FlyLuma Privacy Policy

1. General Information

FlyLuma ("the App") is a mobile application for drone, balloon, and glider pilots that provides weather forecasts and aviation conditions. This Privacy Policy describes what data is collected, how it is used, and what rights you have.

2. Data We Collect

2.1 Location Data

The App accesses your GPS location to display local weather forecasts and flight conditions. Location coordinates are sent only to external weather services (Open-Meteo, NOAA, DWD) to retrieve forecast data — they are not permanently stored on our servers and are not linked to your identity. You may revoke location permission at any time in your device system settings.

2.2 Account Data (FlyLuma PRO)

Users who purchase a FlyLuma PRO subscription may optionally link their account to an email address to synchronize saved locations across devices. Accounts are created via Supabase.

Account data stored includes:

• Email address (optional, only when creating an account)
• Unique user identifier (UUID)
• Favorite locations (geographic data)
• App settings (aircraft type, flight profile)

2.3 Purchase Data

FlyLuma PRO subscription purchases are handled by RevenueCat and the Google Play / App Store platforms. Transaction data (purchase identifiers, subscription status) is processed by these platforms in accordance with their own privacy policies. The App does not store payment card details.

2.4 Push Notifications

If you grant permission for push notifications (PRO feature), your device token is stored to deliver weather alerts. The token does not identify you personally — it is tied to the device. You may withdraw consent at any time in your device system settings.

2.5 Device Identifier

RevenueCat may use an anonymous device identifier to manage your subscription before you log in. This identifier is not linked to personal data.

3. How We Use Your Data

Collected data is used exclusively to:

• Provide weather forecasts and flight conditions for your selected location
• Synchronize saved locations and settings across devices (PRO)
• Verify subscription status
• Send weather alerts (PRO, with your consent)

Data is not sold or shared with third parties for advertising purposes.

4. Data Processors

5. Data Retention

• PRO account data is stored on Supabase servers in the EU (Frankfurt) for as long as the account exists.
• Upon account deletion, all data is permanently removed within 30 days.
• GPS location data is not permanently stored on our servers.
• Push tokens are deleted when notifications are disabled or the account is deleted.

6. Your Rights (GDPR)

If you are a resident of the European Economic Area, you have the following rights:

• Access — you may request a copy of your data
• Rectification — you may correct inaccurate data
• Erasure — you may delete your account directly in the App (Settings → Account → Delete account) or by sending a request to the email address below
• Portability — you may request an export of your data
• Objection — you may object to the processing of your data
• Complaint — you have the right to lodge a complaint with your local data protection authority (e.g., the Polish PUODO)

To exercise these rights, contact us at: kamilkwapich@gmail.com

7. Children

The App is not directed at children under the age of 13. We do not knowingly collect data from children under this age.

8. Data Security

All connections are encrypted (TLS/SSL). Account data stored in Supabase is protected in accordance with SOC 2 standards. Passwords (where used) are stored only in encrypted form.

9. Changes to This Policy

We will notify you of significant changes by updating the date above and, where possible, via an in-app notification.

10. Contact