App Privacy Policy
Last updated: November 2026
This is a translation. If the English and German versions differ, the German version applies. German original
1. Controller
Viral Vision LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA
Represented by: Tinus Klauser
Email: help@skyhush.app
2. In short
Skyhush has no user account and no login. We do not use tracking and do not show ads. For usage statistics we use PostHog (EU servers), without your name, route or location, and you can turn it off in the app (section 7). Your location stays on your device. For the forecast, only the coordinates of points along your flight route are sent to our server, which looks up the matching weather data. If you share a flight with your family (Premium), our server stores that flight's route and times until shortly after landing (section 6).
3. Calculating the turbulence estimate
You enter the departure airport, destination airport and date. From this, the app calculates a rough turbulence estimate based on weather data. To do this, the app sends the coordinates of points along the route to our server. Neither your location nor any information about you is sent.
The request goes through our own server at skyhush.app/api. It is operated by Netlify, Inc. (USA) and reads the weather data from our own data storage at Netlify. The route points are not passed on to any other weather service. We download the weather data itself from ECMWF at regular intervals, independently of individual requests and without any data about you.
For flights departing soon, the server also fetches official turbulence warnings and pilot reports from the NOAA Aviation Weather Center (USA). Only a rough map area around your route is transmitted for this. If our server cannot be reached, the app requests these warnings directly from aviationweather.gov. In that case, the agency sees your IP address.
When you make a request, Netlify technically processes your IP address in order to deliver it. Our server does not write IP addresses to its logs. Netlify automatically deletes the operating logs of our server functions after 24 hours to 7 days, depending on the plan. We do not analyze them in relation to you as a person. We have a data processing agreement with Netlify. Netlify is certified under the EU-US Data Privacy Framework, which is the basis for the transfer to the USA (Art. 45 GDPR).
The legal basis is performing the function you requested (Art. 6(1)(b) GDPR), and alternatively our legitimate interest in a working app (Art. 6(1)(f) GDPR).
Attribution: The weather data comes from ECMWF (Open Data, license CC BY 4.0) and is processed by us into our own turbulence estimate (modified).
4. Location (In-flight companion)
In the "In-flight companion", the app uses GPS to show your position on the route. This only happens while you are using the app ("When in Use"). Your location is processed only on your device. It is not transmitted to us or third parties and not stored, except temporarily in memory while the display is running. You can revoke location access at any time in the iOS settings.
5. Data on your device
The app stores your latest forecast (route, departure time, result) on your device so that it is also available offline. This data does not leave your device unless you share a flight with your family (section 6). If you delete the app, it is removed.
6. Sharing a flight with your family (Premium)
With "Let your family follow" you can share a saved flight as a link, for example via WhatsApp. Only then, and only once you tap the button, does the app send the following to our server (skyhush.app, operated by Netlify, see section 3): departure and destination airport (code, city, coordinates, time zone), scheduled departure time, flight duration and the smooth and bumpy stretches of the estimate. If you tap "We've taken off" or "Tell your family you've landed" in the companion, the respective time is added. If the app gets a new estimate 24 or 3 hours before departure, it updates the stretches. Your name, your location, your flight number and any identifier of your device are not sent. The flight can, however, be identified from the route and departure time.
Takeoff and landing from flight data. So that your family does not have to wait for you to report in, our server looks up the matching scheduled flight by route and departure time on the public departures board and checks its status around departure and landing (takeoff, landing, delay, cancellation). This only happens while someone has the flight page open. The source is the flight data service AeroDataBox (via API.Market). Only the flight number, airports and date are transmitted, nothing about you. We store the flight number found together with the other information and delete it with it. It is not shown on the flight page.
The server stores this information in our data storage at Netlify under a random identifier. Anyone who has the link can open the flight page without signing in, so only pass it on to people who should see your flight. Only your app can change the information, using a secret key that stays on your device. We delete the information automatically 6 hours after landing. If neither takeoff nor landing is known, we delete it 24 hours after the scheduled landing, so that a long delay does not end the page early, and in any case no later than 30 hours after it. If you remove the flight in the app, we delete the link right away. After that, it only shows that the flight is over. To prevent abuse, the server counts how many links are created per day from one IP address. It does not store the IP address itself, only a one-way hash combined with the date, and deletes it the next day. People who open the flight page are informed in the privacy policy of our website.
The legal basis is performing the function you requested (Art. 6(1)(b) GDPR). In the usage statistics (section 7) we only see that a link was shared and through which app (e.g. WhatsApp), not which flight.
7. No account, no ads, usage statistics
There is no user account and no login. The app contains no ads and no third-party tracking tools.
Usage statistics with PostHog. So that we can see which parts of the app help and where people get stuck, we use the analytics service PostHog (PostHog Inc., San Francisco, USA) with servers in the EU (Frankfurt). The app sends events such as "app opened", "forecast shown" or "Premium page viewed", together with a random identifier that the app creates on installation, as well as the app version, iOS version, device type and language setting. The identifier lets us see whether the same installation comes back. It is not connected to your name, email address, Apple ID or advertising ID. Flight routes, flight numbers and your location are not sent to PostHog. PostHog does not store IP addresses. No data from other apps or websites is combined, there are no ads and nothing is shared with ad networks.
The legal basis is our legitimate interest in improving the app (Art. 6(1)(f) GDPR). You can object at any time: turn off Info → "Share usage statistics" in the app and it sends nothing more. We have a data processing agreement with PostHog. Access from the USA is possible and based on standard contractual clauses (Art. 46(2)(c) GDPR). We keep the events for at most 12 months. PostHog privacy policy: https://posthog.com/privacy
Purchase statistics with RevenueCat. Purchases still go exclusively through Apple. So that we can see how many free trials turn into a subscription, renew or are cancelled, we also use RevenueCat (RevenueCat, Inc., San Francisco, USA). The app sends your purchases in Skyhush (product, time, price, App Store country, Apple's transaction ID) together with a random identifier; Apple also notifies RevenueCat of renewals, cancellations and refunds. The identifier is linked to the random PostHog identifier so that purchase events appear in the same statistics. RevenueCat does not receive your name, email address, Apple ID, payment details, flight data or location. The legal basis is our legitimate interest in improving our offer and prices (Art. 6(1)(f) GDPR). If you turn off "Share usage statistics", the app also stops sending anything to RevenueCat from the next launch. We have a data processing agreement with RevenueCat; transfers to the USA are based on standard contractual clauses (Art. 46(2)(c) GDPR). RevenueCat privacy policy: https://www.revenuecat.com/privacy
8. Purchases and notifications
In-app purchases. Purchases and subscriptions are handled by Apple. We do not receive any payment data, Apple processes payments under its own privacy policy. The app checks on your device, through Apple, whether a purchase or subscription is active. We do not store anything about this on our servers.
Updates before departure. If you allow notifications and save a flight, the app schedules local notifications 24 hours and 3 hours before departure. The saved flight (airports and departure time) stays on your device unless you share it (section 6). Shortly before, the app updates the estimate in the background through our server, as described in section 3. You can turn off notifications at any time in the iOS settings.
9. Sharing with third parties
We do not sell any data. Data is only shared with the services named above, as far as necessary for the respective function.
10. Children
The app is not specifically aimed at children. We do not collect data that can be linked to individual persons.
11. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Similar rights exist under the Swiss Federal Act on Data Protection (FADP). To exercise them, write to us at help@skyhush.app. Since we do not keep any personal data about you ourselves, we can only give you limited information on many points. You can also file a complaint with a data protection supervisory authority, for example the authority where you live.
12. Changes
We update this policy when the app or the legal situation changes. You can always find the current version here.