Privacy Policy

1) Scope

This Privacy Policy explains how we collect, use, disclose, retain, and protect information about users of our websites, apps, marketplace, community features, trainer tools, event listings, and related services (the "Services"). If a feature displays a more specific privacy notice, that notice controls for that feature.

2) Information We Collect

• Account and profile information: name, email, username, avatar, bio, home location, flying experience, gear details, trainer/school information, verification requests, and preferences.
• Content and communications: posts, comments, photos, videos, ratings, messages, group activity, event submissions, marketplace listings, support requests, reports, and appeals.
• AI assistant interactions: prompts, assistant responses, gear photos you choose to upload, response identifiers, ratings, optional positive or negative written feedback, and short prompt and answer excerpts included with that feedback, plus provider token/cost usage and a pseudonymous HMAC of your IP address used to enforce AI limits. Raw IP addresses are not stored in the AI quota ledger. Gear photos are not added to our retained parts catalog automatically.
• Location information: coarse location inferred from IP, profile home location, event or spot submissions, and precise location only when you choose to provide it or enable device permissions for a feature.
• Device and usage data: IP address, device type, browser, operating system, app version, pages or screens viewed, referrers, timestamps, diagnostics, security logs, crash logs, and product analytics.
• Marketplace, seller, and trainer data: listing details, transaction-related messages, verification documents, insurance or credential information submitted for review, and fraud or safety signals.
• Future payments: WingVoyagers does not currently use Stripe for marketplace checkout. If payment features are introduced, payment processors may collect payment, identity, tax, fraud, and payout information under their own terms and privacy notices. We would receive limited transaction, status, and account information needed to operate the feature.
• Cookies and similar technologies: essential cookies for sign-in, security, preferences, and guest mode, plus analytics or diagnostic technologies where enabled or permitted.
• Guest preview information: guest mode may store a local device flag and may use approximate location, public launch context, or limited interaction data to operate preview features. On iOS, guest current-location forecast previews are rounded before the app stores the selected point or sends forecast requests.
• Third-party sources: map, weather, analytics, anti-fraud, email, app store, auth, and content delivery providers, and publicly available information where relevant to safety, verification, or abuse prevention.

3) How We Use Information

• Provide, operate, personalize, and improve the Services.
• Authenticate users, maintain accounts, and support onboarding.
• Display profiles, posts, spots, comments, events, groups, trainer pages, and marketplace listings according to user settings and feature behavior.
• Deliver messages, alerts, emails, push notifications, and service notices.
• Review reports, moderate content, investigate fraud or abuse, enforce Terms, and protect users and the Services.
• Review trainer, school, seller, reseller, or event-host verification requests.
• Analyze usage, debug issues, measure performance, and develop new features.
• Provide AI-assisted WingVoyagers search and maintenance identification. Optional positive or negative written feedback may be processed by OpenAI with short prompt and answer excerpts to generate a generalized learning note. Eligible non-sensitive, non-injection notes may guide the approach of future Ask WingVoyagers and WingVoyagers Maintenance answers. Raw feedback text is never directly inserted into runtime prompts. Learning notes are not facts and cannot modify the system, safety, grounding, privacy, or tool rules for either agent; those rules remain fixed. This process is not model-weight retraining.
• Comply with legal obligations, resolve disputes, and respond to lawful requests.
• No sale/share for ads: we do not sell personal information or share it for cross-context behavioral advertising at this time.

4) Legal Bases for EEA/UK Users

When applicable, we rely on the following legal bases:

• Contract: to provide the Services you request.
• Legitimate interests: to secure, improve, analyze, and protect the Services and community.
• Consent: where required, such as certain marketing emails, precise location access, non-essential cookies, or other opt-in features.
• Legal obligation: to comply with law, tax, safety, fraud, consumer, or regulatory obligations.

Where we rely on consent, you may withdraw it at any time without affecting processing that happened before withdrawal.

5) Disclosure of Information

We disclose information to:

• Service providers and processors for hosting, auth, storage, analytics, email, notifications, maps, weather, content delivery, moderation, security, and support.
• AI service providers, including OpenAI, when you use an AI assistant feature or submit optional written AI feedback; prompts, relevant conversation context, attached gear photos, feedback comments, and short prompt and answer excerpts may be sent for processing.
• Other users when you post content, send messages, join groups, RSVP to events, submit listings, interact with trainers, or use public/community features.
• Marketplace buyers, sellers, payment processors, shipping providers, or fraud tools where a marketplace feature requires it.
• Trainer, school, event, or verification reviewers where needed to operate those features.
• Law enforcement, regulators, courts, emergency responders, or affected parties where required by law or reasonably necessary to protect rights, safety, users, or the Services.
• Successors in a merger, acquisition, financing, reorganization, bankruptcy, or asset transfer.

We do not permit processors to use personal information for their own independent purposes except where their own terms apply to a separate service you choose to use.

6) Retention

We retain personal information as long as needed for the purposes above and according to the context of the data. Account records and user content are generally kept while your account is active or until you delete or request deletion, subject to legal, backup, safety, moderation, fraud, tax, audit, and dispute-resolution needs. Security, analytics, and diagnostic logs are generally kept for a limited period unless needed longer for safety, fraud, legal, or operational reasons. Anonymized or aggregated data may be kept longer.

WingVoyagers requests that supported AI responses are not stored by the model provider for product history. AI providers may still retain limited abuse-monitoring or security logs according to their terms and the data controls configured for our account. AI ratings, optional positive or negative written feedback, and generated generalized learning notes may be retained for authorized review and product evaluation.

7) Your Privacy Rights

Depending on where you live, you may have rights to access, know, correct, delete, restrict, object to processing, withdraw consent, port data, appeal a decision, or avoid discrimination for exercising privacy rights. California residents may have rights under the CCPA/CPRA. EEA and UK users may also lodge a complaint with their local supervisory authority.

To exercise rights, email [email protected] from your account email when possible, or use the account deletion tools in Settings or at /account/delete. We may need to verify your identity or authority before completing a request. Some information may be retained where permitted or required for security, fraud prevention, legal compliance, backups, disputes, or other legitimate reasons.

8) Cookies & Tracking

We use essential cookies and similar technologies for sign-in, security, session management, guest mode, preferences, and service operation. We may use analytics or diagnostic technologies to understand usage and improve the Services. You can manage browser-level cookie controls and any privacy controls we provide. If we later use advertising cookies or tracking that requires consent, we will request consent where required and update this Policy. We honor Global Privacy Control signals when applicable.

9) Children and Minors

The Services are intended for adults 18 and older. We do not knowingly collect personal information from minors under 18. If you believe a minor under 18 has provided information, contact us so we can review and delete it where required.

10) Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure. You are responsible for protecting your credentials and devices.

11) International Transfers

If you access the Services from outside the United States, your information may be processed in the United States and other countries that may not provide the same level of data protection as your home jurisdiction. We use appropriate safeguards where required.

12) Changes

We may update this Policy from time to time. Material changes will be notified where required, such as through the Services or by email.

13) Contact

Questions or requests: [email protected]