Privacy & your data
AeroRadar privacy notice
Notice updated: October 13, 2026
RiseMode Media LLC, 4400 Park Brooke Trce, Alpharetta, GA 30022-3413, United States, is the controller. Contact support@risemodemedia.com.
Where account data is stored
Supabase is the durable authority for AeroRadar user profiles and related durable user records. Redis/Valkey provides a volatile flight-data cache and short-lived airport operations observations; it is not the durable store for saved, tracked, profile, billing, support, or transactional-email data.
Data used by the shipped feature set
In versions supporting Bangladesh and Nepal, we ask you to declare whether you live in Bangladesh, Nepal or another country. Where the 18+ launch requirement applies, we also ask whether you are under 18 or 18 or older. This self-declaration and any requirement to confirm adult eligibility before checkout are saved on your device and associated locally with your AeroRadar account. They are cleared when you sign out or complete account deletion. This check does not collect your date of birth or identity documents and does not verify your age. Google Play supplies its billing country during checkout; we do not save that country for this eligibility check.
- Account identifiers, sign-in provider facts, profile details, verified factors, and preferences.
- Saved searches, tracked flights and aircraft, alerts, replay links, and other app activity.
- Location when a feature uses it.
- Email or Calendar itinerary content imported at the user’s request.
- Google Play purchase, entitlement, order, subscription, void/refund, and RTDN reconciliation evidence.
- Push/device identifiers, diagnostics, support correspondence, and support screenshots submitted by the user.
- Transactional-email delivery data, such as recipient address fingerprints, message category, provider delivery identifier, delivery status, bounce or complaint status, and timestamps for verification, password recovery, receipts, security notices, or requested service notifications.
- Coarsened aggregate analytics.
Maps, optional inputs, and community reports
Google Maps and other Google SDKs process device and app identifiers, request metadata, map interactions, and performance or crash information to operate, secure, maintain, and improve their services. AeroRadar does not use device identifiers for advertising or sell personal information. Optional location features use the location permission you grant; you can turn that permission off in Android settings.
Google Maps processes information under the Google Privacy Policy. Weather requests can send the coordinates of the selected location or map area to the weather provider used for that feature, including the US National Weather Service or MET Norway. A selected location can be your device location when you enable that feature. These providers receive network request information such as your IP address and apply their own privacy terms.
In app versions that request MET Norway forecasts through AeroRadar's gateway, AeroRadar verifies the app or account request and sends rounded location coordinates to MET Norway without forwarding your account identifier or IP address. MET Norway receives the gateway's IP address. AeroRadar keeps a shared cache of weather samples for rounded geographic areas for up to seven days to reduce repeated downloads. Those cache entries do not contain account identifiers or user IP addresses. Older app versions and other weather features may still contact their weather provider directly as described above.
Street and topographic map providers, including OpenStreetMap and OpenTopoMap, receive your IP address and tile requests identifying the map area displayed. Your device stores map tiles and cache headers to reduce repeat downloads. You can remove local map data by clearing the app's storage in Android settings. The account-deletion flow also clears local app data.
Voice search uses the speech-recognition service configured on your Android device. That service may send audio to its servers, and its own privacy settings and retention terms apply. AeroRadar uses the resulting text to perform your requested search. Camera preview and itinerary text recognition run on the device; when you save an imported itinerary, extracted travel details can be synchronized to your account. This can include details extracted from an email, calendar event, boarding pass, or document.
Airport Pulse in the app and on this website accepts optional, predefined airport-condition reports after sign-in. Website reports identify whether you observed a condition yourself or are relaying a recent firsthand observation from someone at the airport. The website uses your location only locally when you request a nearby airport; coordinates are not included in these reports. A home-airport preference is stored in your browser for your account. Their contribution to airport summaries is visible to other users; the app does not provide free-form public chat, photo posting, or audio messaging. Operational observations and history expire within 24 hours. Support messages, private feature requests and screenshots that you choose to submit are retained privately for investigation and follow the support retention and deletion rules below. They are not temporary memory-only processing.
How transactional-email data is used
AeroRadar uses Resend (Plus Five Five, Inc.) as a transactional-email processor to send account verification, password recovery, security, purchase receipt, license acceptance, and requested service messages; monitor delivery; prevent abuse; and honor bounce, complaint, and suppression requirements. AeroRadar sends the recipient email address and, when available, display name; sender, subject, plain-text and HTML message content; message category; opaque request identifier; and, for verification or password-reset messages, a time-limited Firebase action link. Resend returns provider message and delivery identifiers plus signed delivery-event metadata. AeroRadar does not sell this information or use it for advertising.
Resend states that email content and logs are retained for 30 days. Because its public materials currently describe backup retention as either 7 or 30 days, AeroRadar conservatively treats provider backups as potentially retained for up to 30 days unless Resend confirms a shorter period.
Optional email-open and link-click tracking are disabled for AeroRadar's Resend sending domain.
Resend's provider terms and subprocessors govern its processing in the United States and other disclosed locations.
Deletion and retention
AeroRadar deletes account, profile, imported itinerary, support, and associated user content when account deletion is completed. Limited commercial, fraud-prevention, and deletion-confirmation records may be retained for the stated periods when required for compliance, dispute handling, or security. These records are access-restricted and are not used for advertising.
Transactional-email delivery and suppression records may also be retained for delivery troubleshooting and security, for the periods described below. These records are access-restricted and are not used for advertising.
Account deletion removes associated user data except narrowly retained evidence. Commercial, replay, and administrative evidence is retained for seven years after terminal state. Lifetime evidence is retained while restoration remains possible and then for seven years after refund or void. Aggregate-only analytics is retained for 24 months. A sanitized deletion receipt is retained for two years. A status credential expires after 30 days and only its server-side hash is stored. Support correspondence is deleted 30 days after completion; support rows and stored support objects are deleted immediately during account deletion. Transactional-email delivery events and rate-limit records are retained for 90 days. Dispatch metadata is retained for 90 days, except purchase-receipt dispatch metadata is retained for 13 months. Hard-bounce suppressions are retained for 180 days. Complaint suppressions remain until verified remediation and re-enablement. Provider-originated and manual suppressions also remain until verified remediation and re-enablement. These operational records use a keyed HMAC identifier instead of storing the raw recipient email address.
Retained evidence uses a versioned, domain-separated pseudonym; the raw Firebase UID is nulled after the retention transform. A deleted account cannot be reopened. A returning user who receives a new account identifier is treated as a new account under the normal trial rules. This does not automatically restore paid access or grant a promotion. Paid portability requires fresh Google Play verification and a reviewed transfer.
Deleting AeroRadar does not cancel a Google Play subscription. Manage it at Google Play subscriptions or contact support.
Legal holds
Legal holds: RiseMode Media LLC has no active legal holds and does not routinely retain personal information for litigation. If a specific legal preservation obligation arises, deletion will be suspended only for the affected records and required duration. Access will be restricted, and deletion will resume when the obligation ends.
Processors and recovery copies
Service-provider backups and disaster recovery: RiseMode Media LLC uses Google Cloud/Firebase and Supabase as service providers for AeroRadar App. When account deletion is completed, associated information is removed from active AeroRadar systems. Limited residual copies may remain temporarily in encrypted, access-restricted backup or disaster-recovery systems until they expire or are overwritten under the provider’s normal retention cycle. These copies are not used for advertising or ordinary product operations. If data is restored for disaster recovery, completed deletion instructions and deletion safeguards are reapplied before the restored information returns to normal service.
These backup and disaster-recovery safeguards also apply to the transactional-email processor described above.
Owner-attested Supabase infrastructure facts: Pro plan; East US (Ohio) region; daily backups; point-in-time recovery not active; Supabase Storage contains user objects.
Your privacy choices and requests
For access, correction, deletion, consent withdrawal or a privacy concern, email support@risemodemedia.com. Describe your request and, if relevant, your country or province so we can identify the rules that apply. We may need information reasonably necessary to verify your identity. Do not send passwords, verification codes or full payment-card details.
You can turn off location, camera, microphone and notification permissions in Android settings. Turning off a permission can limit the feature that uses it. For information already saved to your account, use the available account controls or contact us. Where processing relies on consent, you may withdraw that consent; withdrawal does not change the lawfulness of earlier processing.
Rights and response requirements depend on applicable law and may have exceptions. Contacting us does not remove your right to approach the relevant privacy authority. The regional sections below explain some of those rights and complaint routes.
International processing
RiseMode Media LLC is based in the United States, and the durable user-data database described above is hosted in the United States. Google Cloud/Firebase, Supabase, Resend and other providers described in this notice may process information outside your country. Locations can differ by service and provider. Contact us for information about recipients, processing locations and the arrangements relevant to your information.
The same support contact handles privacy requests from all regions. The use of an overseas provider does not remove rights that apply to you under local law.
Young people and families
AeroRadar's intended audience is people aged 13 and older. For the initial Bangladesh and Nepal release, AeroRadar is available only to people aged 18 or older. If you are under 18, we encourage you to review this notice with a parent or guardian. Local rules may require a parent or guardian's consent for particular collection or use of personal information. A parent or guardian can contact us with a privacy question or a request concerning their child's information.
Share only the information needed for the feature you choose. Keep passwords and verification codes private, and remove unnecessary personal details from support screenshots. You can review device permissions in Android settings and use the privacy-request contact above for help.
Regional privacy rights
These sections supplement the rest of this notice where the relevant law applies to you and to our handling of your information. They do not limit any additional rights you may have.
Australia
Where the Australian Privacy Act applies, you may request access to personal information we hold about you and ask us to correct it. Send privacy complaints to the contact above, with enough detail for us to investigate. You may also contact the Office of the Australian Information Commissioner (OAIC), which explains its complaint process.
Our US operations and overseas providers are described in this notice. You can ask us for details about overseas recipients and the handling of your information.
New Zealand
Our privacy officer for New Zealand is Anil Dubey. Contact him about privacy matters at support@risemodemedia.com.
Some account information comes from other services: when you choose Google or Microsoft sign-in, we receive account information through Firebase Authentication to sign you in; Google Play provides purchase and subscription information so we can verify and restore paid access; and Resend provides email-delivery information so we can manage account messages and delivery problems. The information, purposes, service providers, retention and US controller address are described in this notice. Contact our privacy officer to request access or correction or to ask about a source of your information.
Where New Zealand's Privacy Act applies, you may request access to your personal information and ask for corrections. If a requested correction is not made, you may ask for a statement of the correction sought to be attached to the information. You may raise a concern with us or the Office of the Privacy Commissioner.
Overseas storage or processing on our behalf can be treated differently from disclosure to a recipient using information for its own purposes. Contact us about the overseas handling relevant to your information.
Canada, including Québec
Anil Dubey is our person responsible for the protection of personal information for Québec. Contact him at support@risemodemedia.com.
Depending on the applicable federal or provincial law, you may request access to your personal information, challenge its accuracy, and withdraw consent subject to legal or contractual restrictions. We can explain the effect a withdrawal would have on the requested service. Information processed outside Canada may be subject to the laws and lawful access powers of that location.
You may contact the Office of the Privacy Commissioner of Canada or the relevant provincial authority. For Québec, see the Commission d'accès à l'information. Additional Québec rights may include requesting eligible computerized personal information in a structured, commonly used format, subject to applicable conditions.
Where Québec law applies, collecting personal information directly from a child under 14 generally requires consent from a parent or guardian, except where the collection is clearly for the child's benefit. Contact us about a child's information or an applicable consent requirement.
United Kingdom
Where UK data-protection law applies, your rights may include access, correction, erasure, restriction of processing and portability. These rights depend on the processing and applicable conditions. Where we rely on consent, you can withdraw it by contacting us.
Your right to object: you may object to processing based on legitimate interests on grounds relating to your situation. You may object to direct marketing at any time.
Contact us about a request or concern, or complain to the Information Commissioner's Office (ICO). You may also request information about the grounds for processing your information and any applicable international-transfer safeguards.
Singapore
Our Data Protection Officer for Singapore is Anil Dubey, reachable at support@risemodemedia.com.
Where Singapore's Personal Data Protection Act applies, you may request access to your personal data and information about its use or disclosure, and ask for correction of errors or omissions, subject to applicable exceptions. You may withdraw consent with reasonable notice; contact us so we can explain any resulting service limitations.
Send data-protection questions and complaints to support@risemodemedia.com. You may also contact the Personal Data Protection Commission (PDPC). Contact us for information about overseas recipients and applicable protection arrangements.
India
Our privacy lead, Anil Dubey, handles privacy questions and grievances at support@risemodemedia.com. Tell us which information or feature your request concerns. You may ask to review or correct account information, withdraw consent where processing relies on it, or request deletion using the account controls or contact above.
The information we collect, its purposes, recipients and retention are described in this notice. Optional device permissions can be turned off in Android settings. Withdrawing permission or consent can limit the relevant feature; deleting an account does not cancel a Google Play subscription. We handle requests under the requirements applicable when the request is made.
Sri Lanka
AeroRadar is operated from the United States. The overseas providers and processing described in this notice also apply to users in Sri Lanka. Contact support@risemodemedia.com for information about the purposes, recipients and arrangements for handling your information outside Sri Lanka.
You can use our account controls and privacy-request contact to seek access, correction or deletion, or to raise a concern about processing or consent. Applicable statutory rights depend on the provisions in force and the processing involved. The Data Protection Authority of Sri Lanka publishes information about the local framework and its commencement.
Bangladesh
The initial AeroRadar release in this country is restricted to adults aged 18 or older. If you do not meet this requirement, you can still contact support about your information or request deletion of an existing account.
For questions about the purposes, providers or overseas processing described in this notice, contact support@risemodemedia.com. You can request access, correction or deletion, withdraw consent where processing relies on it, or raise a privacy concern. We assess requests under applicable law.
Nepal
The initial AeroRadar release in this country is restricted to adults aged 18 or older. If you do not meet this requirement, you can still contact support about your information or request deletion of an existing account.
Contact support@risemodemedia.com about the collection, use or disclosure of your personal information, including its purpose and recipients. You may request access, correction or deletion, or explain a concern about consent or confidentiality; we assess the request under applicable law.
Boarding passes, support messages and screenshots may contain information about other people or your family. Share only what is needed for the feature or support request, and remove unrelated personal details. The account providers and overseas processing described above are separate from aircraft positions and other flight information displayed by the app.
Maldives
RiseMode Media LLC operates AeroRadar from the United States and uses the overseas service providers described above. Google Play handles purchases; AeroRadar receives the purchase information needed to verify access and support restoration. We do not receive your full payment-card details from Google Play.
For a privacy question or an access, correction, deletion or consent-withdrawal request concerning use in the Maldives, contact support@risemodemedia.com. Account deletion and subscription cancellation are separate actions, as explained above. These request channels do not limit any additional rights under applicable law.
Pakistan
For questions about personal information used for an AeroRadar account, purchase verification, saved features or support in Pakistan, contact support@risemodemedia.com. You can request access, correction or deletion and raise concerns about collection, use, disclosure or consent. We assess requests under applicable law.
Our US operations, service providers, overseas processing and retention are described in this notice. Include only the information needed to identify your request; do not send passwords, sign-in codes or full payment-card details. Where processing relies on consent, you may withdraw it through the contact above, and optional device permissions can be disabled in Android settings.
Request deletion
Use the prominent in-app Account & Security action or the external deletion request and status page. A request requires recent authentication; deleting Firebase Auth is the final server stage, followed by terminal local app-data erasure.