Airtime Privacy Policy
Effective date: 3 October 2026
1. Summary
- Airtime works without an account. Without an account, your flights, settings and photo references are stored only on your phone.
- If you create an account, your flights (including the GPS track) are synced to our database, which is hosted in the EU.
- Your photos are never uploaded. The app stores only a reference on your phone to photos that stay in your photo library.
- Live sharing is off unless you turn it on for a recording. Anyone who has the link can see your position while the session runs.
- Reviews you write about a launch site are visible to other users, together with your first name and the number of flights you have recorded at that site.
- There is no advertising, no advertising identifier, no third-party analytics SDK, and we do not sell data.
2. Who is responsible (controller)
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:
Trade Like A Pro SRL Str. Dimitrie Cantemir 3, Focșani, Romania Email: mirceacnu@gmail.com
We have not appointed a data protection officer because we are not legally required to. Privacy requests go to the email address above.
3. What data we process, why, and on what legal basis
"On device" means the data stays on your phone and is not sent to us. "Cloud" means it is stored in our database at Supabase.
| Data category | What exactly | Where it is processed | Purpose | Legal basis (GDPR) |
|---|---|---|---|---|
| Account (optional) | Sign in with Apple identifier, or email address where email sign-in is offered; display name | Cloud | Create and secure your account, sign you in, sync your data across devices | Art. 6(1)(b), performance of the contract |
| Flights without an account | GPS track (precise location with timestamps and altitude), statistics, title, notes | On device only | Record and show your flights in the logbook | Not sent to us. Access to location on the device is necessary for the recording you start. |
| Flights with an account | GPS track (precise location with timestamps and altitude), statistics, title, notes | Cloud | Sync and back up your logbook | Art. 6(1)(b), performance of the contract |
| Location during recording | Precise location, including in the background while the recorder is armed if you allow it | On device; cloud only as part of a synced flight or a live session | Detect take-off and landing, save the flight track | Art. 6(1)(b), together with the operating-system location permission you grant and can withdraw at any time |
| Approximate area for "Near me" | The approximate area around you, as a map area | Sent from your phone to our site database (Supabase), or to Paragliding Earth if ours cannot be reached | Find launch sites near you | Art. 6(1)(b), a search you request |
| Photos | Photos in your library taken during a flight, and photos you pick | On device only; only a local reference is stored; photos are not uploaded | Show photos in a Flight Story | Not sent to us. The operating-system photo permission you grant |
| Motion and barometer sensor | Air-pressure readings | On device only; not stored separately, not uploaded | Variometer and its audio beeps | Not sent to us |
| Site reports | "I flew" or "went, didn't fly" with a reason, for a launch site | Cloud | Improve the conditions summary and show how a site is being used | Art. 6(1)(b) for submitting the report you choose to send; Art. 6(1)(f), our legitimate interest in checking the summaries against what pilots found |
| Site reviews (public) | Review text, star rating, first name, number of your flights at that site | Cloud; visible to other users | Publish your review. Reviews are accepted only from accounts with a recorded flight from that launch, so we check that against your flights | Art. 6(1)(b), publishing the review you submit; Art. 6(1)(f), our legitimate interest in keeping reviews genuine |
| Live sharing (optional) | Current position, altitude, speed and status (armed, flying, landed), stored under a random link token | Cloud; visible to anyone who has the link | Let the people you choose follow your flight | Art. 6(1)(a), your consent, given by turning sharing on for that recording. You can withdraw it at any time by stopping sharing or disarming the recorder |
| Purchases | Anonymous app user ID, or your account ID if signed in; purchase history (product, dates, status) | Apple and RevenueCat | Unlock paid features, manage subscriptions, restore purchases | Art. 6(1)(b), performance of the contract; Art. 6(1)(c) where we must keep records for tax or accounting |
| Notifications | Evening-before weather window alert, "landed safe", trial-ending reminder | On device only. These are local notifications; no push token is sent to a server | Remind and inform you | Not sent to us. The operating-system notification permission you grant |
| Requests to third-party data services | Your phone's IP address and the query (see section 5) | Sent from your phone directly to the service | Load weather, sites, wind stations and maps | Art. 6(1)(b) and Art. 6(1)(f), our legitimate interest in obtaining this data from specialised sources |
| Messages to us | Your email address and what you write | Our mailbox | Answer support and privacy requests | Art. 6(1)(b) or Art. 6(1)(f) |
We do not make automated decisions that have legal or similarly significant effects on you. The comparison of a forecast with your wind and gust limits is calculated on your phone from limits you set yourself.
You are not obliged to provide any of this data. Without an account the app still works; without location permission the recorder does not work.
4. Recipients: service providers acting for us (processors)
| Provider | Role | What it receives |
|---|---|---|
| Supabase | Database and authentication provider. Our project is hosted in the EU. | Account data, synced flights, site reports, reviews, live sessions |
| RevenueCat | Subscription management | Anonymous app user ID or account ID, purchase history |
| Apple (App Store) | Payment and distribution. Apple sells the purchase to you and handles payment. | Purchase and payment data under your Apple ID. We never see your card details. |
Supabase (Supabase, Inc.) and RevenueCat (RevenueCat, Inc.) process this data on our behalf and on our instructions, under their data processing terms.
Apple acts mostly as an independent controller for App Store purchases, Sign in with Apple and Apple Maps, under its own privacy policy (apple.com/legal/privacy).
5. Third-party data services called directly from your phone
To show weather, sites, wind and maps, the app sends requests from your phone directly to the services below. Each of them technically receives your phone's IP address and the query. We do not send them your name, email address or account ID.
| Service | What the query contains | What it does not contain |
|---|---|---|
| Open-Meteo (weather forecasts and place-name search) | Coordinates of the launch sites you are viewing; the text you type into the place search | Your own location |
| Our site database on Supabase, with Paragliding Earth as the fallback | A country code or a map bounding box. "Near me" search sends the approximate area around you. | Your exact position |
| OpenWindMap / Pioupiou (live wind stations) | A request for the public list of stations | Any location or search text |
| Windy.com (webcams near a launch site) | Coordinates of the launch site you are viewing, sent by our server; when you look at or play a webcam, your device loads the picture and player directly from Windy, which sees your IP address and may set its own cookies inside the player | Your own location, your account |
| Apple Maps (map display through the operating system) | The map area being displayed | — |
These services decide for themselves how they handle request data and are responsible for it under their own privacy policies: open-meteo.com/en/terms, paraglidingearth.com, openwindmap.org, windy.com/privacy and apple.com/legal/privacy.
6. International transfers
Our database at Supabase is hosted in the EU.
RevenueCat and Apple may process personal data in the United States. Where they do, the transfer is covered by the EU-US Data Privacy Framework, to the extent the recipient is certified under it, or by the EU Standard Contractual Clauses (SCCs).
Supabase, Inc. is a company based in the United States. Our data is stored in its Frankfurt (Germany) region. Where Supabase or its sub-processors access data from outside the EU, for example to provide support, the same safeguards apply.
The data services in section 5 are operated from Europe as far as we know (Open-Meteo in Switzerland, OpenWindMap / Pioupiou and Paragliding Earth in France, Windy in the Czech Republic). We do not control where each of them hosts its servers; their own policies apply.
You can ask us for a copy of the safeguards we rely on, using the contact details in section 2.
7. How long we keep data
| Data | Retention |
|---|---|
| Account data, synced flights, site reports, reviews | Until you delete them or delete your account |
| A single flight | Until you delete that flight |
| Live sessions | Deleted 24 hours after the session ends. A session ends at landing or when you disarm the recorder. |
| Data stored only on your phone | Until you delete it in the app or remove the app |
| Purchase records at Apple and RevenueCat | As long as each provider keeps them under its own policy; accounting records we must keep by law are kept for the statutory period |
| Messages to us | Up to 2 years after the last message, unless we need them longer to handle a claim |
Deleting your account from inside the app (Profile > Account > Delete account) deletes the account and all cloud data, including your synced flights, reviews, site reports and live sessions. Copies in the database provider's backups are overwritten on its backup cycle, normally within 30 days.
8. Your rights
Under the GDPR you have the right to:
- Access (Art. 15): ask whether we process data about you and receive a copy.
- Rectification (Art. 16): have inaccurate data corrected. You can change your display name, flight titles and notes in the app.
- Erasure (Art. 17): delete a single flight in the app, or delete your account and all cloud data under Profile > Account > Delete account.
- Restriction of processing (Art. 18).
- Data portability (Art. 20): export your flights as IGC files from the app. For other data, write to us.
- Objection (Art. 21): object at any time, on grounds relating to your particular situation, to processing that we base on legitimate interests (Art. 6(1)(f)).
- Withdraw consent (Art. 7(3)) at any time, with effect for the future. For live sharing, stop sharing or disarm the recorder. Permissions for location, photos, motion and notifications can be withdrawn in the iOS Settings.
- Complain to a supervisory authority (Art. 77), in particular in the EU member state where you live or work, or where you believe an infringement took place. The authority responsible for us is the Romanian data protection authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, Romania, dataprotection.ro.
To exercise a right, use the functions in the app or write to mirceacnu@gmail.com. We answer within one month. Signing out does not delete your data.
9. Security
Data is transferred between the app and our database over encrypted connections. A live-sharing link contains a random token; whoever has the link can view the session, so share it only with people you trust. In the database, access rules limit each account to its own flights, reports and sessions.
10. Children
Airtime is not intended for anyone under 16. You must be at least 16 to use the app. We do not knowingly process data of anyone under 16. If you believe a person under 16 has given us data, write to mirceacnu@gmail.com and we will delete it.
11. Changes to this policy
We may update this policy when the app or the law changes. The current version is always available in the app and at the link given in the App Store. If a change is significant, we will tell you in the app before it takes effect. The effective date is shown at the top.
12. Contact
Trade Like A Pro SRL Str. Dimitrie Cantemir 3, Focșani, Romania Email: mirceacnu@gmail.com