Draft: this page hasn't been reviewed yet. Highlighted parts still need to be confirmed.
Privacy
This page explains, in plain English, what AirDex collects, why, who it's shared with, and your rights. Last updated: [To confirm: date].
Who is collecting your data
The data controller (the person or business responsible for your data) is [To confirm: name, and company name and number if a limited company — decided with the accountant], at [To confirm: contact address].
Contact: [To confirm: support@ the final domain].
Asking for access
If you ask for access, we keep your message and email address only to reply to you.
Your account
You sign in with your email address and a password, or with a sign-in link we email you. Your account and its data are stored with Supabase, our database and storage provider. [To confirm: Supabase region]
Your photos
Your original files are never uploaded. They stay on your computer, and the app never moves, changes or deletes them.
To show your photos and identify aircraft, the app uploads smaller preview copies (a thumbnail and a screen-sized preview). All hidden photo data, including GPS location and camera details, is removed from these previews first. They're private to your account and shown only through short-lived links.
We also store details about each photo: its file name, size, dates, the camera model, the time it was taken, and a short “fingerprint” used to recognise the same file again (for example, to find your originals when you export). We never store GPS location from your photos.
Shoot names, places and the airfield or town you choose for a shoot are stored as you enter them. The map position stored is the airfield's or town's, never your photo's.
Identifying aircraft
To suggest what each aircraft is, a resized preview copy (with hidden data removed) is sent to an identification service run by Google (the Gemini API). The answer is saved to your account so the photo is never sent again. [To confirm: Google's terms for the paid service, checked: whether Google keeps or uses the images]
Your corrections are remembered for your account only, to improve your own future results. They aren't shared, and the app doesn't learn automatically from everyone's photos.
In your browser
We use only essential cookies, to keep you signed in. There are no advertising or tracking cookies, and no analytics.
If you import with “Choose folder” in Chrome or Edge, the browser remembers that folder so Export can find your originals again. That memory stays in your browser on your computer and is never sent to us.
Coming later
Payments will be handled by Stripe, which processes your card details; we never see or store them. [To confirm: Stripe's role (e.g. Managed Payments as the seller) once decided] A feedback form will store the messages you choose to send; it will never ask for photos.
Why we use your data (lawful bases)
To provide the service you signed up for (contract); replying to your messages and access requests (legitimate interests); and to keep the service secure and working (legitimate interests).
How long we keep it
[To confirm: how long data is kept after an account is closed, and how deletion works] [To confirm: how long contact messages and access requests are kept]
Where your data is processed
Our providers (Supabase and Google) may process data outside the UK. [To confirm: each provider's locations and the safeguards used]
Your rights
You can ask to see, correct, download or delete your data, or object to how it's used. Contact us using the details above. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Children
[To confirm: minimum age for accounts]
