Privacy Policy

1. Information We Collect

Information you provide

• Flight-planning inputs — routes, departure and destination airports, coordinates, cruise altitude, departure time, and flight plans you import (for example, ForeFlight .fpl files).
• Pilot profile — the experience, recency, currency, and personal-minimums information you enter to personalize briefings (for example, certificate held, total time, recent IFR experience, aircraft details).
• Communications — information you provide when you contact support.

Information collected automatically

• Device & usage data — app version, device model, operating-system version, and diagnostic or crash data used to operate and improve the Service.
• Push notification token — if you enable notifications, a device token (via Apple Push Notification service) so we can deliver flight-related alerts.
• Server logs — request metadata such as IP address and timestamps, used for security and reliability.

We do not use third-party advertising networks or cross-app tracking, and the app includes no third-party advertising SDKs. Any diagnostics we collect are used solely to operate, secure, and improve the Service.

Much of your data — including your pilot profile and saved briefings — is stored locally on your device. When you request a briefing, the flight-planning inputs and pilot-profile fields needed to generate it are sent to and processed by our servers, where we keep a record of the request for a limited period, as described in Data Retention (Section 6).

2. How We Use Information

• Generate weather briefings and personalized go/no-go style risk indicators based on your inputs.
• Deliver flight-related push notifications you have enabled.
• Operate, maintain, secure, debug, and improve the Service.
• Respond to your requests and provide support.
• Comply with legal obligations and enforce our Terms.

3. How We Share Information

We share information only as described here:

• Service providers / subprocessors — companies that host our infrastructure, provide weather and aeronautical data, deliver push notifications (Apple), and provide AI processing (see Section 4), acting on our behalf under contract. These currently include our cloud hosting and infrastructure provider, Apple (push notifications and App Store distribution), public and commercial aviation-weather data sources, and our AI provider (Anthropic).
• At your direction — when you use the share feature (Section 5).
• Legal & safety — when required by law or to protect the rights, property, or safety of Aelio, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not sell your personal information or share it for cross-context behavioral advertising.

4. Use of AI Services

To produce briefing summaries and analysis, the Service sends relevant flight context (such as your route, airports, conditions, and the pilot-profile fields used for personalization) to third-party artificial-intelligence providers that generate text on our behalf. We currently use Anthropic (the provider of the Claude models) through its API; under Anthropic’s commercial API terms, content submitted through the API is not used to train its models. Please avoid entering sensitive personal information into free-text fields.

5. Briefings You Share

If you choose to share a briefing, we create a link that makes that briefing’s contents viewable by anyone who has the link, for a limited time. Do not share briefings that contain information you consider private. Shared links expire after 48 hours.

6. Data Retention

We retain information for as long as needed to provide the Service and for the purposes described in this Policy, then delete or de-identify it. Saved briefings and your pilot profile remain on your device until you delete them or uninstall the app. Server-side data is retained for no longer than necessary: shared briefings until they expire (currently 48 hours); push tokens until you disable notifications or the device token becomes invalid; and server logs for up to 90 days.

When you request a briefing, we also keep a record of that request — including the flight-planning inputs and pilot-profile fields you submitted, the briefing and analysis we returned, and the related AI prompt and response — for up to 90 days, so we can provide support, investigate safety incidents, and reproduce what you saw at the time. These briefing records are deleted automatically when that period ends.

7. Data Security

We use reasonable technical and organizational measures designed to protect information, including encryption in transit. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Choices & Rights

• On-device data — you can delete saved briefings in the app, and remove all locally stored data by uninstalling the app.
• Notifications — you can disable push notifications in your device settings at any time.
• Access & deletion — you may request access to, correction of, or deletion of personal information we hold by contacting us at help@aelio.co.
• Regional rights — depending on where you live (for example, the EEA/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights, such as the right to access, correct, delete, port, or object to certain processing, and to lodge a complaint with a supervisory authority. Where required, our legal bases for processing include performing our contract with you (to provide the Service), our legitimate interests (to secure, maintain, and improve the Service), your consent (for example, for push notifications), and compliance with legal obligations. California residents have rights under the CCPA/CPRA; as stated above, we do not sell or share personal information as those terms are defined.

9. International Transfers

We may process and store information in countries other than where you live, including the United States. Where required, we use appropriate safeguards for cross-border transfers. For transfers from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum).

10. Children’s Privacy

The Service is intended only for adults aged 18 or older and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us information, contact us and we will delete it.

11. Third-Party Services

The Service may link to or interoperate with third-party services (for example, ForeFlight files you import, official weather sources such as 1800wxbrief.com, and the Apple App Store). Their handling of your information is governed by their own privacy policies, not this one.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the effective date above and may provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact

Questions or privacy requests? Contact us at help@aelio.co / PO Box 731, Normandy Beach, NJ 08739.