Privacy Policy

Account and authentication information. When you create or manage an Account, we may collect your name, email address, account identifier, profile information, and authentication information. Authentication is handled by Clerk. If you choose an authentication method or connected account offered through Clerk, we receive the information needed to create and secure your Account in accordance with your settings with that provider. We do not receive your full password from Clerk.

Your Content. We collect information you choose to create, enter, upload, or synchronize through the Services, such as aircraft profile and performance data, tail numbers, flight plans and routes, pilot logbook entries and import files, documents or files selected through your device's file picker, search queries, and other content associated with your Account. We use this information to provide the features you request, synchronize data across your devices where applicable, and support the Services. Some content and preferences remain only on your device unless you choose to upload or synchronize them; other features send the information to GeoSpatios for processing or storage.

AI-assisted features. If you choose to use an AI-assisted feature, we may process the prompts, instructions, files, images, aircraft or flight information, and other context you submit, together with the generated response. We may disclose that information to an AI service provider as needed to generate the requested output. AI-assisted outputs may be inaccurate and should not replace official aviation data, approved procedures, or pilot judgment.

Payment and subscription information. Web subscriptions are processed by Stripe. In-app subscriptions may be processed by Apple through the App Store and managed through RevenueCat. We do not receive or store your full payment-card number or Apple payment credentials. We receive and store subscription status, plan, transaction or receipt information, and customer and subscription identifiers needed to provide and manage access to the Services.

Communications, support, and marketing. If you contact us, request support, respond to a survey, or otherwise communicate with us, we may collect your name, email address, and the information you include in your message. If you subscribe or otherwise opt in to marketing communications, we use your contact information to send information about products and services we offer. You may opt out of marketing emails using the unsubscribe instructions in those messages. We may still send non-promotional communications about your Account, transactions, security, or the Services.

Browser, device, and network information. When you interact with the Services, we and our service providers may automatically collect your IP address, approximate location derived from your IP address, browser and device type, operating system, app version and build number, device identifiers, device name and platform, pages or screens viewed, feature usage, interactions, crash reports, performance data, and other diagnostic information. We use this information to operate, maintain, secure, troubleshoot, analyze, and improve the Services and to enforce device limits.

Search, map-area, and request information. When you search, view aviation information, request nearby airports or weather, load map or traffic data, or plan a route, the Services may transmit the search term, airport or route identifiers, geographic coordinates, selected map area or viewport, and related request information to GeoSpatios and providers supporting the requested feature.

Precise location and flight-related sensor data. If you grant location permission, the app processes precise or reduced-accuracy location and related data such as altitude, speed, course, heading, accuracy, and timestamp while you use the app to show your position, power flight instruments, and provide location-relevant map, weather, traffic, search, and navigation features. Depending on the feature, location or map-area information may be transmitted to us or to a provider supporting that feature. Mapbox may also receive de-identified location and map-usage telemetry through its mobile mapping SDK. You can control location access in your device settings, but disabling it may prevent location-based features from working.

Information stored on your device. The app stores information locally to provide offline and continuity features. This may include authentication session data in the device keychain, preferences, recent searches and selections, flight-plan drafts, cached aircraft, flight, airport, and logbook records, and downloaded maps, charts, and documents. Removing the app generally removes app-local data, but does not by itself delete information stored with your Account or cancel a subscription.

Cookies and similar technologies. The Website and account portal, and providers that support them, may use cookies, software development kits, local storage, pixels, and similar technologies to authenticate you, remember preferences, prevent fraud, process subscriptions, understand use of the Services, and maintain security. You can configure your browser or device to limit some of these technologies, although doing so may affect functionality.

We disclose information to personnel, contractors, and providers that perform services on our behalf or help operate the Services. These may include Clerk (authentication), Stripe (web payments), Apple and RevenueCat (in-app purchases and subscription management), PostHog (product analytics), Sentry (error, crash, and performance monitoring), Mapbox (mapping, search, and map telemetry), XWeather, Open-Meteo, and other weather and aviation-data providers, AI service providers when you invoke an AI-assisted feature, and cloud hosting, database, storage, communications, and infrastructure providers. They receive information as needed to perform their functions and handle it under their agreements with us and their applicable privacy terms.

If you choose to connect or use a third-party application or integration with the Services, we may allow that provider to access personal information and Your Content as needed for the integration to work. The third party’s handling of that information is governed by your agreement with it and its privacy policy. We are not responsible for a third party’s independent use of information you authorize it to receive.

We use PostHog to understand feature usage and improve the Services. Where enabled, PostHog may record a masked representation of app interactions. The current web session-replay configuration masks all form and authentication input values and explicitly marked sensitive regions. It does not capture application logs, request or response bodies, or request or response headers, and query strings are removed from captured URLs. We use Sentry to collect crash, error, performance-profile, breadcrumb, and related diagnostic data. These services may receive device and usage identifiers and, when you are signed in, an Account identifier; PostHog may also receive your email address to associate activity with your Account. Sentry is configured not to send default personally identifiable information, although we provide it with your Account identifier when you are signed in so we can investigate account-specific failures.

We may de-identify or aggregate information so that it no longer reasonably identifies you and use or disclose that information for analytics, research, security, product development, and other lawful purposes. We will not attempt to re-identify information that we maintain in de-identified form except as permitted by law to test our de-identification processes.

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

We may access, preserve, and disclose information when we reasonably believe it is necessary to comply with Applicable Law, legal process, or governmental requests; enforce our Terms of Service or other agreements; detect, prevent, or address fraud, security, or technical issues; or protect the rights, property, or safety of GeoSpatios, our users, or others.

We do not sell personal information or share it for cross-context behavioral advertising. We also do not disclose personal information to third parties for their own direct-marketing purposes. California residents may contact us once per calendar year to request information about any disclosures covered by California’s “Shine the Light” law. Include “California Shine the Light Request” in the subject line.

We and our providers may process information in countries other than the country where you live, including the United States. Where required, we use appropriate safeguards for international transfers.

You may update certain Account information and permissions through the Services or your device settings. Depending on where you live, you may have rights to:

• request access to or a copy of personal information we maintain about you;
• request correction, deletion, or portability of your personal information;
• object to or request restriction of certain processing;
• withdraw consent where processing is based on consent; and
• appeal a decision or complain to a data-protection authority.

These rights may be limited or subject to exceptions under Applicable Law. We may need to verify your identity before completing a request. You may use an authorized agent where permitted by law. We will not discriminate against you for exercising an applicable privacy right.

You may initiate or request deletion of your Account and associated personal information from the Account page or by emailing support@geospatios.com. We will delete or de-identify information associated with your Account as required by Applicable Law, subject to permitted retention for legal obligations, fraud prevention, security, dispute resolution, and enforcement of our agreements.

Deleting your Account does not automatically cancel an auto-renewing subscription purchased through Apple. You must manage or cancel that subscription through your App Store subscription settings. Web subscriptions can be managed from the Billing page in the account portal.

We retain personal information for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Policy, comply with legal, tax, and accounting obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests. Retention periods vary by the type of information and why we hold it. Backup copies may remain for a reasonable period as part of disaster recovery and business-continuity processes.