Privacy

Privacy by default.

Effective August 20, 2026

Controller

Alec Schneider Solutions, Inhaber: Alec Peter Schneider, Pappelallee 25, 10437 Berlin, Germany. Email: alec@a3.lol.

InFlight reads telemetry made available locally by the Wi‑Fi system on supported aircraft. Flight numbers, routes, coordinates, altitude, speed, and cabin-pressure readings are not sent to our analytics provider.

Optional email updates

You may give us your email address and separately choose (1) InFlight product updates and (2) occasional promotions about other products from Alec Schneider Solutions. Each choice is optional, starts unchecked, and is based on your consent (Article 6(1)(a) GDPR). Signing up is not required to use InFlight.

We are currently collecting preferences only. Records remain unverified and we do not send marketing or product-update email until an email-confirmation process is available. Before any such email is sent to addresses in Germany or elsewhere in the EU, we will require confirmation through a double opt-in process.

The website and apps send your choices through our Vercel-hosted API. The API normalizes and encrypts the email address before storing it in Convex Cloud, together with a keyed pseudonymous lookup value, the selected purposes, consent-copy version, source surface, locale, and timestamps. We do not put email addresses or lookup values in product analytics. Vercel, Inc. and Convex, Inc. act as processors for this feature. The current Vercel function and Convex deployment are hosted in US East; their data-processing terms provide safeguards for international transfers, including the EU Standard Contractual Clauses. See the Vercel Data Processing Addendum and Convex Data Processing Agreement.

You can change the two choices independently by saving the form again. You can withdraw both at any time using “Withdraw this address” in the website or app. Withdrawal does not affect prior lawful processing. On withdrawal, we remove the recoverable encrypted address and retain only the keyed lookup marker and consent history as needed to document and honor the withdrawal. You may request deletion by contacting us.

Website analytics

We use PostHog EU Cloud to understand anonymous page visits and App Store link clicks. Tracking is cookieless: no analytics cookies, local storage, or persistent browser identifiers are used. Automatic event capture, session recordings, exception capture, and person profiles are disabled. PostHog creates a daily rotating anonymous identifier from limited connection data on its servers; IP anonymization is enabled. “Do Not Track” is respected.

App analytics

Analytics in the iPhone and Apple Vision Pro apps are off until you explicitly enable them. If enabled, the apps send a small allowlist of product-interaction events, the app surface, and app version. We do not identify you and do not send flight numbers, routes, coordinates, onboard network names, or free-form text. You can turn analytics off again in the app.

Service provider, transfers, and legal basis

Analytics data is processed by PostHog, Inc. in its EU Cloud region. PostHog acts as our processor. Because PostHog is a US company, limited support or administrative access may involve a transfer outside the EEA under PostHog’s data-processing terms and applicable safeguards, including Standard Contractual Clauses. For cookieless website measurement, our legal basis is our legitimate interest in understanding whether the site works and helps visitors (Article 6(1)(f) GDPR). App analytics is based on consent (Article 6(1)(a) GDPR).

Support email

If you contact us, we process your email address, message, and any information you choose to provide to answer the request (Article 6(1)(b) or (f) GDPR). Email is handled by our email provider. We retain support correspondence only as long as needed to resolve the request and meet applicable legal obligations, then delete it under our normal mailbox cleanup process.

Retention

We retain an active email address and its preference history while at least one email purpose remains selected. After withdrawal, the recoverable address is removed and the minimal consent record is reviewed and deleted when it is no longer needed to demonstrate compliance or honor the withdrawal. You may request earlier deletion. We review analytics retention periodically and retain anonymous product events only as long as useful for product measurement. Native analytics consent remains on your device until you change it or remove the app. Server and hosting logs may be kept for a limited period for security and reliability.

Your rights and complaints

You may request access, correction, deletion, restriction, data portability, withdraw consent, or object to processing where applicable. Withdrawal does not affect earlier lawful processing. Because analytics is anonymous and not linked to an account, we may be unable to associate a data point with you. Contact alec@a3.lol. You may also complain to the Berliner Beauftragte für Datenschutz und Informationsfreiheit or another competent supervisory authority.