The short version
- Motion sensor data used to detect flight phases and measure turbulence is processed on your phone and is not uploaded to our servers.
- We collect only what we need to run the Service: your email, your subscription status, the flight details you enter, and the messages or photos you choose to send.
- Questions you ask the AI assistant and cloud photos you analyse are sent to our AI provider to generate an answer. They are not used to train AI models.
- Payments are handled by Stripe. We never see or store your full card number.
- We do not sell your personal information and we do not use advertising trackers.
- You can access, export or delete your data at any time from the app or by emailing us.
This summary is for convenience. The full text below is what applies.
1.Who we are
PRAGMATICDEVS S.R.L. is the company that develops and operates Calmfly, and is the controller of your personal information for the purposes of data protection law.
If you have any question about this policy or how we handle your information, contact us at ata@pragmaticdevs.io.
2.Information we collect
We collect information in three ways: information you give us, information collected automatically when you use the Service, and information we receive from service providers acting on our behalf.
Information you give us
- Account and waitlist details: your email address and, if you choose to provide it, your name.
- Payment details: when you join the waitlist or subscribe on our website, Stripe collects your card details and billing information. We receive only limited information such as your billing country, the card brand, the last four digits and expiry date, and the status of your payments.
- Flight details: the flight number, date, airports, aircraft or seat you enter so we can prepare your pre-flight report and route turbulence forecast.
- AI assistant messages: the questions you type and the answers you receive.
- Cloud photos: photos of the sky you choose to analyse for a takeoff turbulence estimate.
- Support requests: the content of messages you send us, the email address you write from, and any device details or attachments you choose to include.
- Feedback and surveys: your answers, if you choose to take part.
Information collected automatically
- Device and app information: device model, operating system version, app version, language, time zone, and a randomly generated app identifier.
- Diagnostics: crash reports and performance data, such as how long screens take to load. These do not contain your messages or photos.
- Feature usage: which features are opened and for how long, so we can understand what helps people most. We look at this in aggregate.
- Website logs: when you visit our website, our hosting provider records your IP address, browser type, the pages requested and the time of the request. We use these logs for security and to keep the website running.
- Launch updates: your name and email address, if you ask us to tell you when the app launches. Our hosting provider also records your IP address, browser type and the page you came from with your request, to help filter spam. We use your name and email address only to email you about Calmfly and its launch, and you can unsubscribe at any time.
- Website analytics, only if you accept analytics cookies: the pages you visit, the site that referred you, your browser and device type, your approximate location, and whether you started checkout or joined the waitlist. We do not record your screen or link this information to your name or email address.
Sensor and location data
To detect phases of flight and show the turbulence meter, the app reads your phone's motion sensors (accelerometer and gyroscope) and, where available, the barometer. This processing happens on your device. Raw sensor readings are not sent to us.
The app does not need GPS to work. If you allow location access to show your position on the in-flight map, your location is used on your device for that feature and is not stored on our servers.
If you choose to share a flight summary with us, for example when reporting a bug, the summary may include processed values such as detected flight phases and peak G-force readings. We will always ask before sending it.
Health-related information
Calmfly is designed to help with anxiety about flying. Some information you share, for example in AI assistant conversations or when you rate how anxious you feel, may reveal information about your mental health. Data protection law treats this as sensitive information.
We only process this kind of information with your explicit consent, which we ask for in the app before you use features that involve it. We use it only to provide those features to you. You can withdraw your consent at any time in the app settings. Withdrawing consent does not affect processing that already took place, but some features will no longer work.
3.How we use your information and our legal bases
We use personal information only for the purposes below. If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, the right column shows the legal basis we rely on for each purpose.
| Purpose | Legal basis |
|---|---|
| Creating and managing your account and waitlist place | Performance of our contract with you |
| Processing payments, renewals and refunds | Performance of our contract; compliance with tax and accounting laws |
| Providing app features such as flight reports, forecasts, the AI assistant and cloud photo analysis | Performance of our contract; explicit consent for health-related information |
| Answering support requests | Performance of our contract; our legitimate interest in helping users |
| Sending service emails such as receipts, launch notices and important changes | Performance of our contract |
| Sending product news and tips | Your consent, which you can withdraw at any time |
| Keeping the Service secure and preventing fraud and abuse | Our legitimate interest in protecting users and the Service |
| Fixing bugs and improving the Service using diagnostics and aggregated usage data | Our legitimate interest in providing a reliable product |
| Meeting legal obligations and responding to lawful requests | Compliance with legal obligations |
When we rely on legitimate interests, we have considered your rights and expectations and concluded that our use is proportionate. You can object to this processing at any time, as described in Your rights.
We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.
4.AI features
The AI assistant and cloud photo analysis use large language and vision models operated by a third-party AI provider. When you use these features, your message or photo, together with the recent conversation needed to understand it, is sent to that provider to generate a response.
- We only work with AI providers whose contractual terms prohibit them from using your content to train their models.
- Our provider may keep content for a short period to detect abuse, as allowed by our agreement, and then deletes it.
- We do not use your conversations or photos to train our own models without asking for your separate permission first.
- Your conversation history is stored on your device. If you turn on backup, it is stored encrypted on our servers so you can restore it on a new phone.
Please do not include other people's personal information, payment details or passwords in AI conversations. The assistant is not monitored in real time and cannot help in an emergency.
7.How long we keep information
We keep personal information only for as long as we need it for the purposes described in this policy.
| Information | Retention period |
|---|---|
| Account and waitlist details | While your account is active, then deleted within 30 days of account deletion |
| Payment and invoice records | As long as tax and accounting laws require, which in many countries is 6 to 10 years |
| Flight details and reports | Until you delete them or your account |
| AI conversation backups | Until you delete them, turn off backup, or delete your account |
| Cloud photos | Deleted from our systems once the analysis is returned to you, unless you save the result |
| Support conversations | 24 months after the request is resolved |
| Crash reports and diagnostics | Up to 90 days |
| Website security logs | Up to 30 days |
| Website analytics | Up to 12 months |
| Launch update requests | Until you unsubscribe, and no longer than 12 months after launch |
We may keep information for longer where we must do so by law or to establish, exercise or defend legal claims. Aggregated information that can no longer identify you may be kept indefinitely.
8.How we protect information
We use technical and organisational measures appropriate to the sensitivity of the information we process, including encryption in transit (TLS), encryption at rest for stored data, access controls based on least privilege, and regular review of our service providers.
No system is completely secure. If we become aware of a breach that affects your personal information, we will notify you and the relevant authorities as required by law.
9.International transfers
Our service providers may process information in countries other than the one you live in, including the United States. These countries may have data protection laws that differ from yours.
When we transfer personal information out of the EEA, the United Kingdom or Switzerland, we rely on an adequacy decision where one exists, or on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with additional safeguards where needed. You can ask us for a copy of these safeguards.
10.Your rights
Depending on where you live, you may have the following rights over your personal information:
- Access: ask for a copy of the personal information we hold about you.
- Correction: ask us to correct information that is inaccurate or incomplete.
- Deletion: ask us to delete your information.
- Portability: receive information you provided to us in a structured, machine-readable format.
- Objection and restriction: object to processing based on legitimate interests, or ask us to limit how we use your information.
- Withdraw consent: where we rely on consent, withdraw it at any time.
- Marketing opt-out: unsubscribe from product emails using the link in any email.
You can delete your account and data directly in the app under Settings, then Account, then Delete account. For any other request, email ata@pragmaticdevs.io. We will respond within one month, or sooner if your local law requires it. We may need to verify your identity before acting on a request, and we will not ask for more information than necessary.
If you are in the EEA, the UK or Switzerland
You have the right to lodge a complaint with a data protection authority, in particular in the country where you live or work. Our lead supervisory authority is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro). We would appreciate the chance to address your concern first, so please contact us at ata@pragmaticdevs.io.
If you are in the United States
Residents of California and other US states with consumer privacy laws have the right to know what personal information we collect, use and disclose; to request deletion or correction; and to opt out of the sale or sharing of personal information and of certain uses of sensitive personal information.
- In the past 12 months we have collected the categories of information described in Information we collect: identifiers, commercial information (subscription records), internet and device activity, and sensitive personal information you choose to share (health-related information).
- We use sensitive personal information only to provide the Service you request, as permitted by law.
- We do not sell or share personal information as those terms are defined under California law, and we have not done so in the past 12 months. We honour Global Privacy Control signals as an opt-out request.
- You can make a request yourself or through an authorised agent. We will not treat you differently for exercising your rights.
11.Children
The Service is not directed at children under 16, and we do not knowingly collect personal information from them. Users between 16 and the age of majority in their country need permission from a parent or guardian, who must agree to our Terms of Use and manage any payment.
If you believe a child under 16 has given us personal information, contact us at ata@pragmaticdevs.io and we will delete it.
12.Changes to this policy
We may update this policy as the Service changes or the law evolves. We will change the date at the top of this page whenever we do. If a change materially affects how we use your information, we will tell you by email or in the app before it takes effect and, where required, ask for your consent.
13.Contact us
Privacy questions and requests: ata@pragmaticdevs.io
For help with the app or your subscription, visit our Support page or email ata@pragmaticdevs.io.