Privacy Policy

BriefingPackage ("we," "our," or "us") is committed to protecting your privacy and ensuring transparency about how your data is collected, used, and stored. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

1. Information We Collect

1.1 Information You Provide

When you use the app, we may collect:

• Email Address: For account registration and login via Firebase Authentication
• Authentication Credentials: Handled securely by Firebase Authentication
• Flight Briefing Inputs:
  • Origin and destination ICAO codes
  • Alternate airports
  • Departure date and time
  • Route information

1.2 Location Data

1.3 Voice Data

1.4 Automatically Collected Information

• Device Information: OS version, app version
• App Usage Data: Feature usage, quota usage
• Network Status: To determine online/offline capability

1.5 Information We Do NOT Collect

• ❌ Briefing data (stored locally on your device only)
• ❌ Flight plans or flight planning data
• ❌ Location data (processed temporarily, not stored)
• ❌ Continuous location tracking
• ❌ Raw voice recordings (Vosk is offline-only)
• ❌ Camera/photos
• ❌ Contacts
• ❌ Calendar data
• ❌ SMS or phone data
• ❌ Financial information
• ❌ Health data

2. How We Use Your Information

We use the collected information for the following purposes:

• Core Functionality: To provide weather briefings, NOTAMs, hazard alerts, and aviation information
• Location-Based Features: To find and display nearest airports on dashboard, show airport information based on your location
• Account Management: To create and manage your user account
• Local Data Storage: To save your briefing data and history on your device for future reference
• AI-Powered Analysis: To generate intelligent briefing summaries (VIP tier only)
• Quota Management: To manage daily usage quotas based on tier (Free, Premium, VIP)
• App Improvement: To understand usage patterns and improve features
• Support: To respond to your inquiries and provide customer support

3. Third-Party Services & Data Storage

We use the following trusted third-party services to operate our app:

3.1 Firebase (Google Cloud Platform)

• Services Used: Authentication, Firestore Database
• Data Stored in Firebase:
  • User account information (email, user ID)
  • Quota usage data (daily/lifetime limits based on tier)
  • Usage logs (for quota management and support)
• Data NOT Stored in Firebase:
  • Briefing data (stored locally on device)
  • Flight information
  • Location data
• Purpose: User authentication and quota management
• Security: All data encrypted in transit (HTTPS), Firebase security rules enforced
• Privacy Policy: Firebase Privacy

3.2 Appwrite Cloud Storage

• Services Used: Database and backend services
• Data Stored in Appwrite:
  • NOTAM data (aviation notices)
  • Weather data (METAR, TAF)
  • Operational reference data
• Data NOT Stored in Appwrite:
  • Personal user information
  • Your briefing data (stored locally on device)
• Purpose: Operational data storage and backend functionality
• Location: Our private VPS server
• Security: HTTPS encryption, access control, isolated environment

3.3 VIP AI Briefing Backend

3.4 Aviation Data Providers

• Sources: National AIS publications, meteorological agencies, recognized aviation data providers
• Data Shared: Only airport codes and route information (no personal data)
• Purpose: To fetch weather data (METAR/TAF), NOTAMs, and hazard alerts (volcanic ash, tropical cyclones)
• Examples:
  • NOAA (National Oceanic and Atmospheric Administration)
  • FAA (Federal Aviation Administration)
  • BMKG (Badan Meteorologi, Klimatologi, dan Geofisika Indonesia)
  • AWS (Aviation Weather Service)
  • VAAC (Volcanic Ash Advisory Centres)
  • UCAR/NCAR (University Corporation for Atmospheric Research)
  • Other public aviation information sources

4. Data Security

We implement appropriate technical and organizational measures to protect your data:

• ✅ All data transmission uses HTTPS encryption
• ✅ Passwords are never stored in plain text
• ✅ Firebase Authentication provides industry-standard security
• ✅ Access to databases is restricted and monitored
• ✅ Backend server isolated in private VPS environment
• ✅ Container isolation for backend services
• ✅ Regular security updates and patches
• ✅ Voice data processed offline (Vosk) - never uploaded

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

5. Data Retention

6. Your Rights and Choices

6.1 Location Permissions

• You can deny location access (app still works with manual ICAO input)
• Revoke location permission anytime in device Settings → Apps → BriefingPackage → Permissions

6.2 Voice Permissions

• Microphone access is only for voice input feature (Vosk offline)
• You can deny microphone access (app still works without voice input)
• Revoke microphone permission in device Settings → Apps → BriefingPackage → Permissions

6.3 Data Access and Deletion

You have the right to:

• Access: View all your stored data within the app (Settings → Account)
• Update: Modify your account information
• Delete Briefing Data: Clear local cache through your device's app settings
• Account Deletion: Permanently delete your account and all associated data from our servers

6.4 How to Delete Your Data

Deleting your account will permanently remove:

• Your authentication record (Firebase)
• Associated user data in Firestore (quota, usage logs)
• Cached AI briefings from our server

Note: Briefing data and history stored locally on your device must be cleared separately through your device's app settings (Settings → Apps → BriefingPackage → Clear Data).

7. Children's Privacy

BriefingPackage is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at briefingpackage@gmail.com, and we will delete such information.

8. International Data Transfers

Your information may be transferred to and stored on servers located outside your country of residence, including the United States and other countries where our service providers operate (Firebase - Google Cloud, Appwrite - VPS). By using the app, you consent to the transfer of information to countries outside your country of residence, which may have different data protection rules.

9. Data Sharing

We do not sell or rent your personal data.

We may share data only:

• When required to operate core app functionality (Firebase, Appwrite, AI providers)
• With trusted service providers under strict confidentiality agreements
• When legally required by applicable laws or valid legal process

10. Offline Capability & Local Storage

BriefingPackage supports offline operation for certain features:

• Voice Input: Vosk offline speech recognition works without internet
• Cached Data: Previously fetched briefings stored locally on your device
• Local Storage: App preferences, briefing data, and history stored on your device only

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this Privacy Policy
• Posting an in-app notification for significant changes
• Sending an email notification (for material changes affecting your rights)

Your continued use of the app after such modifications will constitute your acknowledgment of the modified Privacy Policy and agreement to abide by the terms of the updated Privacy Policy.