Privacy Policy

Contrail ("the App") is developed by Jacob Lassen ("we," "us," or "our"). We are committed to protecting your privacy. This Privacy Policy explains what data the App collects, how it is used, and your rights regarding that data.

Our Privacy Principle

Contrail requires no account and displays no ads. The App processes data to provide flight tracking, optional notifications, cloud sync and purchases. Subscription management and limited product measurements are described below.

Data We Collect

Location Data

Location permission is optional. It can centre the map and help configure nearby features. Depending on the features you use:

• The visible map area is sent with aircraft-data requests
• A place chosen for Watch the Sky is saved on your device and its coordinates are used to request nearby aircraft, including during widget refreshes
• Nearby emergency or watchlist alerts send an area centre and radius to our backend and store them with the notification subscription
• You can browse the map and choose a widget place manually without granting location access

Flight Searches and Map Requests

When you view the map or search for flights, the App sends requests to our backend API containing:

• The visible map region (bounding box coordinates)
• Zoom level
• Search terms (airline codes, flight numbers, registrations)
• An app-version header (e.g. X-App-Version: 1.5.1) so we can keep older builds working

These requests fetch flight data. Some Pro requests also include an anonymous RevenueCat app user ID to check subscription access. Our application code does not store IP addresses, but hosting and data providers receive connection metadata when serving requests.

My Flights and My Passport

Flights you save to My Flights and trips you log in My Passport are:

• Stored locally on your device
• On iOS, Passport logbook data and a CSV copy also sync to your iCloud Documents container when iCloud is available for Contrail
• Saved flight identifiers are used to fetch status updates and, when enabled, register flight alerts or Live Activities
• Device backups, exported files and iCloud copies are separate from the local app data; uninstalling does not necessarily remove those copies

Calendar and Exports

If you grant calendar access and enable calendar sync, Contrail writes saved journeys to your selected calendar. That calendar may sync through its provider. CSV imports are read to create logbook entries; exported files and shared flight cards are saved or sent to the destinations you choose.

Push Notifications (Optional)

Flight alerts and aircraft watchlists require Pro; emergency-squawk notifications are free. If you enable these features, the App registers with our backend and may store the following on Cloudflare KV:

• Your device's Apple Push Notification (APNs) or Firebase Cloud Messaging (FCM) token
• A sandbox flag (whether the token is for a development or production environment)
• The flight numbers, tail registrations, or notable-aircraft categories you want alerts for
• Your notification preferences, selected language when supported, and nearby-alert coordinates and radius
• An anonymous RevenueCat app user ID for subscription checks, plus registration timestamps
• For iOS Live Activities, an activity push token and the flight information needed to update it

Flight notification registrations expire after 96 hours unless refreshed. Watchlist records use a 90-day expiry refreshed by registration. Emergency-alert subscriptions remain until removed; they do not share the 96-hour expiry. Turning off notifications in device settings or uninstalling the App does not guarantee immediate removal of backend records. Use the in-app controls to remove watched aircraft or turn emergency alerts off while the App can connect, or contact us about stored data.

Product Measurements

Contrail reports arrival-estimate accuracy using the route, aircraft type, prediction error and distance from arrival, without a passenger name or device identifier. These measurements help improve arrival estimates.

Third-Party Services

Contrail uses backend data providers and services contacted directly by the App. The principal services and their roles are described below.

adsb.lol

Community-driven ADS-B data aggregation network. Our backend and, for some features, the App or widget query aircraft positions. Requests can contain an aircraft identifier or a geographic area; direct requests also expose connection metadata to the provider. adsb.lol

FlightAware (AeroAPI)

Used to enrich flight data with airline names, airport details, schedules, gate assignments, and arrival/departure status. Requests contain only flight identifiers (registrations, flight numbers, ICAO24 hex codes). No user data is shared. FlightAware Privacy Policy

AeroDataBox (via RapidAPI)

Used as a fallback for flight enrichment and aircraft photos when FlightAware does not have coverage. Requests contain only flight identifiers. aerodatabox.com

Avinor & MET.no

Norwegian government services. Avinor provides FIDS (Flight Information Display System) data for Norwegian airports; MET.no provides Nordic SIGMET aviation weather. Neither receives any user-specific data. Avinor · MET.no

NOAA SWPC & NOAA AWC

U.S. National Oceanic and Atmospheric Administration. SWPC supplies aurora forecasts (Kp index, OVATION model); AWC supplies global SIGMET aviation weather. No user data is shared. NOAA SWPC · NOAA AWC

Planespotters.net

Aircraft photographs are hot-linked from Planespotters when displaying flight details. Your device requests the image directly from Planespotters at view time. Planespotters Privacy Policy

RevenueCat

Used to manage Contrail Pro purchases, subscription access and purchase analytics. RevenueCat processes purchase history under an anonymous app user ID. Contrail does not ask you to provide a name or email for this service. RevenueCat Privacy Policy

Apple iCloud and Maps; Open-Meteo

On iOS, iCloud stores the Passport logbook when available for Contrail, and Apple Maps provides map content. Airport weather requests go directly to Open-Meteo with the airport coordinates. Direct service requests include the connection metadata needed to return a response. Apple Privacy · Open-Meteo Terms & Privacy

Apple APNs & Firebase Cloud Messaging (FCM)

Used to deliver push notifications when you've enabled them. Apple and Google receive your push token in order to route notifications to your device. Apple Privacy · Firebase Privacy

Cloudflare Workers

Our backend API runs on Cloudflare Workers. Cloudflare may process connection metadata (IP addresses) as part of standard CDN operations, subject to Cloudflare's Privacy Policy. We do not log or store IP addresses in our application code.

What We Do NOT Collect

• An account profile with your name, email or phone number; if you contact support, we receive the information you send
• Advertising identifiers (IDFA / AAID) for ad targeting
• Your address book or photo library
• Your browsing history outside Contrail

Data Storage and Security

Saved flights, logbook entries, recent searches and preferences have local device storage. Depending on your platform and settings, copies can also be present in device backups, iCloud, calendars or exports. Backend notification records and subscription-provider records are stored separately as described above.

Flight data is cached to reduce repeated data-provider requests. Notification and subscription-access records may be keyed by a push token or anonymous app user ID.

Children's Privacy

Contrail does not require an account or ask for a child's name or contact details. Optional features still process the data described in this policy. Contact us if you have concerns about information submitted by a child.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the App after changes constitutes acceptance of the updated policy.

Your Rights

You can contact us about access, correction or deletion of data handled by Contrail. You can also:

• Revoke location access in your device's Settings at any time
• Manage alert subscriptions in the App and disable notification delivery in your device settings
• Delete your saved flights, passport entries, or watchlists from within the App
• Manage iCloud, calendar and device-backup copies through the relevant service settings
• Cancel a Pro subscription through the App Store or Google Play account used for purchase
• Uninstall the App to remove its local data; cloud, backup, export and backend copies may remain

Contact

If you have questions about this Privacy Policy, contact us at:

lassen90@gmail.com