The Drone App
Privacy Policy
Last updated: 2026-09-02
The Drone App is operated by COMPANY NAME, POSTAL ADDRESS, which is the controller of the data described here. Privacy questions and requests: support@thedapp.net.
The short version
We hold almost nothing, and here is the whole list. The app is built so that the answer a pilot needs — may I fly here? — is worked out on your phone, against map data already downloaded to it. We never have to ask a server where you are, so we never learn it. We have no advertising business, no analytics, and nothing to gain from knowing where you fly.
What never leaves your phone
| Data | Where it lives |
|---|---|
| Your location | Used on the device to centre the map and run the zone check, only while the app is open. We do not ask for background location, and no server is ever told where you are. |
| Flight plans (place, time, notes) | On your device. There is no server copy and no sync between devices. |
| Your drones, registrations and serial numbers | On your device. |
| Searches and places you looked at | On your device. |
| Documents you add (licence, insurance, certificates) | On your device and, if you allow it, in your own iCloud Drive, where Apple moves them between your devices under your Apple account. They never reach us. |
| Calendar events | Only if you switch calendar sync on: plans are written into your own calendar on the device. The app changes or removes only the events it created, never reads the rest of your calendar, and sends none of it anywhere. |
What we hold
| Data | Why | Legal basis |
|---|---|---|
| Your email address | Signing you in. There is no password: the app emails you a link, and that is the whole sign-in. | Performance of the contract |
| A display name, if you set one | Shown to you in the app. | Consent |
| An account identifier | Attached to crash reports so a fix can be matched to its report, and to your map-pack downloads so they can be served; erased with the account. | Legitimate interest |
That is the whole list. There is no record of where you were, what you planned, or what you flew.
Country map packs
The zone data for a country is downloaded from our storage when you add that country. Nothing is written to our database when you do: we keep no list of which countries you downloaded. The download is signed with your session, though, so the hosting provider's standard request logs record which pack files your account fetched and when. Those logs are kept for RETENTION PERIOD and are used for nothing but troubleshooting.
If the app crashes
If the app crashes, hangs, or is stopped for using too much memory, the next launch sends us the app version, your iOS version, your device model (for example iPhone 14 Pro), Apple's own diagnostic report, and your account identifier — so we can tell you when it is fixed.
Never your location. Never anything you typed. The report has no field that could carry either; that is a property of the code, not a promise about our intentions. You can see exactly what is queued to send under Profile → App → Diagnostics.
Reports stay with your account and are erased when you delete it. We intend to delete them automatically after ninety days as well, and this page will say so once that is in place.
Who else sees anything
| Who | What they receive | Why |
|---|---|---|
| Supabase | Your email address, display name, account identifier, crash reports, and the request logs described above. Stored in the European Union. | Our processor: it runs the sign-in, the database and the storage the map packs come from. |
| Open-Meteo | The coordinates of the spot you ask a forecast for, to about ten metres. No account identifier, no device identifier, nothing else. | The weather service. If you choose Apple Weather in Settings instead, the same coordinates go to Apple and nothing goes to Open-Meteo. |
| Apple | Map tiles for the area you look at; the text you type into search and the region it is biased to; the coordinates of a spot when the app looks up its place name; your documents, if you use iCloud Drive; and, while the app is in beta, whatever you choose to share through TestFlight. | Apple Maps, iCloud Drive and TestFlight, under Apple's own privacy policy. |
| National aviation authorities | Some countries' zone feeds are fetched straight from the authority's servers, which see your device's IP address, as any website you visit does. In Germany the app asks the DFS geofencing service for temporary zones inside the part of the map you are looking at, so that map area is sent too. No account, no device identifier and nothing about you goes with either. | They publish the data. |
There is nobody else. No analytics product, no advertising network, no third-party trackers, no push notifications, and no sign-in through another company. The app's privacy manifest declares no tracking, and the zone check that says whether you may fly runs entirely on the device.
On the weather coordinate: we send the weather service a real point rather than a rounded one. We considered rounding it to the two-kilometre cell the app already uses for caching and chose not to, because in the mountains a rounded coordinate returns the weather of a different air mass, and a pilot acting on a wrong wind reading is a worse outcome than a weather service holding a point it cannot attribute to anyone. We would rather write that down than smooth it over.
This website
The pages on thedapp.net are static and set no cookies of ours. We run no analytics and no trackers on them. The site is served by Cloudflare, whose standard request logs see your IP address, as with any website; nothing from a visit is joined to an app account.
How long we keep it
| Data | Kept |
|---|---|
| Your account (email, display name, identifier) | Until you delete it. Deletion removes it from the live database at once and from backups within RETENTION PERIOD. |
| Crash reports | Until you delete your account, or until the ninety-day cleanup above lands, whichever comes first. |
| Storage request logs | RETENTION PERIOD, then discarded. |
| Everything on your phone | Yours. Delete the app and it goes with it; documents in your iCloud Drive stay in your iCloud until you remove them. |
Your rights
Under the GDPR you can ask for a copy of what we hold, have it corrected, restricted or erased, take it with you, or object to us holding it — whichever country you are in. Erasing is built in: Profile → Delete account, type DELETE to confirm. It erases your account and everything we hold about you, it cannot be undone, and nothing is kept back for later.
For anything else, email support@thedapp.net. A person answers, within a month at the latest. You can also complain to the data protection authority of the country you live in.
Children
The Drone App is not directed at children under 16, and we do not knowingly hold their data. If you believe a child has created an account, email us and we will delete it.
Changes
The date at the top of this page changes whenever the policy does. A material change is announced in the app before it takes effect, not published silently.
Contact
COMPANY NAME, POSTAL ADDRESS