← AirMates

Privacy Policy

Our approach

AirMates is built on a fair exchange. Share your location and you can see your friends on the live map. Step out completely and the live map steps back too.

AirMates collects only what's needed to run the features you use. Your location is sent only when you have sharing turned on. On the native iPhone app, when sharing is on, AirMates uses lightweight background location signals to keep your airport label fresh for friends even when the app is not open. This does not involve continuous GPS tracking. On the web version, location is checked when you open the app or tap to refresh.

Our lawful bases

Where required by law, we rely on your consent to provide the features you choose to use (such as location sharing, push notifications, and the newsletter), and on legitimate interests to keep the service secure, operational, and free from abuse. You can withdraw consent at any time by turning the relevant feature off, by deleting your account, or by contacting us.

What we don't do today

We do not currently run advertising on AirMates, and we do not sell or rent your personal data. We do not use third-party behavioural-tracking analytics. If we ever introduce advertising, sponsored placements, or analytics in the future, we will tell you in advance, update this policy, and where required by law give you a clear choice.

We do not keep a history of your past locations or previous activity beyond what is needed for the current feature to work. Once a piece of data is no longer needed, it is deleted.

What we collect

Account data: the name, username, avatar, and email associated with your sign-in.

Connections: the list of friends you choose to connect with.

Sharing data: your most recent shared airport, whether sharing is currently on, and any destination airport you set with Heading To. A Heading To destination is visible to the same friends who can see your live sharing. It clears automatically after about 48 hours, on the same schedule as your last shared airport, and you can clear it sooner from the destination pill at any time.

Settings: your preferences (notifications, sharing defaults, newsletter opt-in if any).

Operational logs: minimal server logs needed to keep the service running and secure. These are kept short-term and are not used for profiling.

Being findable

Other AirMates users can find you in search by your AirMates username or by your display name. AirMates also shows you friends-of-friends suggestions once you have your first connection, so you can discover people you might know. Whether you appear in other people's suggestion lists is separate: once you have your first connection, you will be asked whether you want to be suggested to others. This is off by default and you will be asked before it is turned on. You can change your mind at any time in Settings → Privacy, and you control every connection by accepting or declining any request.

Location data, specifically

Your location is shared only when you turn sharing on. AirMates shares the nearest airport, never a street address, a building, or live coordinates. Friends see an airport label, not your home, hotel, or car.

AirMates only retains your most recent shared airport. It is automatically deleted from our servers 48 hours after your last update, and you can delete it manually at any time from Sharing settings. No location history is kept.

Marketing and screenshots

We do not use real account names, profile photos, or shared data in marketing material, app store screenshots, blog posts, social media, or promotional content without your written permission. The friends and locations shown in our screenshots and demos are mock accounts created for that purpose. If we ever want to feature you in a case study or testimonial, we will ask you first and you can decline without any effect on your account.

How long we keep things

Location: up to 48 hours after your last update, then deleted automatically.

Account, profile, settings, and connections: kept while your account exists. Deleted when you delete your account.

Notifications you receive: kept for up to 7 days, then deleted automatically. You can delete them sooner, and they are also removed when you delete your account.

Server logs: short-term only, for security and debugging.

Banned accounts: if we permanently ban an account for abuse, we keep a minimal record such as the email address or username so the banned person cannot simply re-register. We keep this only for that safety purpose.

Who handles your data on our behalf

To run the app we rely on a small set of trusted service providers. They process data on our behalf, under contract, only to deliver the service:

Replit — hosting and database infrastructure.

Apple and Google — sign-in providers when you use Sign in with Apple or Sign in with Google. Each shares only the verified name and email needed to create your account. Neither receives your location data or other in-app activity. Apple and Google also handle push notification delivery; push payloads are encrypted end-to-end and the provider cannot read the content.

Mozilla — push notification delivery. Payloads are encrypted end-to-end; Mozilla routes the message but does not see its content.

CARTO basemaps — map tile delivery. When your map view loads, your IP address and the tile coordinates you view are visible to CARTO as part of standard web requests.

BigDataCloud — reverse geocoding to turn coordinates into a place name when needed. Coordinates you choose to share may be sent to BigDataCloud for this purpose.

Resend — transactional email delivery. Used for authentication codes (email sign-in) and social notifications (friend requests and acceptances). Resend processes your email address and the content of those messages on our behalf.

Stripe — only if you choose to support AirMates financially through the Support link. Stripe handles payment data directly under its own privacy policy.

DiceBear — generates default avatars from your username. No personal data beyond the username is sent.

International data transfers

Some of the providers above may process your data outside your country, including in the United States. Where applicable, we rely on the standard contractual safeguards published by the European Commission to protect that data.

Your rights

If you are in the EU, the UK, or another jurisdiction with similar laws, you have the right to: access your data, correct it, delete it, export it in a portable format, restrict or object to certain processing, and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

You can exercise most of these rights directly in Settings — edit your profile, change sharing, download a copy of your data, or delete your account. For anything else, contact us at the address below.

Children

AirMates is intended for people 18 and over. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will remove it.

Cookies and local storage

We use a small number of essential storage items in your browser: a session cookie to keep you logged in, and local storage entries to remember preferences (for example, that you dismissed an install prompt or accepted the legal terms). We do not currently use advertising or analytics cookies; if that ever changes we will tell you in advance and, where required, ask for your consent.

Operational messages

We may send you essential operational messages (for example, security alerts, important account notices, or required updates to these terms) regardless of your marketing or newsletter preferences. You will only receive marketing or newsletter messages if you have opted in.

We also send transactional social notifications by email, specifically when another user sends you a friend request or when someone accepts your friend request. These are not marketing. They are direct notifications about actions taken toward your account.

When sharing triggers a notification

Turning on sharing, or setting a Heading To destination, can trigger a push notification to friends who already follow you, so they know to open the map. You control this entirely. If you do not start sharing, no notifications go out on your behalf. You can also turn off the relevant categories in your own Notifications settings to stop receiving these from others, and your friends can do the same.

Security

Connections to AirMates use HTTPS encryption in transit. Access to production data is restricted to the people who operate the service. No online service can guarantee perfect security; please notify us if you suspect anything unusual with your account.

Data breach notification

If a security incident affects your personal data, we will notify you without undue delay through the app and, where required, notify the relevant authorities within the timeframes set by applicable law.

Data controller and contact

AirMates is operated by the AirMates founding team. For privacy questions, data requests, or anything else, write to AirMates.app@gmail.com. You can also use the Send feedback option in Settings, which opens your mail app pre-addressed.

Changes to this policy

We may update this policy as AirMates evolves. When changes are material, we will ask you to review and accept the new version before you continue using the app.

Demo mode

Demo mode uses sample friends and does not require this legal-consent step. No real personal data is processed in demo mode.

Questions? Email AirMates.app@gmail.com.