Privacy Policy
Effective date: July 19, 2026
Rareflight is an aircraft-spotting game for iPhone. This policy explains exactly what data the app collects, where it goes, and how you can delete it. It is written to match what the app actually does — nothing more, nothing less.
Account information
You sign in with Apple or Google. From your sign-in provider we receive your name, email address, and a user ID, and we store them in our database (PlanetScale Postgres). If your provider supplies a profile picture URL, we store that too. We never see or store a password.
Location
Rareflight uses your precise location, while the app is in use, to find aircraft flying near you. Your coordinates are sent to our server (a Cloudflare Worker) with each request for nearby aircraft. Our server deliberately does not log requests, so your location is not recorded in any server log.
When you collect an aircraft, we store that sighting permanently, including the aircraft's coordinates at that moment, your distance to it, and your own location at the time of the spot. Deleting your account removes all of your sightings, including these stored locations.
Photos
If you set a profile photo, it is uploaded to our storage (Cloudflare R2) and served from a public URL — anyone with the link can view it. Photos you take of aircraft while spotting stay on your device only; they are never uploaded.
Motion sensors
The AR view uses your device's motion sensors (compass, gyroscope) to aim at aircraft. Sensor data is processed entirely on your device and never transmitted.
Analytics and advertising
Rareflight contains no analytics, crash-reporting, or advertising SDKs. We do not track you, and we do not sell or share your data for advertising.
Third-party services
The map is powered by Mapbox. Loading map tiles sends requests from your device to Mapbox, which exposes your IP address to them; we have disabled Mapbox's usage telemetry. App updates are delivered through Expo's EAS Update service, which your device contacts to check for updates.
To show live aircraft, our server queries aircraft-data services: Airlabs, adsb.lol, ADS-B Exchange when configured, adsbdb (flight routes), and Planespotters (aircraft photos). These requests contain only aircraft identifiers and search coordinates — never your name, email, or any other personal data.
Social features
Your display name, profile photo, level, and sightings are visible to users you add as friends. If you report another user, we store the report (who reported whom, the reason, and any detail you provide) so we can review it.
Deleting your account
You can delete your account in the app under Settings → Delete Account. This permanently removes your account, sightings, XP, friendships, and profile photo from our systems.
Changes to this policy
If we add new data collection (for example an analytics SDK), we will update this policy and its effective date before the change ships.
Contact
Questions? Email hello@rareflight.app or see the support page.