Privacy Policy
1. Who is responsible for your data
Juan Parra, KR 74 25D 38, Bogotá, Colombia ("Gonav", "we"), is the controller (responsable del tratamiento) of the personal data described here. Contact for anything about your data: info@gonav.app.
2. What we collect, why, and on what legal basis
We collect only what running Gonav needs. For each kind of data, we give its purpose and the legal basis we rely on. Under Colombian law that basis is your prior, express and informed authorization, which you give when you create an account or use a feature, except where the law doesn't require it. Under the EU and UK GDPR it is the one named in each section.
Your account
Your email address, the username or name you choose, and your sign-in credentials, handled by our sign-in provider Clerk. If you sign in with a third-party provider offered on the sign-in screen, we receive the basic profile it shares. Why: to let you sign in on any device and keep your purchases, coins and PIREPs. Basis: performing our contract with you.
Your location
The apps use your device's location, only while you're using them, to show you on the map and charts, sort the nearest aerodromes and suggest a departure. That happens on your device. Your position does leave it in these cases:
- PIREPs: a PIREP carries the position you report it from. A public PIREP's position is visible to everyone using Gonav.
- Winds aloft: to get winds for your route, the app sends points along the route to our servers, and we ask the US National Weather Service's forecast service (NOAA) for the area around them. After you fly "direct to" a point, the route starts at your current position, so that position is among them.
- Map and satellite imagery: the map loads its tiles from OpenFreeMap and satellite imagery from NOAA nowCOAST for the area on screen. When the map follows your position, those requests reveal your approximate location to them, along with your IP address, as with any website.
- Shared plans: a plan you share travels inside the link, including its points' coordinates. If it is opened in a web browser, the link passes through our hosting provider, whose logs record it.
Basis: your consent, given in your device's location permission. You can withdraw it in your device settings at any time; the app keeps working without your position.
PIREPs you post
A PIREP holds what you report (conditions, altitude, aircraft type, remarks), the time and position of the report, your username, and optionally a photo taken with the camera at that moment. A public PIREP, including its photo, position and username, is visible to everyone using Gonav, signed in or not. A private one is visible only to you. Other pilots can mark a PIREP useful, which earns its author points and coins, or report it for abuse. Before a photo is posted, the app screens it on your device for faces, readable text and inappropriate content (Apple Vision on iOS, Google ML Kit on Android). The photo is re-encoded, which removes its location and camera metadata. Please don't put personal information in a PIREP's remarks. Basis: your consent, given when you choose to post and choose its visibility.
Purchases and coins
Subscriptions and coin packs are paid through the App Store (Apple) or Google Play (Google); we never see your card details. To confirm a purchase and keep your access, we keep: the transaction or order identifier, the product, the purchase token (Google Play), the platform, your subscription status and expiry, your coin balance and the history of coins earned, bought and spent, and which aerodromes you have unlocked and until when. Apple and Google tell our servers when a subscription renews, expires or is refunded. Basis: performing our contract with you, and our legal duty to keep accounting records.
Device security data
Paid data packages are encrypted so that only your devices can open them. For that we keep, per device: an identifier generated by the app, the device's public key, and proof that the request comes from the genuine app on a real device: Apple's App Attest on iPhone and iPad, and Android's hardware key attestation on Android. An account can hold keys for up to three devices; when you add a fourth, the one used least recently is removed. Basis: performing our contract (delivering the data you paid for) and our legitimate interest in preventing piracy and abuse.
Listening for your clearance (iPhone and iPad)
When you tap Listen in "Listen for clearance", the app uses the microphone until you tap Stop (at most two minutes) and Apple's speech recognition turns it into text. When your device can recognize the language on its own, this happens entirely on the device. When it can't, the audio is sent to Apple to be recognized, under Apple's privacy policy, and the app tells you so on screen. Along with the audio go the names of the departure aerodrome's procedures, fixes and frequencies, which help recognize them. Gonav never stores or receives the audio or the transcript. The transcript leaves your device only if you share it yourself. Basis: your consent, given in the microphone and speech recognition permissions, which you can withdraw in Settings.
Weather, NOTAMs and the AI briefing
Weather and NOTAM requests send station codes (such as SKBO) and, for winds aloft, route points as described above. If you ask for an AI briefing, our servers send Google's Gemini service the route's station codes and their public weather reports, NOTAMs and SIGMETs, and your language, to write the summary. Your identity, account and coordinates are not included. Basis: performing our contract with you.
Usage statistics
The apps send Gonav anonymous usage statistics: counts of which screens you open, plans you build, flights you start, receiver sessions, and crashes or hangs with the name of the code they stopped in. Each event is one of a fixed list; the server refuses anything outside it. These statistics never include your position, your routes, aerodrome or station codes, your name or any free text. They are keyed to a random identifier created on the device, which you can reset at any time, and the whole thing can be switched off in Settings → Privacy, after which nothing is sent. Raw events are deleted after 90 days; daily counts are kept. Purpose: to know which parts of Gonav are used and what breaks, so we improve the right things. Legal basis: our legitimate interest in running and improving the service, with the switch as your way to object.
Technical data
Like any online service, our hosting provider receives your IP address and the requests your device makes, and keeps them in short-lived logs to run and protect the service. If a device's security check fails, we log the account and device identifiers to investigate. Basis: our legitimate interest in keeping Gonav secure and working.
Cookies
The web app uses only the cookies our sign-in provider needs to keep you signed in, and one that remembers your language. This website sets no cookies. We use no advertising or analytics cookies, so we don't ask you to accept any.
3. What stays on your device
Flight plans, aircraft profiles, weight and balance, checklists, your logbook, recorded tracks and imported GPX files are stored on your device, not on our servers. On Android, your device's own backup (Google's backup service, if you have it on) may include the app's settings and plans; you control that in your device settings. Data packages are never included in a backup.
4. Who processes it for us
These providers run parts of Gonav for us, each only for the purpose listed and under agreements that bind them to protect the data:
- Clerk (United States): accounts and sign-in.
- Vercel (United States): hosting our services and website.
- Neon (United States): our database.
- Cloudflare (United States): storing PIREP photos and data packages.
- Google (United States): the AI briefing (Gemini), Google Play purchases, and on Android, Google Play services for location and ML Kit for photo screening. ML Kit runs on the device; Google may receive usage and diagnostic information about it.
- Apple (United States): App Store purchases, App Attest, and speech recognition when it can't run on your device.
The apps also fetch public data straight from these sources, which receive the request and your IP address: OpenFreeMap (map tiles), NOAA's Aviation Weather Center and nowCOAST (weather and satellite imagery), and IDEAM (radar). Our servers fetch weather and NOTAMs from the Colombian Aerospace Force's SIMFAC, NOAA, CheckWX and Aerocivil using station codes only.
5. International transfers
These providers store and process data outside Colombia, mainly in the United States. Colombia's Superintendencia de Industria y Comercio lists the United States among the countries with an adequate level of protection. For people in the European Economic Area, the United Kingdom and Switzerland, transfers rely on the providers' Standard Contractual Clauses or, where they are certified, the EU–US Data Privacy Framework and its UK and Swiss extensions. For people in Brazil, Mexico, Peru and Ecuador, transfers are made to providers bound by contract to protect the data as the law there requires. You can ask us for a copy of the safeguards that apply.
6. How long we keep it
- Account data, PIREPs and their photos, coins, unlocks and points: while your account exists. Deleting your account removes them immediately.
- Purchase records (transaction identifiers, products, purchase tokens): for as long as tax and accounting law requires, currently up to ten years in Colombia, then deleted.
- Device keys: until the device is replaced by a newer one or your account is deleted. Security challenges are deleted after one hour.
- Hosting logs: kept by our hosting provider for a short period, typically days, under its own retention.
7. Your rights
Whatever country you are in, you can ask us to tell you what personal data we hold about you, give you a copy, correct it, or delete it, and you can withdraw a consent you gave. Write to info@gonav.app from the email on your account. We may ask you to confirm your identity first. Exercising your rights is free, and we won't treat you differently for doing so. Depending on where you live, you also have these rights:
Colombia: Ley 1581 de 2012
- to know, update and correct your personal data;
- to request proof of the authorization you gave us;
- to be told how your data has been used;
- to revoke your authorization and ask us to delete your data, where no legal or contractual duty requires us to keep it;
- to access your data free of charge;
- to file complaints with the Superintendencia de Industria y Comercio (SIC), after first contacting us.
We answer queries within 10 business days (extendable once by 5, with notice) and claims, such as corrections or deletion, within 15 business days (extendable once by 8, with notice).
European Economic Area, United Kingdom and Switzerland: GDPR, UK GDPR and FADP
- access, rectification and erasure of your data;
- restriction of processing, and objection to processing based on our legitimate interests;
- data portability: a copy of the data you gave us in a machine-readable format;
- withdrawing consent at any time, without affecting processing before you did;
- complaining to your local data protection authority (in the UK, the ICO).
We answer within one month, extendable by two more for complex requests, with notice. Gonav makes no decisions about you based solely on automated processing that have legal or similarly significant effects. Plan for me suggests routes; it decides nothing about you.
United States: California (CCPA/CPRA) and other state privacy laws
Residents of California and of states with similar laws (such as Colorado, Connecticut, Texas, Utah and Virginia) have the right to know the categories and specific pieces of personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing for targeted advertising. In the last 12 months we collected the categories described in section 2: identifiers (email, username, account and device identifiers), commercial information (purchases), geolocation (as described under "Your location"), audio (only while you use Listen, processed by Apple and not kept), user content (PIREPs and photos), and internet activity (requests in hosting logs). We collect them for the purposes in section 2 and disclose them only to the providers in section 4. We do not sell or share personal information as those laws define it, and we don't use sensitive personal information for anything beyond providing the service. You may use an authorized agent; we will ask them for proof of your authorization. If we deny a request, you may appeal by replying to our answer.
Brazil: LGPD (Lei 13.709/2018)
You have the right to confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about who we share data with, information about the possibility of not consenting and its consequences, and revocation of consent. You may also petition the Autoridade Nacional de Proteção de Dados (ANPD).
Mexico, Peru, Ecuador and other countries
In Mexico you have the ARCO rights (access, rectification, cancellation and opposition) under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares. In Peru you have equivalent rights under Ley 29733, before the Autoridad Nacional de Protección de Datos Personales. In Ecuador you have equivalent rights under the Ley Orgánica de Protección de Datos Personales, before the Superintendencia de Protección de Datos Personales. If you live elsewhere, we will honor the rights your local law gives you.
8. Deleting your account
In GonavPilot, go to Settings → Account → Delete account. This immediately deletes your account, your PIREPs and their photos, your coins, points, unlocks and registered devices. Only purchase records are kept, as described in section 6. You can also write to info@gonav.app from the email on your account and we will do it within 15 business days. Deleting your account doesn't cancel an active subscription, which is managed by Apple or Google: cancel it in your App Store or Google Play account. Data stored only on your device, like plans and your logbook, is removed when you delete the app.
9. What we don't do
- We don't sell your personal data or share it for advertising.
- We don't track you across other apps or websites. The apps contain no advertising, analytics or crash-reporting SDKs, and we ask for no tracking permission because we don't track.
- We don't record audio in the background or keep recordings.
- We don't use your personal data to train AI models, and the AI briefing sends none.
10. Children
Gonav is meant for pilots and student pilots and is not directed to children under 16. We do not knowingly collect personal data from children under 16 (under 13 in the United States). If you believe a child has given us personal data, contact us and we will delete it.
11. Security
Data travels encrypted (HTTPS). Paid data packages are encrypted and their keys are sealed to your device, whose key lives in its secure hardware (Secure Enclave or Android Keystore). Access to our systems is limited to what running Gonav requires. If a security incident puts your personal data at risk, we will tell you and the authorities that require it (such as the SIC in Colombia) without undue delay and within the deadlines the law sets.
12. Changes
If this policy changes, we will update it here with a new effective date, and tell you in the app before significant changes take effect. Where a change needs your consent, we will ask for it.