01Who we are
Altivra is a pilot productivity tool built by a working commercial pilot. We collect the minimum data required to run the product, treat your data the way we'd want our own handled, and never sell it. This policy explains what we collect, why, where it lives, and what rights you have over it.
"Altivra", "we", "us", and "our" refer to Altivra (operating under Altivra Studios). "You" refers to any pilot using the website (altivra.app) or the iPad app.
02Information we collect
Waitlist (website)
- Email address — when you submit the beta access form
- Technical metadata — timestamp, browser user agent, referrer (for spam prevention and to understand where visitors come from)
Account (iPad app)
- Name, email, password hash — when you create an account
- Flight logbook data — entries you add, import, or enrich
- Roster data — imported from your airline's crew management system
- Fatigue data — rest periods, sleep markers, layover context
- Pay data — payslip information you upload for verification against your contract
- Preferences & settings — your configuration of the app
Device & diagnostic data
- iPad model, iOS version, app version (for compatibility and crash reports)
- Anonymized usage analytics — which features you open, session frequency. This data is never tied to your personal identity.
Health data (Apple HealthKit) — opt-in only
If you grant permission, the iPad app reads the following data from Apple HealthKit to auto-fill your Sleep Log, inform FRMS fatigue scoring per FAA guidelines, and surface recovery trends. Each data type can be granted or denied independently at any time in iOS Settings → Privacy & Security → Health → Altivra.
- Sleep analysis — sleep periods and stages (REM, deep, light, awake). Auto-fills your Sleep Log and feeds the fatigue engine.
- Heart rate variability (HRV) — trended to surface recovery status alongside your fatigue score.
- Resting heart rate — baseline tracking to detect over-exertion patterns across long-haul rotations.
- Active energy, steps, and workouts — context for exercise recommendations between flights and during layovers.
Altivra only reads health data — it never writes to HealthKit and never modifies your records. Health data is processed entirely on your iPad and is never transmitted to Altivra's servers, Firebase, FlightAware, Anthropic, or any third party. Apple's HealthKit framework enforces this at the operating system level. You can revoke any or all permissions at any time in iOS Settings, and the app gracefully degrades to manual sleep entry if permissions are denied.
03How we use your data
- Deliver the app's features (roster display, fatigue tracking, pay verification, etc.)
- Send beta access emails to waitlist subscribers
- Troubleshoot issues using anonymized crash reports
- Improve the app through aggregate usage analytics
- Respond to your support requests
We do not use your data for advertising, profiling, or training third-party AI models on your personal information.
04Where your data lives
- Apple Health (HealthKit) data — stays on your iPad only. Read by the app, processed locally, never uploaded. Apple's HealthKit framework enforces this at the OS level — even Altivra's own servers cannot access it.
- Flight, logbook, pay, and fatigue data — stored in your iCloud, encrypted end-to-end. We, as a company, do not have access to the contents.
- Waitlist emails, account identifiers, Firebase Auth — stored in Google Firebase (Google Cloud), encrypted in transit and at rest
- Cached data on your iPad — encrypted by iOS using standard Apple data protection
05Third parties we work with
Altivra is small. To run the product, we rely on carefully selected third parties. We send them only the data they need to do their job.
- Google / Firebase — authentication, Firestore database, Cloud Functions. Processes account and waitlist data on our behalf under Google's DPA.
- FlightAware (SUPER tier only, v1.1) — receives your flight number and date to enrich your logbook with real routing, block times, and gate info. No personal identifiers are sent.
- Anthropic (Wingman+ AI, included in HEAVY at sensible caps and unlocked further in SUPER) — processes your natural-language queries. We send only the minimum context needed to answer each question; queries are not used to train Anthropic's models (per Anthropic's enterprise policy).
- Apple — handles iCloud encrypted sync and App Store subscription payments. Governed by Apple's privacy policy.
- Vercel — hosts the altivra.app website (where you're reading this). Processes server logs with standard access information.
06What we don't do
- We don't sell your data. Ever.
- We don't share your data with your airline, your carrier, or any other aviation employer.
- We don't send your HealthKit data anywhere. Sleep, HRV, heart rate, and activity read from Apple Health stay on your iPad. Never uploaded, never logged on our servers, never seen by us, never shared with any third party.
- We don't show ads. Not now, not at scale.
- We don't track you across the web — no cross-site cookies, no fingerprinting.
- We don't use your content to train AI on a population level.
07Your rights
- Access — request a copy of all data we hold about you. Email legal@altivra.io.
- Delete — delete your account and all associated data. In-app, one tap: Settings → Account → Delete account. For website-waitlist deletion, email contact@altivra.io.
- Export — download your logbook (CSV, PDF), roster, pay history, and fatigue log at any time from within the app.
- Correct — edit any data directly through the app.
- Object / restrict — if you're in a jurisdiction that grants these rights (EU/UK GDPR, California CCPA, etc.), contact us and we'll honor your request within 30 days.
08Cookies
The website uses only functional storage (no tracking cookies, no analytics cookies). The iPad app uses no cookies — it uses Apple's native secure storage.
09Children's privacy
Altivra is intended for commercial pilots, who are adults by professional requirement. We don't knowingly collect data from anyone under 18. If we learn we've accidentally collected such data, we'll delete it immediately. Parents or guardians who believe we've collected data about their child can email legal@altivra.io.
10Changes to this policy
If we make material changes to this policy, we'll notify you by email (for account holders) or in-app announcement at least 30 days before the changes take effect. The most recent version is always live at altivra.app/privacy.
11Contact
Questions about this policy, or requests to access, correct, or delete your data:
- Privacy & data requests: legal@altivra.io
- General support: support@altivra.io
- Contact: contact@altivra.io