sheet.
You decide where you send files. By sending them you pass the data to the recipient you chose; the app is not responsible for how they process it.
12. Map and slope data
Slope, trail and lift data for 36 regions is included in the app and works offline (source: © OpenStreetMap contributors, ODbL, see Slope data and license). For the map background (standard, satellite, hybrid) and the route preview image the app uses Apple's MapKit. Apple receives the displayed map area and your IP address; Apple's privacy policy applies. If you tap a link to OpenStreetMap, their website opens.
Weather (Apple Weather): For the weather of a ski day, the “Weather compared” analysis and the weather line before the start, the app queries Apple's WeatherKit service. Apple receives the coordinate of the starting point or of your current location (rounded to about 2 km), the time period and your IP address, but no name and no identifier of you. With the same rounded coordinate the app asks Apple for the place name and country, so the weather shows where it applies. Apple's privacy policy applies. The app keeps the results only as a cache on the device, not in iCloud; “Erase App Data Here” removes them. Without a network connection the app shows no weather.
SOS emergency numbers: The emergency numbers for 119 countries (mountain accident, emergency, rescue, police, fire brigade, air rescue) are stored in the app and shown offline. The app determines the country from your location on the device; nothing is transmitted for this. The app never dials by itself; iOS asks before every call.
Meeting point: With “I am here” or “Meet at …” the app creates an Apple Maps link with the chosen coordinate and hands it to the iOS or watchOS share sheet. The huts and lifts offered for selection (within 3 km) come from the winter sports data inside the app. There is no developer server; your position leaves the device only in the message you send yourself, and only to the recipient you choose.
13. Legal bases
- Core features (recording, location, map, weather, barometer, camera, storage on the device): Art. 6(1)(b) GDPR (providing the app features you requested). Storing data on the device is strictly necessary for these features (Section 25(2) no. 2 TDDDG).
- Health data (reading from Health, body data, calculations, writing to Health, watch measuring, heart rate in the Live Activity, export with heart rate): your explicit consent under Art. 9(2)(a) in conjunction with Art. 6(1)(a) GDPR. You give it by turning on the respective switch (“Pull heart rate from Health”, “Save to Health”, “Watch readings”, “On Lock Screen”, “With heart rate”) and agreeing in the iOS dialog.
- iCloud sync: Art. 6(1)(b) GDPR (a feature you turned on).
- Support emails: Art. 6(1)(b) or (f) GDPR (legitimate interest in answering requests).
- Crash reports via Apple: Art. 6(1)(f) GDPR (fixing errors), only if you agreed in iOS.
Withdrawal: You can withdraw any consent at any time with effect for the future by turning off the switch in the app or revoking access in the Health app or iOS Settings. This does not affect the lawfulness of processing before the withdrawal. After withdrawal the app no longer reads or writes health data; you delete stored values in the app and workouts in the Health app.
14. Data Apple provides to the developer
If you turned on “Share with App Developers” in iOS, Apple passes crash reports and aggregated usage statistics to the developer. This data is pseudonymous and only used to fix errors. The developer also receives aggregated sales and download figures through App Store Connect, without reference to you. Apple handles the purchase itself as an independent controller.
15. Contact by email
If you write to support (Settings › About › Support), the developer processes your email address and the content of your message to answer your request. The prepared email only contains the app name and version in the subject, no data from the app. Emails are deleted once your request is resolved, at the latest after 12 months, unless there is a legal obligation to keep them. They are stored with the mailbox provider, who stores them on the developer's behalf.
16. Disclosure to third parties
The developer does not pass data to third parties. Recipients are only Apple within the system services described (maps, weather with place name, Apple Health, optional iCloud sync, push notifications for sync, crash reports with your consent) and the recipients you send files to yourself. Apple may transfer data to countries outside the EU, in particular the USA; Apple is certified under the EU-US Data Privacy Framework.
17. Deletion
- Single activity: delete it in the app.
- All data on this device: Settings › iCloud › “Erase App Data Here” (activities, photos, tags, goals, body data, settings).
- Data in iCloud: in the sync status view under Settings › iCloud.
- Apple Health: Workouts the app or the watch saved to Health stay there and are deleted in the Health app.
- Backups: You manage old device backups in iOS or on your computer.
18. Your rights
Your data lives on your devices or in your own iCloud account. You can view, change, export as GPX or TCX and delete it in the app at any time. Under the GDPR you also have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21) and to withdraw consent (Art. 7(3)). Write to support@onetwoapps.com; the developer replies within one month. Since the developer receives no data from the app, a request for access usually only concerns support emails.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (www.ldi.nrw.de).
19. Children
The app is not intended for children under 16. With your consent it reads the date of birth from Health only to calculate energy and heart rate zones.
20. Changes
If the app changes in a way that changes the processing, this policy will be updated. Earlier versions are archived.
Last updated: November 7, 2026