Introduction

At Wingbase, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our aircraft management platform.

$100 Hamburger Mobile App

$100 Hamburger is a free, account-free destination discovery app by Wingbase. The app does not include an advertising SDK. Wingbase does not use app data for advertising or cross-app tracking.

Your discovery preferences, home airport, saved destinations, and private saved notes are stored locally on your device using Apple SwiftData. Optional email and landing suggestions send the information described below to Wingbase.
Atlas records the restaurant and airport visits you enter, including dates, notes, an optional departure airport, and one optional photo per visit. These records stay in local SwiftData and protected app files; Wingbase does not receive an Atlas database or provide app-managed cloud sync. Settings offers private ZIP backup, restore, and deletion of Atlas data. Backups include private content, so share and store them carefully.
Sharing an Atlas postcard is your choice and opens the native share sheet after a preview. Postcards omit your notes, photos, exact visit dates, departure airports, and route connections. A single-visit postcard includes the destination airport and a Wingbase guide link; aggregate postcards show counts without destinations. The app does not automatically publish your visits.
Location access is optional and requested only after you tap Near me. If you allow it, the app sends your current coordinates to Wingbase to return nearby public-use airports. Wingbase processes those coordinates for that request and does not store them in the destination catalog or your account.
Airport searches and recommendations send the airport identifier, requested radius, and ordinary network information such as IP address to Wingbase. We use that information to provide and protect the service, including rate limiting.
Restaurant names, photos, ratings, hours, addresses, and related details are loaded directly in the app through Google Places. Wingbase stores the Google Place ID used to request those details, but does not store Google's display content in the destination catalog.
Google Places is a third-party SDK used for live restaurant details and provider actions. Its privacy manifest declares that the SDK may process location, device identifiers, search history, product interaction, performance, and other diagnostic data for app functionality and analytics. Google declares that data as not used for tracking; its handling is governed by Google's policies.
Private correction reports include the airport, Google Place ID, issue type, and any explanation or contact email you choose to provide. Reports are reviewed by Wingbase and are not published automatically.
If you submit a crew-car report, Wingbase stores the airport, visit date, availability, optional FBO name, whether calling ahead is required, and a random reporter token kept on this app installation. That token lets a new answer replace your earlier answer and is not shown to other pilots. The report can immediately affect the public crew-car summary. Dispute flags go privately to Wingbase and do not immediately change the summary.
Landing suggestions are optional. When enabled with notification permission and an aircraft selected, the app sends your aircraft registrations, home airport, Apple push notification token, and a random installation credential to Wingbase. Wingbase stores a hash of that credential, the push token, your choices, and notification delivery records. We use them to send suggestions for your selected aircraft and exclude your home airport. This does not create an account or track your phone's location.
For landing suggestions, Wingbase sends selected aircraft registrations to FlightAware and stores matching flight identifiers, departure and arrival airports and times. Apple Push Notification service delivers suggestions to your device. These records support arrival matching, reliable delivery, and duplicate prevention; they do not automatically add visits to Atlas.
Turning landing suggestions off removes this installation's server subscription, registered aircraft, and associated delivery records after the app successfully connects. If removal is pending, reopen the app online to retry. Shared aircraft watches are removed when no active installation needs them during server reconciliation. Installations without a settings sync for 90 days are excluded from suggestions and removed during configured reconciliation. Shared flight-event records are retained separately; turning suggestions off does not erase those records. Contact Wingbase for data access or deletion requests.
If you request optional lunch-run emails, Wingbase stores your email address, home airport, delivery preference, and subscription status. New app signups receive occasional emails with no fixed schedule; older subscriptions may retain their chosen weekday. Your signup preference is also saved on your device. Wingbase uses Resend to deliver confirmation and forecast emails. Confirm through the email before delivery begins; forecast emails include an unsubscribe link.

Google's processing of live place details is governed by Google's applicable terms and privacy policy. Opening ForeFlight or a Google-provided action transfers you to that third-party app or service under its own terms.

Information We Collect

Personal Information

Name and contact information (email, phone number)
Pilot certificate information (certificate number, ratings)
Aircraft ownership details
Payment and billing information

Flight Data

Flight logs and routes
Aircraft performance data
Maintenance records
Cost and expense information

Technical Information

IP address and device information
Browser type and version
Usage patterns and preferences
Location data (with permission)

How We Use Your Information

We use your information to:

Provide and maintain our aircraft management services
Process transactions and send billing information
Send maintenance reminders and important notifications
Improve our services and develop new features
Comply with legal obligations and aviation regulations
Protect against fraudulent or illegal activity

Data Security

We implement security measures to protect your data:

TLS encryption for all data in transit between your browser or app and our servers
Encryption at rest for stored data, which is held on managed Supabase infrastructure
Access controls limiting data access to authorized Wingbase personnel and the systems required to provide the service

Data Sharing

We do not sell your personal information. We may share your data only in these circumstances:

With co-owners or operators you explicitly authorize
With the service providers listed below, only as needed to run Wingbase
To comply with legal requirements or valid legal processes
To protect the rights and safety of Wingbase and our users
With your explicit consent

Service Providers

These companies process data on our behalf to provide Wingbase. Each receives only what its job needs.

Vercel hosts the web app and API, and handles requests, including your IP address.
Supabase stores account, aircraft, flight, maintenance, reservation and expense data, and uploaded files.
Clerk manages sign-in: your name, email address and sign-in sessions.
Stripe processes web subscription payments. Card details go to Stripe, not to Wingbase.
Apple processes in-app purchases made in the Airlogger app, and its Push Notification service delivers Airlogger notifications (your device token and the notification text).
Resend sends and receives Wingbase email, including replies you send to flight and receipt addresses.
Anthropic reads instrument-panel photos and flight-correction replies to extract flight times, and writes weather briefings from your route, times and aircraft.
Amazon Web Services (S3 and Textract) stores trip-expense receipt images and reads their totals.
FlightAware receives aircraft registrations to find completed flights for automatic logging and landing suggestions.
Mapbox serves the maps in the app, which requires your device to request map tiles for the area shown.
Google Calendar and Microsoft Outlook receive your reservations, only if you connect a calendar.
Sentry receives error reports and, for a sample of web sessions and for every web session where an error occurs, a replay of the page with all text masked and media blocked.
Google Analytics receives web analytics from the public marketing pages, including the page path, only after you accept analytics cookies.
PostHog receives web usage analytics, only after you accept analytics cookies.
Vercel Analytics and Speed Insights measure page visits and performance across the site, and are not gated on analytics-cookie consent. Wingbase strips URL fragments before sending their telemetry.
Upstash stores short-lived rate-limit counters keyed by IP address or account.

Your Rights

You have the right to:

Access your personal information
Correct inaccurate data
Request deletion of your data
Export your flight log (PDF, an 8710 experience guide — a filling aid, not an official FAA 8710-1 and not submitted to IACRA — or ForeFlight-compatible CSV) and a maintenance summary (CSV) from the app, and ask us for a copy of any other data we hold about you
Opt-out of marketing communications
Restrict processing of your data

Data Retention

We retain your data for as long as your account is active or as needed to provide services. Flight logs and maintenance records are retained in accordance with Wingbase's operational needs; legally required retention periods vary by record type and jurisdiction. You may request deletion of your data at any time, subject to applicable legal retention requirements.

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

Children's Privacy

Wingbase is for adults 18 and older, and we do not offer accounts to anyone under 18. That includes people added to an aircraft as a student, pilot or other member: the student role is for adult students. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through a prominent notice on our platform.

Contact Us

If you have questions about this privacy policy or our data practices, please contact us at:

Email: contact@wingbase.io