Privacy Policy

1. Introduction

Welcome to iPlane ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application iPlane (the "App").

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

2. Scope

This Privacy Policy applies to:

• The iPlane mobile app (iOS/macOS and, when available, Android)
• Our backend services used to deliver flight data, AI responses, notifications, and subscription entitlements
• This website (including the Support page and contact form)

Third-party services (such as the Apple App Store or Google Play Store) have their own privacy policies. We encourage you to review them.

3. Information We Collect

3.1 Information You Provide

We may collect information that you voluntarily provide when using our App:

• Flight Subscriptions: When you subscribe to flight notifications, we store an anonymous device identifier and the flight numbers you choose to track.
• AI Assistant Queries: Questions you ask the AI assistant are processed to provide responses. Depending on the feature, we may retain limited conversation context for a short period to operate the service, prevent abuse, and improve reliability.
• Support Requests: If you contact our support team, we may collect your email address and the content of your communication.

3.2 Subscription and Purchase Information

If you purchase a subscription (e.g., Pro or Business), the purchase is processed by your platform provider (such as Apple or Google). We do not receive your full payment details. To provide and enforce your subscription entitlements, we may process:

• Product information: product identifier (SKU), subscription tier, and platform (App Store / Play Store)
• Transaction metadata: transaction identifiers, original transaction identifiers, purchase and expiry timestamps, and renewal status
• Receipt/verification data: a receipt, signed transaction token, or other proof-of-purchase used for validation
• Entitlement status: whether Premium features are active on your device

We use this information to validate purchases, prevent fraud, resolve billing/support issues, and synchronize access across devices (where supported by the platform and our implementation).

3.3 Automatically Collected Information

When you use our App, we may automatically collect:

• Device Information: Device type, operating system version, and unique device identifiers for push notifications.
• Usage Data: Anonymous analytics about feature usage to improve the App.
• Crash Reports: Technical information about app crashes to help us fix bugs.

When you use our website, our infrastructure may also collect standard web request logs (for example: IP address, user agent, requested URL, and timestamps) for security and operational purposes.

3.4 Information We Do NOT Collect

We want to be clear about what we do not collect:

• ❌ Your name, email, or personal contact information (unless you contact support)
• ❌ Your location data or GPS coordinates
• ❌ Your travel itinerary or booking information
• ❌ Contacts, photos, or other personal data from your device
• ❌ Payment or financial information (in-app purchases are handled by Apple/Google)

4. How We Use Your Information

We use the information we collect for the following purposes:

• Provide core functionality: flight boards, live updates, gates/terminal details, aircraft info, and notifications
• Provide Premium features: validate subscriptions, apply entitlements, and provide subscription support
• Operate the AI Assistant: generate responses to your queries and maintain short-lived context where needed
• Improve reliability: analytics, performance monitoring, and crash diagnostics
• Security and fraud prevention: detect abuse, protect infrastructure, and investigate suspicious activity
• Customer support: respond to support requests and troubleshoot issues

5. Legal Bases (Where Applicable)

Depending on your location, we process information under one or more of the following legal bases:

• Performance of a contract (to provide the App, Premium features, and support)
• Legitimate interests (to secure, maintain, and improve the service)
• Consent (for example, enabling push notifications where your device prompts you)
• Compliance with legal obligations (where required)

6. Data Storage and Security

6.1 Where We Store Data

Your data is processed and stored on secure Amazon Web Services (AWS) infrastructure located in:

• Frankfurt, Germany (eu-central-1) - Primary data processing
• Hong Kong (ap-east-1) - Low-latency API services for Asian users

6.2 Data Retention

• Push Notification Tokens: Stored until you uninstall the App or revoke notification permissions.
• Flight Subscriptions: Automatically deleted 24 hours after the subscribed flight's scheduled departure.
• AI Conversation History: Temporary session data, deleted after 24 hours (or sooner, depending on the feature).
• Analytics: Aggregated, anonymized data retained for up to 90 days.
• Subscription Records: Retained as needed to maintain entitlements, handle renewals, prevent fraud, and meet legal/accounting obligations. Retention periods may vary by platform and applicable law.
• Support Communications: Retained for as long as necessary to resolve your request and maintain support history.

6.3 Security Measures

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) for all API communications
• Encryption at rest for stored data
• Regular security audits and vulnerability assessments
• Access controls and authentication for our backend systems

7. How We Share Information

We do not sell your personal information. We may share limited information in the following situations:

• Service providers: infrastructure and delivery providers (e.g., AWS) that host or process data on our behalf
• Platform providers: Apple and Google for in-app purchase processing and purchase validation
• Operational integrations: push notification providers (APNs, FCM, WebPush) to deliver notifications
• Legal and safety: to comply with law, enforce our terms, or protect rights, safety, and security

8. Third-Party Services

Our App may use the following third-party services:

9. Your Rights

Depending on your location, you may have the following rights regarding your data:

• Right to Access: Request a copy of the data we hold about you.
• Right to Deletion: Request deletion of your data.
• Right to Correction: Request correction of inaccurate data.
• Right to Portability: Request your data in a machine-readable format.
• Right to Object: Object to certain types of data processing.

To exercise any of these rights, please contact us at privacy@atsoftware.link.

10. Children's Privacy

Our App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence (for example, where our cloud infrastructure operates). These countries may have different data protection laws. When we transfer data internationally, we take steps designed to maintain appropriate protection for your information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top
• Sending an in-app notification for significant changes

We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: