Sacha Khamnei, the individual publisher of NOTIME, based in Umm Al Quwain, United Arab Emirates (“we”, “our”, or “us”) is the data controller and is committed to protecting your privacy. NOTIME is a supplementary pilot briefing aid. It reads your Operational Flight Plan (OFP) and presents what matters for the flight, after you have carried out your own required checks. This policy explains what stays on your device, the limited data the app sends, and to whom.
Overview
Imported OFP files are parsed on your device. The current app no longer offers email sign-in or cloud briefing saving. Earlier versions and previously stored data are covered under Legacy cloud accounts below. The shared pilot profile uses an Apple-signed app identity to recover your profile across devices. Route Mode sends pasted routes and planning inputs to our online service. Other online features include Live, current weather, terrain, charts, upper winds, Voice Dispatch and the Pilot Threats board, as described below. Current online weather and the Pilot Threats board are enabled by default and can be switched off in More. Optional anonymous usage analytics are off by default. We do not sell data or use advertising/cross-app tracking identifiers. Saving a first name or sharing a report creates a private pilot profile; your first name and persistent identifier are personal data. Separately, app preferences use an on-device/private-iCloud identifier that is not sent to us.
Processed on your device only
OFP file import and parsing, the Crew Rest and FTL calculations, personal notes, and the on-device Dispatch Log are processed locally. Importing an OFP does not upload the file or its raw text. Earlier versions could separately upload a full source and snapshot through an explicit cloud-save action; the current app does not offer that action. Online features can send selected flight information as described below, including briefing facts for Voice Dispatch. Pasted Route Mode is processed remotely, so its briefing and weather/NOTAM retrieval are not exclusively on-device.
FTL Check. All flight time limitation calculations are performed entirely on your device. The times, duty details, and crew information you enter are used only to display results on screen and are not transmitted, stored on any server, or shared with any third party. Report summaries you generate exist only as text on your device until you choose to copy, print, or share them yourself.
Personalisation. To tailor the app to you, NOTIME stores a random, anonymous identifier and your personal preferences (for example a “last time you were here” record and settings such as a chronotype or text-size choice) on your device, using the iOS Keychain and — if you are signed in to iCloud — your private iCloud key-value storage. This lets your preferences persist if you reinstall the app or move to a new device, without any sign-in. This identifier and these preferences are not linked to your name or an account, are not shared with us or any third party, and are not used for advertising or cross-app tracking. They stay on your device and in your own iCloud; you can clear them by deleting the app (and, for iCloud, removing NOTIME’s data in your iCloud settings).
Data the app sends
1. Ground-chart data (download). To draw airport ground charts, the app requests public airport chart data (per-airport map geometry) from our Cloudflare host and, for airports not yet in our set, from the public OpenStreetMap Overpass service. No personal or flight information is included.
2. Chart-database feedback (upload). When an airport or taxiway referenced in your OFP is not yet in our chart data, the app sends the ICAO code (and, for a taxiway, the taxiway and NOTAM reference), the app version, and the aircraft-type label (e.g. “777”). It contains no OFP content, route, flight number, airline, or crew identity.
3. Upper-wind overlay (download). To draw the jet-stream overlay on the Visual Brief map, the app requests upper-wind (250 hPa) forecast data for the approximate map area (a latitude/longitude bounding box) around your route from our Cloudflare service, which sources public weather-model data. Only that map area is sent.
4. Voice Dispatcher (optional AI voice feature). When you start Call Dispatch and accept its consent prompt, microphone audio is streamed to ElevenLabs. The assistant receives structured airport, weather, NOTAM and hazard facts, which can include waypoints and planned timings. If you saved a first name, it is included for the greeting. Your pilot code and private threat notes are excluded. ElevenLabs processes this under ElevenLabs' privacy policy. NOTIME itself does not record or store call audio; the transcript and Dispatch Log remain on your device. Voice Dispatch is optional.
5. Apple-linked pilot profiles and Threats board (Beta). When the app restores your shared pilot identity, it sends Apple’s signed app transaction to our Cloudflare identity service. The signed proof contains an app-specific App Store account identifier, app and environment identifiers, and app acquisition/verification metadata. This is not Sign in with Apple: it does not provide your Apple email address, Apple account password, payment-card details or billing address. The service verifies the proof and stores a hashed account identifier and links to device-credential digests. The raw signed proof is processed for verification and is not stored by the identity application.
A secret credential is kept in this device’s Keychain and used to authenticate requests. The account linkage restores the same shared pilot profile and reports on devices using the same App Store account, including after a reinstall. It is separate from your private iCloud preferences and from subscription entitlement. Production and TestFlight/sandbox identities are separate. Changing App Store accounts selects a different profile. Existing reports can be linked when an older installation still has its credential; a matching name alone cannot recover lost credentials.
Saving your first name or submitting a shared report creates a profile with your first name, internal pilot code and creation/update dates. These identifiers and their account linkage are personal data. Your name and code are private to service administration, not a public directory. Voice Dispatch receives your saved first name for a greeting only when you start a call; it does not receive the pilot code or Apple proof.
Report sharing. The report form defaults to Share with other users. Nothing is submitted until you press Send for review. A shared submission sends your report text, airport or route, selected runway/taxiway/stand reference where applicable, and private identity credential to Forwardity's Cloudflare service. New reports do not send a flight number. Every report starts pending and is invisible to other pilots until human approval. Administrators can review your first name and code alongside the submission, edit the text, approve, reject or remove it. Only approved text, location, timestamp and a non-name author-block identifier are available to other pilots; your first name, pilot code and authentication credential are never published. Earlier app versions may have submitted a flight reference and random device identifier with a report.
Private notes. Switch the toggle off to Only for myself before saving. The note stays on this device, is not submitted for moderation and is excluded from the online voice briefing. Private notes can be deleted on their airport card; deleting app data also removes them. Your saved first name can still be used for a voice greeting if you start Voice Dispatch. The Pilot Threats board can be switched off in More without disabling the rest of the app.
Content rules. Do not include airline/company names or flight numbers, identifiable people, personal accusations, contact details, profanity, harassment, discrimination, advertising, confidential material or security-sensitive information. Keep observations factual, professional, location-specific and relevant. Reports are pilot observations, not official NOTAMs or operating instructions; moderation does not verify an airport's operational status. Other pilots can report an inappropriate note and block its author. Moderators review relevance, wording, privacy and safety before publication.
6. Current airport weather and aeronautical data. Current online weather is enabled by default and can be switched off at any time in More. When it is enabled and you view current conditions or an airport-information card, the app sends the airport ICAO code to our Cloudflare weather endpoint and/or the public AviationWeather.gov service to retrieve METAR and TAF reports. It may also fetch public space-weather status from NOAA. These requests do not include your OFP file, personal notes or crew identity.
7. Live Route Assist (optional). If you start Live using Flight API, the app sends the loaded flight number and, when available in the OFP, an operational callsign or aircraft registration to our Cloudflare position service. That service queries Flightradar24 and returns the reported position, track, speed, pressure altitude, timestamp and coverage status. If you choose GPS, your raw device-GPS fix is processed on the device and is not uploaded to Forwardity. Live may still request the airport, weather, terrain and map data described in this policy. You can stop Live or switch from Flight API to GPS at any time.
8. Terrain overlay. To shade high terrain on the map, the app requests public Mapzen terrain tiles hosted through AWS Open Data for the visible map area. Tile identifiers reveal the approximate area being viewed and, in Live mode, may therefore reflect the area around the aircraft. The request also carries ordinary network information such as an IP address that the hosting provider receives when serving internet content.
9. Purchases. NOTIME offers optional auto-renewable subscriptions (NOTIME Pro, monthly or yearly). All payments are handled by Apple through the App Store; Forwardity does not receive your name, billing address, or payment card details. Subscription entitlement is verified on-device via Apple’s StoreKit. Separately, the signed app transaction is sent for pilot identity verification as explained above; that identity check does not grant subscription access. Free-tier usage counts are stored locally and never transmitted. Subscriptions can be managed or cancelled at any time in your device Settings under Apple ID → Subscriptions.
10. Anonymous usage analytics and optional survey (upload). Anonymous app-use analytics are off by default. If you switch them on in More, the app sends counts of a few events — for example the app being opened, a demo or a real OFP being loaded, the subscription screen being shown, and a subscription starting — together with the app version. If analytics are on and you choose to answer the optional prompt about why you did not subscribe, your selected answer is also sent. This information contains no OFP content, route, position, flight identifier, voice content, crew identity, or on-device personalisation identifier. It is used only to improve the app; it is never sold and is not used for advertising. You can withdraw consent at any time by switching analytics off in More.
Pasted Route Mode
When you build a briefing from a pasted route, the app sends the route text you enter, selected airports and runways, aircraft type, planned departure and duration, cruise level, optional flight identifier, and airport-selection settings to our Cloudflare route service. The service uses airac.net to resolve navigation information, FAA NOTAM services for notices, and AviationWeather.gov for weather. Navigation queries include the route and airport/runway identifiers needed to resolve it. Weather and NOTAM queries use the relevant airport or airspace identifiers. The service builds a briefing and returns it to your device. Changing the planned delay can repeat these requests with revised timing. This flow is separate from importing an OFP file for on-device parsing. Do not paste crew details or confidential information into the route field.
Legacy cloud accounts and saved briefings
The current app has removed email sign-in and cloud briefing saving. Earlier versions offered optional Supabase accounts with email codes delivered through Zoho. An explicit Save current briefing action uploaded the full OFP source, briefing snapshot, title and save time. Those documents can contain names or crew details. Removing the feature, upgrading, signing out or uninstalling does not automatically delete previously stored accounts or snapshots. The previous 48-hour reopening limit was not a deletion schedule.
To request access, export or deletion of a legacy account and saved briefings, email info@forwardity.io, preferably from the email address used for that account. We may request proportionate verification before releasing or deleting data. Do not send passwords, sign-in codes, Apple transaction proofs or your OFP unless needed and specifically requested. If an older app still provides its deletion controls, you may use those; support remains available without those controls. Legacy cloud-account deletion is separate from deletion of your Apple-linked shared pilot profile.
What we never collect or upload
- Your OFP file or its raw text automatically through the OFP import function; legacy explicit cloud saving uploaded it, and online Route Mode sends the inputs described above
- Your separately entered personal notes, FTL entries and Crew Rest entries through those local features. Legacy OFP sources explicitly saved to the cloud can contain names, crew details or other information present in the document.
- Advertising or tracking identifiers — we do not advertise or sell data
Online transmissions include Route Mode inputs; briefing facts and an optional saved first name for Voice Dispatch; map areas for upper wind; flight identifiers for Flight API tracking; and the first name, private profile identity, report text and location for shared Pilot Threats. These flows are detailed above. Private threat notes are not uploaded. OFP import does not send the full file or its raw text. Legacy cloud accounts may retain previously uploaded sources, snapshots, email and account identifiers. Current pilot identity uses the Apple-signed proof and hashed account linkage described above, plus a saved first name and pilot code when supplied.
Service providers
Pasted Route Mode additionally uses airac.net for navigation resolution and FAA NOTAM services for notices, through our Cloudflare route service. The requests and fields involved are described in Pasted Route Mode above.
Legacy accounts and saved briefings use Supabase (authentication and private cloud storage) and Zoho (sign-in email delivery). We use Cloudflare (hosting and data endpoints), ElevenLabs (AI voice, only during a Call Dispatch session), Apple (purchases, signed app identity and private iCloud storage), Flightradar24 (Flight API position), AWS / Mapzen (terrain tiles), and public aeronautical/mapping sources including AviationWeather.gov, NOAA and OpenStreetMap (© OpenStreetMap contributors, ODbL). Each receives only the limited data needed for the relevant request as described above. Internet providers may receive ordinary request metadata, including IP address and time, under their own privacy and security practices.
International data transfers
Our service providers may process the limited data described above on servers outside your country, including in the United States. Where required, transfers rely on the providers’ own safeguards. Data processed on your device is not transferred.
Your rights
Subject to applicable law, you may request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. You may withdraw consent without affecting processing already carried out. In More, update your first name or select Delete my shared profile and reports to remove the linked server profile, its reports and account linkage across linked devices. This clears the current device’s saved name and credential; other devices may retain local cached information until refreshed. Private notes remain until separately deleted. Using the shared feature again may create a new profile, but does not restore deleted reports. This action does not cancel an Apple subscription or delete legacy cloud briefings.
For legacy cloud data, lost-credential requests or other privacy requests, contact info@forwardity.io. We verify ownership before disclosing data and respond within applicable legal time limits. You may also complain to the data-protection authority in your jurisdiction, including the UK ICO or your EU/EEA supervisory authority where those laws apply. Removing the app alone does not request deletion of server records.
Legal basis
Where GDPR/UK GDPR applies, providing features you request — Apple-linked profile recovery, shared report submission, Route Mode, weather and Flight API retrieval, and legacy account access — relies on performance of our contract with you. Optional analytics and optional voice processing rely on consent, which you can withdraw by disabling analytics or ending/declining a voice session. Moderation, abuse prevention and service security rely on legitimate interests in protecting users and operating a safe service, subject to your rights and a balancing of those interests. We may retain information where required by a legal obligation. Other applicable privacy laws may provide corresponding lawful grounds and rights.
Retention
Chart-feedback records are retained to improve chart coverage; opted-in analytics and surveys are aggregate counts. Pilot account hashes, device-credential digests, profile linkage and reports are retained to provide recovery, administration and moderation until deleted. Deleting the shared profile removes its live account linkage and linked reports; the raw signed Apple proof is not retained by the identity application. Approved reports are excluded from public retrieval after 365 days without a moderation update, but this does not automatically delete the stored report. Pending and rejected reports are not public. Delete your profile and reports in More or contact us about retention and deletion. Cloudflare hosts these records and may retain ordinary security logs and recovery backups under its service policies. Deletion removes live service records; backup recovery retention may differ. Cloud accounts and saved snapshots remain until you delete them or request deletion. Removing a snapshot or deleting a cloud account removes the live records; provider security logs and recovery backups may have different retention periods under their service policies. The 48-hour reopening limit does not automatically delete cloud records. Device-only notes remain until you delete them or clear app data.
Data storage
Imported Operational Flight Plans and the app’s local briefing copy are stored on your device. If you explicitly saved a briefing through an earlier version, its full source and snapshot may remain in Supabase until deleted. Deleting the app or clearing local storage does not delete that cloud account or its saved snapshots. Route Mode also sends inputs for remote processing as described above; clearing local storage does not by itself delete any records held by service providers. You can remove locally held data by removing the files, clearing the app’s local storage, or uninstalling the application. Contact us for requests concerning remotely processed data.
Diagnostics
If you choose to enable Apple’s crash reporting or diagnostic services, anonymous technical information may be provided directly to Apple under Apple’s own Privacy Policy. Forwardity does not receive the contents of your Operational Flight Plans through these reports.
Aviation use
NOTIME is an informational and situational-awareness aid for qualified aviation professionals. It is not an official aviation source and must not be used as a substitute for official flight documentation, company procedures, regulatory requirements, or pilot judgment.
Summaries and filters can omit relevant information. Review full source documents and verify dates, coverage and operational information using current official and company-approved sources. Our Aviation Terms and Important Notice explain source limits, the current online NOTAM testing environment and permitted use. This Privacy Policy describes personal-data handling; it does not certify the app or grant rights to third-party data.
Children’s privacy
NOTIME is a professional tool intended for pilots and is not directed to children.
Changes to this policy
We may update this Privacy Policy from time to time. Any revisions will be published on this page together with an updated Effective Date.
Contact
Sacha Khamnei — NOTIME publisher, Umm Al Quwain, United Arab Emirates — info@forwardity.io · forwardity.io