Privacy Policy

1. Scope and responsibility

This Privacy Policy explains how Norvane Systems Ltd., a British Columbia corporation based in Vancouver, Canada ("Norvane," "we," "us"), handles personal information in connection with the AviaGPS iPhone app, aviagps.com, and support communications. Norvane is responsible for information under its control. Our Privacy Officer can be contacted as described below.

This is a notice of our practices, not permission for unrestricted data use. We obtain consent where required and otherwise process information only as permitted by applicable law. The Terms of Use govern use of AviaGPS; neither document removes privacy rights or obligations that cannot lawfully be excluded.

2. Location and local-network information

With your permission, the app reads the location supplied by iOS, including precise coordinates, altitude, speed, course, accuracy estimates, and timestamps. It uses the current location in memory to display status and prepare position messages for ForeFlight. The app does not create a flight-history database or upload the location feed to Norvane, RevenueCat, or a cloud relay.

While sharing is active, the app sends position and related telemetry directly to the selected ForeFlight receiver over your local network. It processes receiver names, local IP addresses, ports, and discovery messages to find and connect to that receiver. If it discovers one receiver, it can select it automatically; when several are found, you choose one.

The local connection does not encrypt position messages or authenticate the receiver. Other parties able to access the network may intercept the traffic or impersonate a receiver. Use a trusted, password-protected network and verify the receiving device. We cannot control what a receiving app or network operator records, retains, or discloses; their practices and notices apply.

An active sharing session can continue to access and transmit location while the screen is locked or another app is open, subject to iOS behavior. Tap Stop Sharing to stop the current session. Sharing stays paused when you switch apps and return, until you tap Resume Sharing. If AviaGPS is fully closed and launched again, sharing can start automatically when its requirements are met. To prevent further location access, revoke AviaGPS's Location Services permission in iOS Settings or remove the app. See permission instructions.

3. Information stored on your device

The app stores setup and display preferences, whether guides and permission checks have been requested, and a policy-acceptance record containing the policy version, acceptance date and time, and app version/build. RevenueCat also maintains local purchase-access information and an app user identifier. These records support setup, purchase access, and agreement version checks.

AviaGPS does not provide an account registration system. A purchase identifier is not the same as an account with your name, but it can distinguish installations or purchase histories. Device data may be included in backups managed by Apple or by you. Removing the app does not delete provider-held purchase records, email correspondence, or existing backups, and does not cancel subscriptions.

4. Purchases and RevenueCat

Apple processes App Store payments. We use RevenueCat to validate purchases, restore access, manage entitlements, present purchase screens, and understand purchase and subscription activity. These services process transaction and product identifiers, purchase history, subscription status and dates, an app user identifier, Apple’s identifier for vendor (IDFV) when available, and technical request information such as device model, app/SDK and operating-system versions, locale, and IP address. Requests can occur when the app opens or checks access, even if you do not make a new purchase.

RevenueCat’s purchase screens also report interactions, such as screen views, purchase cancellations, screen closures, and control selections, along with event/session identifiers, times, and presentation information. Earlier app versions also included RevenueCat’s Customer Center, which could report interactions and voluntarily submitted survey responses. The current app no longer includes Customer Center; removing it does not itself delete previously collected records. We use purchase-related interaction information to operate and evaluate the purchase experience. This is purchase-related analytics, separate from the live GPS feed.

We can access purchase-related records through RevenueCat. The app does not send your GPS feed to RevenueCat or provide it with your email address as a customer attribute. If you contact us about a purchase, information you supply may let us associate your correspondence with a purchase record. We do not receive your full payment-card details or Apple Account password.

See Apple's Privacy Policy and RevenueCat's Privacy Policy for their practices.

5. Website visits, email, and crash reports

Website. Cloudflare delivers and protects aviagps.com. Web requests expose information such as IP address, requested URL, request time, browser and operating-system information, and referring page when supplied. Cloudflare may process and retain request and security information to deliver the site, prevent abuse, and maintain its services. See Cloudflare's Privacy Policy. Our site does not embed advertising, marketing pixels, an analytics script, or a mailing-list form, and its page code does not set cookies or use browser local storage. Hosting security services may use necessary cookies or similar mechanisms.

Support. When you email us, we and our email provider process your address, name if supplied, message, attachments, and email metadata. We use them to answer questions, investigate defects and crashes, troubleshoot purchases, maintain relevant support records, and protect or enforce legal rights. We may combine a report with related correspondence and purchase records where necessary to investigate it.

Diagnostics you send. Screenshots and crash logs may contain device identifiers, file paths, location, or other personal information. Review and redact unrelated information before sending; do not send passwords, full card details, or sensitive flight/passenger information. There is no separate automatic crash-reporting SDK in the app. Apple's own diagnostic collection and developer sharing, where enabled, are governed by your Apple settings and Apple's notice.

We do not sell personal information, share it for cross-context behavioral advertising, or use the GPS feed for advertising. We currently have no separate behavioral-analytics or mailing-list service. We will update this notice and obtain any required consent before introducing materially different collection or uses; mentioning possible future services here does not activate or authorize them.

6. Purposes, disclosures, and processing abroad

We use the information described above to provide requested functionality and support, administer purchases, investigate faults and misuse, secure our services, keep necessary business records, and meet legal obligations. Where a law requires a specified legal basis, we rely on consent for permission-based processing, performance of our agreement for requested services, legal obligations for required records and disclosures, and legitimate interests where permitted for security, troubleshooting, and business administration.

We disclose information to service providers as needed for these purposes; to professional advisers; where required or permitted by law, legal process, or a lawful authority request; and where reasonably necessary and lawful to address fraud, security threats, or legal claims. Information may also be disclosed in a proposed or completed merger, financing, sale, reorganization, or insolvency, subject to applicable confidentiality and privacy requirements. We do not treat these circumstances as unlimited permission to disclose information.

Providers may process information in Canada, the United States, and other countries where they operate. Foreign laws may permit access by courts, law enforcement, or other authorities. Where required, we use appropriate contractual or other lawful safeguards for transfers. Contact us for information about the providers and safeguards relevant to your data. Links and receiving apps have their own practices; we remain responsible for the obligations applicable to information under our control.

7. Retention and security

The live location feed and receiver discovery state are transient app data, not a server-side flight archive maintained by us. Local preferences remain until removed or reset. We retain support correspondence and provider-held business records only as reasonably needed for their purpose, legitimate legal/business requirements, and dispute resolution, then delete or de-identify them. A deletion request does not override legally required retention. For example, BC law can require information used to make a decision directly affecting an individual to be retained for at least one year.

We use reasonable safeguards appropriate to the information and its risks. No network, device, email system, or storage service is completely secure, and we cannot guarantee that unauthorized access, interception, loss, or disclosure will never occur. This limitation does not exclude our statutory security or breach-notification duties. You are responsible for securing your devices and network and for limiting information you voluntarily send.

8. Your choices and privacy requests

You can change Location Services, Precise Location, and Local Network permissions in iOS Settings. Denying required access prevents the corresponding sharing feature. You can choose not to send support attachments. Manage Apple diagnostics and subscriptions through Apple; a privacy request or app deletion does not cancel an App Store subscription.

Contact our Privacy Officer to request access to, or correction of, information under our control; ask about its use and disclosure; withdraw consent where applicable; or request deletion. Depending on the laws that apply, you may also have rights to portability, restriction, objection, appeal, or other remedies. Rights are subject to lawful exceptions, including necessary records, third-party privacy, and legal claims. We may request proportionate information to verify your identity and locate records, and will respond within applicable statutory time limits. Do not send identity documents unless we specifically arrange an appropriate method.

You can complain to the Office of the Information and Privacy Commissioner for British Columbia, or another competent privacy regulator. We will not retaliate against you for exercising applicable privacy rights.

9. Children and changes to this notice

AviaGPS is not directed to children, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information so we can address it under applicable law. The Terms of Use separately require legal capacity to contract.

We may revise this notice to reflect changes in the app, providers, or law. The version and date above identify the notice. We will provide additional notice or obtain consent for material changes where required. Posting a revision does not retroactively authorize a new use requiring consent.

10. Privacy contact

Use “Privacy request” in your subject line and describe the information or request involved.