This Privacy Policy explains how ASTROLÁBIO4FUN - UNIPESSOAL LIMITADA ("we", "us", "our"), the data controller for SimFlyMinimums, collects, uses, and shares information when you use the SimFlyMinimums application (the "Service"). It is written to comply with the EU General Data Protection Regulation (GDPR).
The short version
SimFlyMinimums runs mostly on your own computer, alongside your flight simulator. Most of your flight and simulation data never reaches us — it's stored locally. AI and map features are Bring-Your-Own-Key (BYOK): when you use them, your request goes directly from your machine to that provider using your own key, not through us. We collect the minimum needed to run your license/trial. If you register on the website, we also keep your e-mail address and, only if you choose to give them, a few profile answers.
What we collect
- Website registration. To download the app you register on this website with your e-mail address, confirmed by a one-time code we send you (there is no password). We store your e-mail address and the time you confirmed it. You may also, optionally, tell us your experience level, the aircraft you fly most and an age range (a range, not your date of birth); we use these answers only to decide which features to build next. At the moment you register we derive your country from your IP address and store only the country, not the IP address; the IP address is sent to a geolocation service (ipwho.is) for that lookup. If you tick the separate marketing box, we will also e-mail you news, new versions and offers until you unsubscribe. Registration data is stored on Microsoft Azure, and the code e-mail is sent through Azure Communication Services. Registration and the country lookup rely on our legitimate interest in running and improving the Service; the optional profile answers and the marketing e-mails rely on your consent, which you can withdraw at any time by writing to novreis@simflyminimums.com. When you click a download button while signed in, we record which file you downloaded and when, together with your e-mail address and the country already stored with your registration, so we know how many people download the app. We keep registration data until you ask us to delete it.
- Device & license identifier. The app itself has no login. On first run, the app generates a random device identifier stored locally, sent to our licensing service to start a Trial, activate a purchased license, and periodically re-verify your subscription status.
- Purchase & billing. When you buy a subscription, Paddle.com acts as the Merchant of Record and collects your payment details, billing email, and billing address directly — we never receive or store your card details. We receive from Paddle only your email address and subscription/transaction identifiers, needed to activate your license. See Paddle's Privacy Policy.
- Support messages. If you contact us, we keep your message and any attachments you send (such as log files or screenshots) to help resolve your request.
- Technical/diagnostic data. Our licensing service (hosted on Microsoft Azure) may log basic technical data (timestamps, error messages, approximate IP address) for security and abuse prevention.
What stays on your device
- Your flight data, routes, checklists, and aircraft position are processed and stored locally, and are not uploaded to us.
- Your BYOK provider keys (map and AI services) are entered and stored locally on your computer, and used only to talk to those providers directly from your machine.
- Voice callouts use local text-to-speech and do not require sending audio anywhere, except where you actively use ATC speech recognition (see below).
Bring-Your-Own-Key (BYOK) features and third parties
When you actively use certain optional features, your request goes directly from your computer to the relevant third-party provider, using your own API key — we do not proxy, receive, or store this traffic:
- AI First Officer / Chat / missed-approach chart extraction — OpenAI and/or Google Gemini, using your own key
- Moving map / chart display — MapTiler and/or Microsoft Azure Maps, using your own key
- ATC speech recognition — Microsoft Azure Speech, using your own key, only when you actively capture audio
- Chart lookups — official FAA / eAIP chart sources
- FlightRadar24 comparison, SimBrief import — sent directly to those services when you request them
Each provider processes data under its own privacy policy, and may be located outside the European Economic Area (notably the United States).
Who receives your data
- Microsoft Azure (West Europe) hosts our licensing service and registration records, and sends the verification e-mail through Azure Communication Services.
- ipwho.is, a geolocation service, receives your IP address when you register and answers with a country. We store only the country, never the IP address.
- Paddle, the Merchant of Record, if you buy Premium (see above). Paddle is a controller in its own right for your billing data.
- Cloudflare provides cookie-free visit statistics for this website (Cloudflare Web Analytics). Your browser sends it page-view data, such as the page, the referring site and the browser type, which we see only as aggregate figures.
- An e-mail marketing service, only if you tick the marketing box. None is in use yet; we will name it here before we send anything.
We do not sell your data.
International transfers
Our own hosting is in the EU. The geolocation lookup and the third-party providers you choose to use with your own keys may process data outside the European Economic Area, including in the United States, under their own safeguards.
Legal bases at a glance
- Registration, e-mail verification, security and abuse prevention, and country statistics: our legitimate interest in running and improving the Service (GDPR Art. 6(1)(f)).
- Optional profile answers and marketing e-mails: your consent (Art. 6(1)(a)), which you can withdraw at any time. Each is a separate choice; see our Consent Policy.
- Purchases and license activation: performance of the contract with you (Art. 6(1)(b)).
- Tax and accounting records: legal obligation, held by Paddle as Merchant of Record.
Children
SimFlyMinimums is not directed at children under 13, and we ask anyone under 13 not to register. If you are under 18, please make sure a parent or guardian knows you are using it.
Your rights
If you are in the EU/EEA, you have rights under the GDPR, including access, correction, deletion, and portability of your personal data. We hold little personal data ourselves (your registration details, a device identifier and, via Paddle, your billing email), so most requests can be fulfilled quickly. To exercise these rights, contact us at novreis@simflyminimums.com. Requests relating to billing/payment data may need to be directed to Paddle directly, as they are the data controller for that information.
You can withdraw any consent at any time: every marketing e-mail will include an unsubscribe link, or write to us. Withdrawing does not affect what we did before, or your use of the Free or Trial version. You also have the right to object to processing based on legitimate interest, to ask us to restrict it, and to complain to a supervisory authority; in Portugal that is the Comissão Nacional de Proteção de Dados (CNPD).
Data retention
Registration data (e-mail address, optional profile answers and the record of your choices) is kept until you ask us to delete it. Device/license records are retained for as long as your license is active, and for a reasonable period after expiry for support and fraud-prevention purposes. Locally stored simulation data stays under your own control on your own computer. Billing data is retained by Paddle per their own retention policy and applicable tax/accounting law. Support messages are kept only as long as needed to assist you.
Cookies & local storage
The Service does not use tracking or advertising cookies. It uses your browser's local storage to cache your device identifier, license token, and preferences on your own machine. On this website, when you sign in, your browser stores in local storage a random sign-in token, your e-mail address and a flag saying you are registered, so that you stay signed in for up to 30 days and the checkout can pre-fill your e-mail; you can remove them at any time by signing out. A hash of the token is kept on our side for the same period. None of this is used for tracking or advertising. To count visits to this website we use Cloudflare Web Analytics, which sets no cookies, does not use local storage and does not identify or follow individual visitors; it only gives us aggregate figures such as page views, referring sites and countries.
Changes
We may update this policy as the product evolves. Material changes will be reflected by updating the date above.
Contact
ASTROLÁBIO4FUN - UNIPESSOAL LIMITADA
Questions about privacy? Email novreis@simflyminimums.com.