Privacy Policy

Last updated: March 2, 2026

1. Introduction

Welcome to Skytrek ("we," "us," "our," or the "Company"). Skytrek is operated by an individual developer ("Operator"). This Privacy Policy explains how we collect, use, store, share, and otherwise process your personal information and data when you use the Skytrek mobile application, website (including mypilotprofile.com), and any related services (collectively, the "Service"). The Service is a social platform for pilots that includes flight logging, trip organization, social networking, messaging, user profiles, and content sharing features.

By downloading, installing, accessing, or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree to this Privacy Policy, you must not access or use the Service.

2. Data Controller Information

For the purposes of the EU General Data Protection Regulation ("GDPR"), the UK General Data Protection Regulation ("UK GDPR"), and other applicable data protection laws, the data controller responsible for your personal data is the Operator of Skytrek. For inquiries regarding data protection, please contact: massiveballz@proton.me.

3. Information We Collect

We collect a broad range of information to provide and improve our Service. This includes, but is not limited to:

• Account Information: Name, email address, username, password, profile photo, pilot designation (e.g. Private Pilot, Commercial Pilot, Flight Instructor, Student Pilot, Mechanic, Aviation Enthusiast, Spotter), and any other details you provide during registration or account setup.
• User Content: All content you create, upload, post, share, or otherwise make available through the Service, including but not limited to text, photos, images, videos, comments, messages (including direct messages), kudos, posts, location data, flight data, flight tracks (KML/GPX files), routes, trip information, map data, aircraft information, and any associated metadata.
• Social Interaction Data: Information about your social connections and interactions, including follows, followers, kudos given/received, comments, direct messages, typing indicators, read receipts, blocked users, and reported content.
• Usage Data: Information about how you interact with the Service, including pages and screens visited, features used, actions taken, time spent, frequency of use, search queries (including Algolia-powered searches), click and tap patterns, notification interactions, and navigation paths.
• Device Information: Device type, operating system and version, unique device identifiers (including advertising identifiers), browser type, IP address, mobile network information, hardware settings, device language, and time zone.
• Location Data: Precise and approximate geographic location data from your device, GPS data, flight tracks, route information, airport and aerodrome location data, and location-tagged content.
• EFB and Third-Party Data: Information received from Electronic Flight Bag (EFB) applications you connect to the Service, including SkyDemon, ForeFlight, and Garmin Pilot, as well as data from any other third-party services you integrate with your account.
• Communications: Any messages, feedback, support requests, or other communications you send to us or through the Service, including the content of direct messages between users.
• Automatically Collected Data: Cookies, web beacons, pixels, analytics data, crash reports, performance logs, push notification tokens, and similar tracking technologies.

4. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases under the GDPR and UK GDPR:

• Performance of a Contract (Article 6(1)(b)): Processing necessary to provide the Service to you, including account creation, flight logging, social features, messaging, and profile management.
• Legitimate Interests (Article 6(1)(f)): Processing necessary for our legitimate interests, including improving and developing the Service, ensuring security and preventing fraud, analytics, and marketing our Service, where these interests are not overridden by your data protection rights.
• Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for specific purposes, such as push notifications, location tracking, and marketing communications. You may withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Legal Obligation (Article 6(1)(c)): Processing necessary to comply with a legal obligation to which we are subject.

5. How We Use Your Information

We may use the information we collect for any purpose related to operating, maintaining, and improving the Service, including but not limited to:

• Providing, personalizing, and improving the Service and user experience, including the social feed, search and discover features, messaging, notifications, and pilot profiles.
• Facilitating social interactions between users, including displaying your public content, profile information, and activity to other users of the Service.
• Operating the public pilot profile pages at mypilotprofile.com.
• Developing new products, services, features, and functionality.
• Creating, training, testing, and improving machine learning models, algorithms, and artificial intelligence systems.
• Conducting research, analytics, and statistical analysis.
• Generating aggregated, de-identified, or anonymized datasets for any purpose.
• Displaying, distributing, and promoting user content within the Service and on third-party platforms.
• Sending push notifications, in-app notifications, service announcements, updates, promotional materials, and marketing communications.
• Enforcing our Terms of Use and other policies.
• Complying with legal obligations and responding to lawful requests.
• Protecting the rights, safety, and property of the Company, our users, and the public.
• Any other purpose disclosed at the time of collection or with your consent.

6. Sharing and Disclosure of Information

We may share your information with third parties in the following circumstances:

• Other Users: Depending on your privacy settings, your profile information, flights, trips, posts, comments, kudos, and other content may be visible to other users of the Service. Public profiles are visible at mypilotprofile.com to anyone on the internet. Direct messages are visible to the participants of those conversations.
• Service Providers: Third-party vendors, consultants, and service providers who perform services on our behalf, including cloud hosting (e.g. Firebase/Google Cloud), search infrastructure (e.g. Algolia), analytics, push notification delivery, customer support, and marketing. These providers may be located outside your country of residence.
• Business Partners: Partners with whom we collaborate to offer joint products, services, or promotions.
• Advertising Partners: Third-party advertising and marketing partners for targeted advertising purposes.
• Business Transfers: In connection with any merger, acquisition, sale of assets, financing, bankruptcy, dissolution, or transfer of all or a portion of our business.
• Legal Requirements: When required by law, regulation, legal process, or governmental request, including requests from law enforcement agencies in any jurisdiction.
• Protection of Rights: To protect and defend the rights, property, or safety of the Company, our users, or the public.
• With Your Consent: When you have given us consent to share your information.
• Aggregated or De-Identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you, without restriction.

7. International Data Transfers

Your information may be transferred to, stored, and processed in any country where we or our service providers maintain facilities, including the United States, the European Economic Area, and other jurisdictions. These countries may have data protection laws that are different from the laws of your country of residence.

If you are located in the EEA, UK, or Switzerland, we rely on the following transfer mechanisms for transfers of personal data to countries outside the EEA/UK that have not been deemed to provide an adequate level of data protection: (a) Standard Contractual Clauses approved by the European Commission or UK Information Commissioner's Office, as applicable; (b) the recipient's certification under an approved framework; or (c) your explicit consent to the transfer. By using the Service, you acknowledge and consent to the transfer of your information as described in this section.

8. Data Retention

We retain your information for as long as we deem necessary or useful for any legitimate business purpose, including after you stop using the Service or delete your account. We may retain and use your information as needed to comply with legal obligations, resolve disputes, enforce agreements, and for research and development purposes. Aggregated and de-identified data may be retained indefinitely. User content that has been shared publicly or with other users may continue to exist on the Service or in other users' records even after your account is deleted.

9. Your Content and Data License

By using the Service, you grant us a worldwide, perpetual, irrevocable, royalty-free, fully paid-up, transferable, sublicensable (through multiple tiers) license to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, publicly perform, and publicly display your content and data in any media or format, whether now known or hereafter developed, for any purpose whatsoever. This license survives termination of your account or this Privacy Policy.

10. Your Rights (EEA/UK/Swiss Users)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under applicable data protection law. To exercise these rights, please contact us at massiveballz@proton.me. We will respond to your request within the timeframes required by applicable law (generally within one month, extendable by a further two months where necessary).

• Right of Access (Article 15 GDPR): You have the right to request confirmation of whether we process your personal data and to obtain a copy of such data.
• Right to Rectification (Article 16 GDPR): You have the right to request correction of inaccurate personal data.
• Right to Erasure (Article 17 GDPR): You have the right to request deletion of your personal data in certain circumstances. Please note that we may retain certain data as permitted by law, and content shared with or copied by other users may not be fully erasable.
• Right to Restriction of Processing (Article 18 GDPR): You have the right to request restriction of processing of your personal data in certain circumstances.
• Right to Data Portability (Article 20 GDPR): You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object (Article 21 GDPR): You have the right to object to processing of your personal data based on legitimate interests, including profiling. You also have the right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in the EU/EEA Member State of your habitual residence, place of work, or place of the alleged infringement.

We may require verification of your identity before processing your request. In certain cases, we may charge a reasonable fee or decline requests that are manifestly unfounded or excessive.

11. Your Rights (US Users)

Depending on your state of residence, you may have additional privacy rights under applicable US state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), and similar state laws. These rights may include:

• The right to know what personal information we collect, use, disclose, and sell/share.
• The right to request deletion of your personal information.
• The right to opt out of the sale or sharing of your personal information.
• The right to correct inaccurate personal information.
• The right to limit use of sensitive personal information.
• The right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, please contact us at massiveballz@proton.me. We do not discriminate against users who exercise their privacy rights.

12. Security

We implement reasonable administrative, technical, and physical safeguards designed to help protect your information. However, no method of transmission over the Internet or electronic storage is completely secure. We cannot and do not guarantee the absolute security of your information. You acknowledge that you provide your information at your own risk. In the event of a data breach that affects your personal data, we will notify the relevant supervisory authorities and affected individuals as required by applicable law.

13. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 in the EEA/UK where applicable). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under the applicable minimum age, we will take commercially reasonable steps to delete such information. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us.

14. Third-Party Services

The Service may contain links to or integrate with third-party services, including EFB applications (SkyDemon, ForeFlight, Garmin Pilot), social media platforms, and other services. We are not responsible for the privacy practices, content, or security of these third parties. We encourage you to review the privacy policies of any third-party services you access. Information you share with third-party services is subject to those services' own terms and privacy policies.

15. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, local storage, and similar tracking technologies to collect information, personalize your experience, and deliver targeted content and advertising. By using the Service, you consent to our use of these technologies to the extent permitted by applicable law. You may manage your cookie preferences through your browser or device settings; however, disabling cookies may affect the functionality of the Service.

16. Automated Decision-Making

We may use automated decision-making, including algorithmic content curation and recommendation systems, to personalize the Service. This includes determining what content appears in your social feed, search results, and discover sections. These automated processes do not produce legal effects concerning you or similarly significantly affect you.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time, at our sole discretion. Changes become effective immediately upon posting the revised Privacy Policy within the Service or on our website. Where required by applicable law, we will provide notice of material changes (e.g. via in-app notification or email). Your continued use of the Service after any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

18. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a complaint, please contact us at:

massiveballz@proton.me