Privacy Policy

1. About This Policy

AIVIATION LLC ("AIVIATION," "we," "us") operates Niner. This Privacy Policy covers the Niner iOS app and this page at https://aiviation.dev/niner/privacy/ (the "Website"), together the "Service."

Niner is for a single pilot flying general aviation under Part 91 in the United States.

Niner is offered only in the United States. This policy is written to United States federal and state privacy law. We do not offer the Service in the European Economic Area or the United Kingdom, and this policy does not create rights under the laws of those jurisdictions.

Under the California Consumer Privacy Act, AIVIATION LLC is the "business" responsible for the personal information described in this policy.

2. Information the App Handles

Niner does not collect your name, your email address, or your Apple ID.

All subscription purchases are processed by Apple. We never receive your payment details. The Apple subscription transaction is verified with Apple through Apple's App Store Server API. We store only a hashed identifier derived from that transaction. We never store the receipt or the transaction identifiers.

Niner stores a device identifier (Apple's identifier for vendor) in the Keychain on your device. It is stored so that it survives a reinstall, and it is shared across AIVIATION's apps on the same device.

Niner sends in-app usage events to api.aiviation.dev. The events are keyed by that device identifier. Each event includes the event name, the app version, the operating system version, and your subscription status. It does not include the content of what you did. The only exception is the copilot event, which carries the length of your question and not the question text. The events record:

• Opening the app, and the app moving to the foreground or the background.
• A subscription screen shown or dismissed, and a purchase that succeeded or failed.
• A suggestion of another AIVIATION app shown, tapped, or dismissed.
• A flight planned, ready, active, or complete.
• A detected phase of flight.
• A checklist completed.
• An aircraft profile created or generated.
• A debrief viewed.
• A warning about recent flight experience.
• A weight and balance calculation.
• A performance calculation.
• An alternate evaluated.
• A copilot question.

Niner does not offer an in-app control to turn these events off. To ask for access to them, or to ask us to delete them, email privacy@aiviation.dev.

To count free briefings, we store a one-way hash of the device identifier.

You can upload a Pilot's Operating Handbook or an Airplane Flight Manual. We delete the uploaded file within one day and the information we extract from it within two days.

When you use an AI feature, the inputs go to our servers at api.aiviation.dev and to Anthropic's Claude through Amazon Bedrock in US AWS regions. No other AI provider receives them.

• Briefing summary. We send only results your device has already calculated, such as whether an alternate is required, weight and balance, performance, the fuel plan, and the risk result. We do not send your route, airports, location, or Pilot's Operating Handbook.
• AI debrief. We send the fields our servers accept: a flight identifier, whether the flight was under visual or instrument rules, the departure, destination, and alternate airports, the aircraft make and model, how long each phase of flight lasted, the names of checklist items you skipped, and a summary of the stabilized approach. Those fields never include your location, tail number, call sign, clearance text, or name.
• Copilot questions. We send your question text. Our servers add excerpts from FAA documents before it goes to the model.
• Preflight assist. We send weight and balance, performance, and inspection numbers, plus the aircraft profile name you typed. That name is text you entered, and it may include a tail number. We do not send your name, pilot certificate, medical information, flight hours, or airport or route identifiers.

A flight track lookup sends the tail number and a time range to our servers at api.aiviation.dev. It does not send your position.

The app records your position on the device when the phase of flight changes and, if iCloud sync is on, stores it in your own private iCloud account (Apple). We do not receive that record. Your location is never sent to AIVIATION. Apart from your own iCloud account, if you turn on iCloud sync, it is never sent to any third party. During an active flight, Niner keeps reading your location while it is in the background, so it can keep detecting the phase of flight and prompting the right checklist with the app not on screen. iOS shows its own indicator while it does. Airspace (temporary flight restrictions), weather, and notices to airmen (NOTAM) lookups use airport identifiers and airport coordinates, never your device position. A time-zone lookup may send an airport coordinate to Apple. That is airport data, not your device position. Your breadcrumb track and your altimeter readings stay on your device and are not sent to AIVIATION or to any third party.

3. Working with Clearance AI on Your Device

Clearance AI is a separate app we publish that listens to ATC and shows the clearances it extracts. If you have both apps installed on the same device, they exchange two things through a storage area on your device that iOS shares between apps published by AIVIATION LLC. Both directions stay on your device. Nothing in this exchange is sent to us or to anyone else, and we do not receive it.

What Niner reads

While a flight is active, Niner reads the clearance Clearance AI currently shows -- the clearance type, the structured values on that board (such as runway, taxi route, altitude, heading, speed, and squawk), a one-line summary of it, the phase of flight, and whether Clearance AI is listening. Niner uses this only to time checklist prompts and to show one read-only line with the most recent clearance. Niner does not store a clearance board and cannot change anything in Clearance AI. This exchange contains no audio, no transcript, no aircraft call sign or tail number, and no location. Clearance AI controls it: its Settings has a "Share live clearances with Niner on this device" switch, which is on by default and which you can turn off there at any time.

What Niner sends

Only when you tap to send it, Niner writes your flight plan -- departure, destination, alternate, filed route, filed altitude, and route points -- into the same shared area and opens Clearance AI so it can pick it up. Clearance AI deletes the hand-off once it has read it, and in any case ignores and deletes one older than 24 hours; Niner keeps only your few most recent hand-offs. Your aircraft call sign and tail number are never included. Once Clearance AI has your plan, Clearance AI's own privacy policy governs what it does with it.

The on-device exchange with Clearance AI described in Section 3 is not received by us and is not part of Niner's App Store privacy information.

4. This Page

• Website usage events. Pages on the Website send an analytics event to our own servers when a page loads and when you click a link to the App Store. A page-load event records the path of the page you viewed, the hostname of the site that referred you (the hostname only, not the full referring address), and any campaign parameters in the link you followed. An App Store click event records the path of the page, which link you clicked, and any campaign tag carried in that link. We use these events to understand which pages and referral sources lead people to our apps.
• Server request logs. The servers we operate record the requests they receive, including the Internet Protocol (IP) address the request came from, the time of the request, the route requested, and the response status. Our hosting provider also necessarily receives your IP address in order to deliver the pages you request. We use these records to operate, troubleshoot, and secure the Website.
• Email correspondence. If you email us, we receive your email address and whatever you put in the message, and we keep the correspondence so we can respond and keep a record of the request.

The Website sets no cookies, writes nothing to your browser's storage, and does not create or store any identifier for you or your browser. Our servers do not return an identifier to your browser. The usage events described above carry no identifier that would let us connect one page view to another, or to you.

Before sending anything, the Website checks your browser for a Do Not Track or Global Privacy Control signal. If either signal is set, the Website sends no usage event at all.

We do not use third-party analytics services, advertising networks, pixels, or advertising identifiers, and we do not track you across other companies' websites or apps. The usage events described above go only to our own servers.

5. How Long We Keep Information

• Data exchanged with Clearance AI on your device (Section 3): the live clearance item is replaced as it changes and is deleted when you turn Clearance AI's sharing setting off; a flight plan you send is deleted by Clearance AI once it reads it, and in any case after 24 hours; Niner keeps only your few most recent hand-offs. We never receive any of it.
• Pilot's Operating Handbook and Airplane Flight Manual uploads. We delete the uploaded file within one day and the information we extract from it within two days.
• App usage events: one year, then automatically deleted.
• AI debriefs: 30 days, then automatically deleted.
• Briefing summaries, copilot questions, and preflight assist. We use them to produce the result and do not store them. Our server logs, kept for 30 days, record that a request was made.
• Flight track lookups. Our server logs record the tail number and the time range for 30 days.
• Website usage events: one year, then automatically deleted.
• Request logs containing IP addresses: on the servers we operate, 30 days, then automatically deleted. As Section 4 explains, our hosting provider also receives your IP address in order to deliver the pages you request. Any logs that provider keeps of those requests are held under its own terms, for a period we do not set and do not control.
• Email correspondence: for as long as we need it to handle your request and keep a record of it.

Where we do not state a fixed period, we keep information for as long as we need it for the purpose we collected it for. In deciding how long that is, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, whether we can achieve the purpose by other means, and any legal, accounting, or reporting requirement that applies. When we no longer need information, we delete it or de-identify it.

6. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose information as follows:

• Service providers. Amazon Web Services hosts the Website and the servers that receive the usage events and request logs described in Sections 2 and 4, and processes that information on our behalf as our service provider. Amazon Web Services also stores Pilot's Operating Handbook and Airplane Flight Manual uploads and processes them on our behalf. We delete the uploaded file within one day and the information we extract from it within two days.
• AI processing. AI-feature inputs go to Anthropic's Claude through Amazon Bedrock in US AWS regions. No other AI provider receives them. Amazon Web Services states: "Users' inputs and model outputs are not shared with any model providers." Amazon Web Services also states that neither AWS nor Anthropic will use these inputs or outputs to train any AI model.
• Aviation data services. The FAA NOTAM Management Service, aviationweather.gov, and nasstatus.faa.gov each receive only airport identifiers, airport coordinates, or route points. We send them no identifier for you or your device, and they never receive your device position.
• Apple App Store Server API. We use Apple's App Store Server API for subscription checks. The Apple subscription transaction is verified with Apple there.
• Your iCloud account. If iCloud sync is on, the position records in Section 2 are stored in your own private iCloud account (Apple). We do not receive them.
• Professional advisors. Lawyers, accountants, auditors, and insurers, in the course of the services they provide to us.
• Authorities and legal process. Law enforcement, regulators, courts, and other parties, where we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, safety, or property of AIVIATION, our users, or others.
• Business transferees. In connection with an actual or prospective merger, acquisition, financing, sale of assets, insolvency, bankruptcy, or receivership, personal information may be disclosed to the counterparty, successor, or assignee as one of our business assets.

There is no crash reporting, no third-party analytics, and no email or text-message vendor.

The on-device exchange with Clearance AI is not a transfer to another company and not a disclosure to a third party: the data stays in your device's storage, we do not receive it, and no one outside AIVIATION LLC can read it.

7. Your Choices

• Sharing with Clearance AI. Clearance AI's Settings has a "Share live clearances with Niner on this device" switch, on by default, which controls what Niner can read. Niner never sends your flight plan to Clearance AI unless you tap to send it.
• Usage events. Niner does not offer an in-app control to turn usage events off. To ask for access to them, or to ask us to delete them, email privacy@aiviation.dev.

8. Your U.S. State Privacy Rights

This section applies to residents of U.S. states whose privacy laws apply to us, including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Nevada (NRS Chapter 603A). Not every right below is available under every state's law, and we may decline a request where the law allows.

What we collect. In the categories used by the CCPA:

• Identifiers, including device ID — the device identifier described in Section 2, the hashed identifier we derive from the Apple subscription transaction, the IP address recorded in our access logs, and your email address if you write to us.
• Commercial information, including purchase history — your subscription status, and the Apple subscription transaction, which is verified with Apple. We store only a hashed identifier derived from that transaction. We never store the receipt or the transaction identifiers, and we never receive your payment details.
• Internet or other electronic network activity information, including product interaction — the in-app usage events described in Section 2, and the page path, referring hostname, campaign parameters, and App Store link clicks described in Section 4.
• Other information you choose to give us, including other user content — a Pilot's Operating Handbook or Airplane Flight Manual you upload, the AI-feature inputs described in Section 2, the aircraft profile name you type, the tail number and time range in a flight track lookup, and anything you put in an email to us.

We collect this information from you, your device and your browser as you use the Service. We use it for the purposes described in this policy and disclose it to the categories of recipients in Section 6. We do not collect sensitive personal information through the Service, we do not use it to profile you or make automated decisions about you, and we do not process it for targeted advertising. Precise location is not in the categories above. Section 2 describes the position records that stay on your device and, if iCloud sync is on, in your own private iCloud account. They are not sent to us.

Your rights. Depending on your state, you may have the right to:

• Know what personal information we collect, the sources, the purposes, and the categories of recipients.
• Access a copy of the personal information we hold about you, in a portable form where the law requires it.
• Correct inaccurate personal information.
• Delete personal information we collected from you.
• Opt out of the sale or sharing of personal information, of targeted advertising, and of profiling that produces legal or similarly significant effects. We do none of these, so there is nothing to opt out of.
• Limit the use of sensitive personal information. We do not collect it through the Service.
• Appeal a decision in which we deny your request.
• Be free from discrimination for exercising any of these rights. We will not deny you service, charge you a different price, or give you a lower quality of service because you exercised them.

How to make a request. Email privacy@aiviation.dev and tell us which right you want to exercise and which state you live in. You may use an authorized agent; we may ask the agent for proof that you authorized them, and we may ask you to verify your identity with us directly.

Verification, and its limits. Before we act on a request we have to be reasonably sure the request is yours. Because this page uses no cookies and no visitor identifier, we often cannot confirm that a particular record relates to you. We do not keep information in an identifiable form solely so that we can answer requests, and we are not required to collect more information about you in order to do so. Where we cannot verify a request, we will tell you and explain why.

Appeals. If we deny your request, you may appeal by emailing privacy@aiviation.dev with "Appeal" in the subject line. We will respond in writing within the period your state's law allows, and if we deny the appeal we will tell you how to contact your state attorney general.

California Shine the Light. California Civil Code Section 1798.83 lets California residents ask whether we disclosed personal information to third parties for those third parties' own direct marketing purposes. We do not. To make a request anyway, email privacy@aiviation.dev with "Shine the Light Request" in the subject line, and include your name, mailing address, and a statement that you are a California resident.

Nevada. Nevada residents may direct a business not to sell certain personal information under Nevada Revised Statutes Chapter 603A. We do not sell personal information. Our designated address for these requests is privacy@aiviation.dev.

Residents of other states may have similar rights under their own laws. Contact us at privacy@aiviation.dev and we will honor the rights that apply to you.

9. Children's Privacy

Niner is intended for pilots and is not directed to anyone under 16. We do not knowingly collect personal information from anyone under 16. If we learn that we have collected personal information from a child under 16, we will delete it. If you are a parent or guardian and believe we have done so, contact us at privacy@aiviation.dev.

10. Where Information Is Processed

AIVIATION LLC is located in the United States, and the information described in this policy is processed and stored in the United States. Niner is offered only in the United States. If you access the Service from elsewhere, you do so on your own initiative, and your information will be processed in the United States, where privacy laws may differ from those where you live.

11. Security

We use technical and organizational safeguards designed to protect the information we hold, including encryption of information in transit and at rest and access controls that limit who can reach it. Security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your information.

12. Changes to This Policy

We may update this policy. When we do, we will change the "Last Updated" date above and post the revised policy on this page. If the changes are material, we will give more prominent notice. Your continued use of the Service after a revised policy takes effect means you accept it.

13. Contact