Privacy policy
Your bookings, passport and settings stay on your phone and are never sent to our servers. Map and weather providers, usage statistics, ads and subscription billing process limited technical data separately. The app never asks for your location.
1. Scope and contact
This policy covers the Window Seat app by JC Studio and this information and support website. Privacy questions and requests: whdcjf8172@gmail.com.
2. Data kept on your device
- Bookings and passport: departure city, destination, flight number, departure and arrival times, seat, focus and away time, and whether you landed or diverted (latest 500 entries).
- Settings: language, sound, quality, motion, last city and focus length, whether usage stats are sent, and a cached premium status. Your first departure city is chosen from the device time zone, not your location.
- Screen on/off times: during a flight the app records when the screen turns on or off (latest 200 events) so that time with the screen off counts as focus and only time spent in other apps counts as away. These never leave the device.
- Notifications: arrival and “still flying” reminders are scheduled on the device using Android exact alarms. No server or push token is used. Android 13+ asks for notification permission on your first flight.
There is no sign-up or login, and the app does not ask for camera, microphone, contacts or location access.
3. Map, terrain and weather data
To draw the view, the app downloads satellite imagery, elevation and night-light map tiles and cloud/visibility forecasts for the area around your route from public data providers. These requests contain coordinates around the route you picked (not your location) and technical data such as your IP address and device/browser information. Flight records, install IDs and advertising IDs are never included. Fonts are loaded from Google Fonts. Providers: EOX IT Services (Austria, Sentinel-2 cloudless imagery), Geospatial Information Authority of Japan (aerial photos of Japan), Amazon Web Services (USA, terrain tiles), NASA (USA, GIBS night lights), Open-Meteo (Switzerland, forecasts), Google (USA, fonts). Each provider may process access logs under its own policy.
4. Usage statistics
The published app sends a minimal record to our Supabase server to understand how many people use it: a random install ID and launch ID, operating system, app and build version, device language, first/last use time and launch counts per Korean calendar day. Flight records, cities, GPS, advertising IDs and purchases are not included. We do not store IP addresses in the analytics database, though Supabase may process them in access and security logs. Raw launches are kept 7 days, daily counts 180 days, install records 365 days after last use, rate-limit counters 1 day; expired data is purged daily. Turn off “Send usage stats” in Settings to stop sending; “Delete usage stats” deletes this install's server records and keeps sending off. Only a hash of the deletion token is stored on the server, and after deletion a separate hash and timestamp are kept for 7 days so delayed requests cannot recreate the record.
5. Ads and privacy choices
Banner ads appear at the bottom of the booking and passport screens, and a rewarded ad plays only when you choose “Depart now”. There are no ads in the cabin and no full-screen ads. No ads are requested for Premium subscribers. The Google Mobile Ads SDK and its consent tool may collect or share your IP address and approximate location, app and ad interactions, performance and diagnostics data, advertising ID, app set ID and other device identifiers, and your consent choices, for ad delivery and measurement, privacy choices and fraud prevention. Flight records are never added to ad requests, and ads are limited to the PG rating. Where consent is required we follow your choice between personalized and non-personalized ads; if it cannot be read, ads are non-personalized. You can reopen the choices in Settings → Ad privacy settings (shown only when required) and reset or delete the advertising ID in Android settings.
6. Premium subscription
Window Seat Premium is an auto-renewing subscription (1 month or 1 year) sold through Google Play. Google Play Billing and RevenueCat confirm, restore and track subscription status using a random app user ID, product and transaction IDs, purchase/renewal/expiry times and status. Payment details are handled by Google; we never receive them. RevenueCat may send purchase events (anonymous app user ID, product, price, currency, country) to our Supabase server for revenue reporting. Purchase history is kept under Google Play and RevenueCat policies and is not deleted when you uninstall.
7. Support email and this website
If you email us we use your address, message and attachments to reply, and delete them when no longer needed unless the law requires keeping them. Email is handled by Gmail. This website uses no ads, analytics scripts, forms, logins or first-party cookies; Cloudflare, which delivers and protects it, may process your IP address, requested URL and time, and browser information.
8. Service providers and international transfers
Supabase, Inc. (USA; database in Seoul), Google LLC (USA), RevenueCat, Inc. (USA), the map and weather providers in section 3, and Cloudflare, Inc. (USA) process data as described above, possibly outside your country, always over HTTPS when you use the related feature. To avoid a transfer, do not use the feature or uninstall the app; turning off usage stats stops section 4 transfers.
9. Retention, deletion and your rights
Clearing the app's data in Android settings or uninstalling deletes all bookings, passport entries, settings and screen records on the device; it does not delete usage statistics already sent, so use “Delete usage stats” first. The app opts out of Android app-data backup. Depending on applicable law you may request access, correction, deletion or restriction, or withdraw consent, by emailing us. There is no account to close.
10. Security and children
We use HTTPS/TLS and limit server access. On-device records are not separately encrypted, so keep your device locked. The app is not designed for children.
11. Contact and changes
Privacy officer: Lee JongCheol (CEO), whdcjf8172@gmail.com. We will update this page and its effective date when features, providers or laws change, and notify you of important changes.
History
- October 24, 2026: first version