Privacy Policy

1. Introduction

AIVIATION LLC ("we," "us") operates ChartBrief (chartbrief.app and the iOS app, bundle ID: app.chartbrief). ChartBrief is an AI-annotated IFR chart briefing tool. The chart imagery itself is the FAA d-TPP -- a public-domain U.S. government publication. We minimize data collection at every tier.

2. Data We Collect

Free tier: Aircraft profiles, favorite charts, and saved briefings live on your device. To enforce the 3-free-flights limit, AIVIATION servers identify your device using a non-reversible SHA-256 hash of Apple's identifierForVendor -- a device identifier shared across all AIVIATION apps on your device, stable across app updates, and reset only when you remove all AIVIATION apps from the device -- stored alongside a small record of which flights have been briefed. When that identifier is unavailable, a hash of the request's IP address and request metadata is used as a fallback. Neither hash is linked to your Apple ID, name, or email. We do not collect tracking identifiers, advertising IDs, or location data.

AI briefing generation: When you tap "Brief This Chart," ChartBrief sends to AIVIATION servers (AWS, us-east-2): the chart identifier, the airport ICAO, the cycle, the current NOTAMs at that airport (fetched server-side from the FAA NOTAM API), and the aircraft profile fields you have selected (aircraft type, approach category, equipment suffix, GPS/ILS capability, climb gradient, VRef). ChartBrief's AI generates the briefing on AIVIATION's servers; the request is used only to produce your briefing and is not shared with any third party or used to train anyone's models. AIVIATION's request/response logs persist in AWS CloudWatch for 30 days, then auto-expire. We do not store your Apple ID, name, email, or any other persistent identifier alongside briefing requests.

NOTAM fetches: Pulling NOTAMs for an airport sends only the airport ICAO to our cache layer (and on cache miss, to the FAA NOTAM API). No user identifier is attached.

3. iCloud Sync (Optional)

If you enable iCloud sync, your aircraft profiles, favorites, and saved briefings are stored in your personal iCloud account and synced across your Apple devices. AIVIATION LLC does not have access to your iCloud data. Apple's privacy policy governs iCloud storage: apple.com/legal/privacy.

4. AI Features

Cloud AI briefing (all tiers): Annotation overlays and briefing summaries are generated by ChartBrief's AI on AIVIATION's servers (AWS us-east-2). The chart identifier, NOTAM context, and aircraft profile are sent to AIVIATION's servers as part of the request; the data is not shared with any third party or used to train anyone's models. AIVIATION's CloudWatch logs (request metadata, error traces) persist for 30 days, then auto-expire.

5. Subscriptions

ChartBrief offers a free tier and a paid subscription. All subscription purchases are processed by Apple via StoreKit. We receive a record that your subscription is active (so we can unlock subscription features), but we do not receive your payment details. Apple's privacy policy applies to subscription processing.

6. App Store Privacy Nutrition Label

ChartBrief's App Store privacy nutrition label discloses, for all tiers: Device ID (linked to you, used for app functionality and analytics -- this is the SHA-256 hash of identifierForVendor, a vendor-scoped identifier shared across AIVIATION apps on your device, described in Section 2 above), Product Interaction (linked, analytics), Purchase History (linked, app functionality), and Other User Content (not linked, app functionality -- the aircraft profile and chart identifier sent with briefing requests). If iCloud sync is used, Apple categorizes profiles/saved briefings as "User Content -- Not Linked to You" since it is handled by Apple's iCloud infrastructure independently.

7. Your Rights and Data Deletion

On-device data (both tiers): aircraft profiles, favorites, and saved briefings live on your device. Delete the app to remove every local trace.

Free-tier device hash (server side): a SHA-256 hash of your device's identifierForVendor -- a vendor-scoped identifier shared across all AIVIATION apps on your device, not tied to a single install -- (or, as a fallback, of your IP address and request metadata) and a small per-flight briefing record persist in DynamoDB to enforce the 3-free-flights cap. Because the hash is not linked to your Apple ID, name, or email, we cannot identify which row belongs to you.

Cloud AI briefing logs: request payloads in CloudWatch persist for 30 days, then auto-expire. Because requests are not linked to your identity, we cannot tie a specific record back to you. For questions or requests, contact privacy@aiviation.dev.

8. GDPR (European Users)

9. CCPA (California Residents)

We do not sell or share personal information for cross-context behavioral advertising. We collect only the data described in Section 2: a free-tier device hash for rate limiting, and subscription briefing payloads in 30-day CloudWatch logs. California residents have the right to know, delete, correct, and opt-out of sale -- contact privacy@aiviation.dev with any requests.

10. Children's Privacy

ChartBrief is not intended for users under 13. We do not knowingly collect data from children under 13. The data we do collect (device hash, briefing payloads) is never linked to identifying information.

11. Changes to This Policy

We may update this policy. Changes will be posted here with a new effective date. Continued use after the new effective date constitutes acceptance.

12. Contact