Privacy Policy

Windshear (the "app") is an iPhone app for airline crew, developed by Windshear AS, a company registered in Norway ("we", "us"). This policy explains what data the app handles and why. By using Windshear you agree to this policy.

Data controller. Windshear AS, Norway, is the data controller for the personal data described in this policy. You can reach us at [email protected].

Data stored in your iCloud

Your roster, including flights, duties, crew lists, notes, and your profile (name, base, employee number, and similar fields you enter), is stored in your personal iCloud account using Apple's CloudKit private database and iCloud key-value storage. This keeps your data in sync across your devices.

• This data is held in your iCloud, governed by Apple's Privacy Policy. We do not have access to it.
• We do not operate any database or account system that holds your roster.
• Roster PDFs are parsed entirely on your device; a copy of your most recent import is kept locally so you can re-open it.

Flight tracking

To show actual times and live aircraft positions, the app looks up flight data through our tracking service (a Cloudflare Worker that forwards requests to a flight-data provider, AeroDataBox). For each lookup the app sends only a flight number and date, never your name, location, or any account identifier.

• To prevent abuse, requests are verified with Apple's App Attest, which confirms they come from a genuine, unmodified copy of the app. This does not identify you personally.
• Responses are cached briefly to reduce repeated lookups. The service does not build a profile of you.

Weather and airport data

When you view weather or airport information, the app sends the relevant airport codes to retrieve METAR reports and airport/runway diagrams. No personal information is attached to these requests.

Sharing your roster

Sharing is entirely optional and off by default. If you choose to share, the app creates a private CloudKit invite link that lets the people you send it to view a window of your upcoming schedule (flights and duties). Shared data is limited to your schedule and does not include crew names, notes, or tail numbers.

• An invite link is read-only and remains valid until you revoke it (Stop Sharing, or remove an individual person).
• Anyone who has the link can view the shared schedule until it is revoked, so only share it with people you trust.

On-device storage

The app stores your settings and preferences locally on your device (using standard iOS storage) and schedules local notifications you enable, such as report reminders and duty-hour warnings. These stay on your device.

What we do not do

• No user accounts, logins, or passwords.
• No analytics or usage-tracking SDKs, and no advertising.
• No third-party trackers, and no sale or sharing of personal data for marketing.
• No collection of your location by the app for tracking purposes.

Third-party services

Windshear relies on a small number of services to function:

• Apple iCloud / CloudKit stores and syncs your roster (your own iCloud account). See Apple's Privacy Policy.
• Cloudflare hosts our tracking service and this website. See Cloudflare's Privacy Policy.
• AeroDataBox provides the flight data returned through our service for the flight number and date you look up.

Data retention and deletion

Because your roster lives in your iCloud, you control it. You can clear your flights and duties from within the app's Settings, stop sharing at any time, or delete the app. Removing the app and its iCloud data deletes your roster from Apple's storage on Apple's schedule. Cached flight-lookup responses on our service expire automatically and are not tied to your identity.

Your rights

If you are in the EU/EEA, the General Data Protection Regulation (GDPR) gives you rights over your personal data. Because your roster lives in your own iCloud and we keep no account or server-side copy of it, you already control most of your data directly, from within the app and from your Apple account. Where we act as data controller, you have the right to:

• Access the personal data we hold about you and receive a copy of it.
• Have inaccurate data corrected, or incomplete data completed.
• Have your data erased (the "right to be forgotten").
• Restrict or object to how your data is processed.
• Receive your data in a portable, machine-readable format.

To exercise any of these, email [email protected]. You also have the right to lodge a complaint with your local data protection authority; in Norway this is Datatilsynet.

Children

Windshear is intended for working airline crew and is not directed at children.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with a new "last updated" date.

Contact

Questions about privacy? Email [email protected].