1. Who we are
WaiAir (“the App”, “we”, “us”, “our”) is a real-time flight tracker and travel companion for Southeast Asia, available at waiair.app.
For the purposes of the EU General Data Protection Regulation (GDPR / AVG), WaiAir is the data controller of personal data processed in connection with the App.
- Service: WaiAir
- Website: https://waiair.app
- Email: support@waiair.app
2. Scope
This Privacy Policy explains how we process personal data when you use WaiAir on iOS, Android, or the web. It covers:
- Location data — when you grant permission, to suggest the nearest airport
- Flight data — schedules, status, and search queries you request
- Push / local notifications — delay and status alerts for flights you track
- On-device preferences — tracked flights, theme, and airport selections
WaiAir does not require you to create an account. We do not sell personal data and do not use your data for advertising.
3. Data we process
3.1 Flight & usage data
- Airport codes and flight numbers you search or view
- Tracked flight identifiers, schedule metadata, and last-known status
- Selected airport, recent airports, and app preferences
- Theme preference (dark / light mode)
3.2 Location data (optional)
If you grant permission, WaiAir may access your approximate or precise location while the App is in use solely to suggest the nearest supported airport. Location is processed on-device for this purpose. We do not track your movements over time or use location for advertising.
3.3 Push & local notification data
If you enable notifications, WaiAir may send alerts about flights you choose to track — for example delays, gate changes, or boarding status. Permission is requested by your operating system and can be withdrawn at any time in device settings.
3.4 Data we do not intentionally collect
- No account registration, password, or user profile database
- No payment card data within WaiAir
- No advertising identifiers for marketing networks
4. Purposes & legal bases (GDPR Art. 6)
| Purpose | Examples | Legal basis |
|---|---|---|
| Provide core App features | Flight boards, search, live radar, connection checks, weather | Art. 6(1)(b) — performance of a contract / requested service; and/or Art. 6(1)(f) — legitimate interests |
| Nearest airport | Location read when permission is granted | Art. 6(1)(a) — consent (OS permission) |
| Delay & status alerts | Push / local notifications for tracked flights | Art. 6(1)(a) — consent (notification permission) |
| Security & reliability | Rate limiting, error diagnosis of API proxy | Art. 6(1)(f) — legitimate interests |
| Legal compliance | Responding to lawful requests | Art. 6(1)(c) — legal obligation where applicable |
Where processing is based on consent, you may withdraw consent at any time (for example by disabling location or notifications in system settings, or removing tracked flights in the App).
5. Local storage on your device
Tracked flights, theme preference, and similar data are stored locally on your device (for example via AsyncStorage). This data remains on your device unless you clear App data, uninstall the App, or remove tracked items yourself. We do not sync this data to a WaiAir cloud account.
6. Third-party services
To deliver live flight information, WaiAir requests data from independent providers. When the App calls these services, the provider may receive technical data such as IP address, request timing, and query parameters.
6.1 AeroDataBox (flight schedules / FIDS)
- Use: Airport arrival/departure boards and flight-number lookup
- Data sent: Airport codes, time windows, flight numbers you search
6.2 OpenSky Network (live radar)
- Use: Live aircraft positions on the Radar tab
- Data sent: Geographic bounding-box queries for Southeast Asia airspace
- Provider: OpenSky Network
6.3 Open-Meteo (weather)
- Use: Current weather near destination airports
- Data sent: Latitude/longitude of the relevant airport
- Provider: Open-Meteo
6.4 Grab & Bolt (optional transport links)
WaiAir may offer optional deep links to Grab or Bolt for ground transport. If you open these services, their own privacy policies apply. WaiAir does not receive your ride or payment data from these providers.
6.5 Apple, Google & Expo
Platform providers may process device identifiers, crash diagnostics, and push notification tokens according to their own terms when you install or run the App.
7. Push notifications
WaiAir uses notification APIs (including Expo Notifications) to alert you about flights you choose to track. These may be local notifications scheduled on your device or push notifications delivered via platform services.
- We request permission before sending alerts.
- You can disable notifications in your device settings at any time.
- We do not use notifications for third-party advertising.
- Notification content relates only to flights you have actively tracked.
9. Retention
- On-device tracked flights & preferences: until you delete them, clear App storage, or uninstall
- API request content: not stored as a user profile; transient processing for live responses
- Server/proxy logs (if any): kept only as long as needed for security and operations
10. Security
We take appropriate technical and organisational measures to protect personal data, including HTTPS, rate limiting, and OS sandboxing. No method of transmission or storage is 100% secure; please keep your device locked and updated.
11. Your GDPR rights
If you are in the EEA/UK, you have the following rights, subject to legal conditions:
- Access — obtain confirmation and a copy of personal data we process
- Rectification — correct inaccurate data
- Erasure — request deletion where applicable
- Restriction — request limited processing in certain cases
- Portability — receive data in a structured, commonly used format
- Objection — object to processing based on legitimate interests
- Withdraw consent — at any time, where processing is consent-based
- Complaint — lodge a complaint with a supervisory authority
In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Because most WaiAir data lives on your device, the fastest way to erase tracked flights is to remove them in the App or uninstall. For other requests, contact support@waiair.app. We will respond within one month as required by GDPR.
12. Children
WaiAir is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data through the App, contact us and we will take appropriate steps.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes will be communicated via the App, our website, or other appropriate means.
14. Contact
For privacy questions or GDPR requests:
- WaiAir
- Email: support@waiair.app
- Web: https://waiair.app