01Who we are
Altivra is a pilot productivity tool built by a working commercial pilot. We collect the minimum data required to run the product, treat your data the way we'd want our own handled, and never sell it. This policy explains what we collect, why, where it lives, and what rights you have over it.
"Altivra", "we", "us", and "our" refer to Altivra, operated by Altivra Studios (the data controller). "You" refers to any pilot using the website (altivra.app) or the Altivra apps for iPad and iPhone.
02Information we collect
Waitlist (website)
- Email address — when you submit the beta access form
- Technical metadata — timestamp, browser user agent, referrer (for spam prevention and to understand where visitors come from)
Account (apps)
- Name, email, password hash — when you create an account (passwords are stored only as a salted hash by our authentication provider; we never see your plaintext password)
- Flight logbook data — entries you add, import, or enrich
- Roster data — the structured duty information parsed from rosters you import. We do not retain the raw text or original file of your imported roster PDFs after parsing.
- Fatigue data — rest periods, sleep markers, layover context
- Pay data — payslip information you enter or upload for verification against your contract
- Preferences & settings — your configuration of the app
- Subscription status — your current tier and renewal state, received from Apple (we never receive your full payment card details)
Device & diagnostic data
- Device model, OS version, app version (for compatibility and crash reports)
- Anonymized usage analytics — which features you open, session frequency. This data is never tied to your personal identity.
Health data (Apple HealthKit) — opt-in only
If you grant permission, the app reads the following data from Apple HealthKit to auto-fill your Sleep Log, inform FRMS fatigue scoring, and surface recovery trends. Each data type can be granted or denied independently at any time in iOS Settings → Privacy & Security → Health → Altivra.
- Sleep analysis — sleep periods and stages (REM, deep, light, awake). Auto-fills your Sleep Log and feeds the fatigue engine.
- Heart rate variability (HRV) — trended to surface recovery status alongside your fatigue score.
- Resting heart rate — baseline tracking to detect over-exertion patterns across long-haul rotations.
- Active energy, steps, and workouts — context for exercise recommendations between flights and during layovers.
Altivra only reads health data — it never writes to HealthKit and never modifies your records. Health data is processed entirely on your device and is never transmitted to Altivra's servers, Firebase, FlightAware, Anthropic, or any third party. Apple's HealthKit framework enforces this at the operating system level. We never use HealthKit data for advertising, marketing, or any use-based data mining. You can revoke any or all permissions at any time in iOS Settings, and the app gracefully degrades to manual sleep entry if permissions are denied.
03How we use your data
- Deliver the app's features (roster display, fatigue tracking, pay verification, etc.)
- Authenticate you and sync your data across your devices
- Send beta access emails to waitlist subscribers
- Troubleshoot issues using crash reports and provide support
- Improve the app through aggregate usage analytics
- Comply with legal obligations and protect the security of the service
We do not use your data for advertising, profiling, or training third-party AI models on your personal information.
If you are in the EU, UK, or another region with comparable law, our legal bases for processing are: performance of our contract with you (to provide the app), your consent (for HealthKit access and waitlist email), our legitimate interests (security, diagnostics, product improvement), and legal obligation where applicable.
04Where your data lives
We want to be precise and honest about this, because security claims matter.
- Apple Health (HealthKit) data — stays on your device only. Read by the app, processed locally, never uploaded. Apple's HealthKit framework enforces this at the OS level — even Altivra's own servers cannot access it.
- Account, logbook, roster, pay, and fatigue data — stored in Google Firebase / Firestore (Google Cloud infrastructure), encrypted in transit (TLS) and at rest. Access is restricted by Firestore security rules so that each account can only read and write its own data.
- Our access. This Firestore data is not end-to-end encrypted. As the operator of the service, we are technically able to access stored data when strictly necessary — for example, to provide support you request, to investigate a security incident, to keep the service running, or to comply with a valid legal obligation. We do not browse your data casually, we never sell it, we never share it with your airline or employer, and we never use it for advertising.
- On-device cache — a copy of your data is cached on your device for offline use and is protected by your operating system's standard data protection (device encryption).
05Third parties we work with
Altivra is small. To run the product, we rely on carefully selected third parties, and we send them only the data they need to do their job. Each acts as our processor under a data processing agreement where applicable.
- Google / Firebase — authentication, Firestore database, Cloud Functions, and crash reporting. Stores and processes account and app data on our behalf under Google's data processing terms.
- Apple — handles App Store subscription billing and delivers subscription status to the app. Governed by Apple's privacy policy. We never receive your full payment details.
- FlightAware (SUPER tier only, v1.1) — receives your flight number and date to enrich your logbook with real routing, block times, and gate info. No personal identifiers are sent.
- Anthropic (Wingman+ AI, included in HEAVY at sensible caps and unlocked further in SUPER) — processes your natural-language queries. We send only the minimum context needed to answer each question; queries are not used to train Anthropic's models under our API terms.
- Vercel — hosts the altivra.app website (where you're reading this). Processes standard server access logs.
06International data transfers
Our infrastructure providers (Google, Apple, Vercel, Anthropic) may process and store data on servers located outside your country of residence, including in the United States. Where personal data is transferred internationally, we rely on the safeguards offered by these providers, such as Standard Contractual Clauses and equivalent mechanisms, to protect your data consistent with applicable law.
07Data retention
We keep your account data for as long as your account is active. When you delete your account, we delete your associated personal data from our active systems, typically within 30 days, except where we are required to retain limited records to comply with legal, tax, or security obligations. Backups containing residual copies are overwritten on a rolling basis. Anonymized, aggregate analytics that cannot identify you may be retained.
08What we don't do
- We don't sell your data. Ever.
- We don't share your data with your airline, your carrier, or any other aviation employer.
- We don't send your HealthKit data anywhere. Sleep, HRV, heart rate, and activity read from Apple Health stay on your device. Never uploaded, never logged on our servers, never seen by us, never shared with any third party.
- We don't show ads, and we don't use your data for advertising.
- We don't track you across the web — no cross-site cookies, no fingerprinting.
- We don't use your content to train AI on a population level.
09Your rights
- Access — request a copy of all data we hold about you. Email legal@altivra.io.
- Delete — delete your account and all associated data. In-app, one tap: Settings → Account → Delete account. For website-waitlist deletion, email contact@altivra.io.
- Export — download your logbook (CSV, PDF), roster, pay history, and fatigue log at any time from within the app.
- Correct — edit any data directly through the app.
- Object / restrict / withdraw consent — if you're in a jurisdiction that grants these rights (EU/UK GDPR, California CCPA/CPRA, and others), contact us and we'll honor your request within 30 days. You also have the right to lodge a complaint with your local data protection authority.
10Cookies
The website uses only functional storage (no tracking cookies, no advertising cookies). The apps use no cookies — they use the operating system's native secure storage.
11Children's privacy
Altivra is intended for commercial pilots, who are adults by professional requirement. We don't knowingly collect data from anyone under 18. If we learn we've accidentally collected such data, we'll delete it promptly. Parents or guardians who believe we've collected data about their child can email legal@altivra.io.
12Changes to this policy
If we make material changes to this policy, we'll notify you by email (for account holders) or by in-app announcement at least 30 days before the changes take effect. The most recent version is always live at altivra.app/privacy.
13Contact
Questions about this policy, or requests to access, correct, or delete your data:
- Privacy & data requests: legal@altivra.io
- General support: support@altivra.io
- Contact: contact@altivra.io