Privacy Policy

01Introduction

This Privacy Policy explains what personal information Airwynn collects through its website and application, how that information is used, who it may be shared with, and the choices available to you. It applies to the Airwynn marketing website and the Airwynn web application (together, the "Service").

Airwynn is an early-stage product. This Policy is written to accurately describe what the Service actually does today — not what is planned for the future. As the Service evolves, this Policy will be updated accordingly (see "Changes to this Policy" below).

02Who operates Airwynn

Airwynn is currently operated by Pranav Mohan and has not yet been incorporated as a separate legal entity. References to "Airwynn," "we," "us," or "our" in this Policy refer to this operation. Once Airwynn is formally incorporated, this Policy will be updated to reflect the operating entity.

For any privacy question or request, you can reach us at airwynnhq@gmail.com.

03Information we collect

Depending on how you interact with the Service, we may collect:

• Account and authentication information — your email address and a unique account identifier, managed through our authentication provider, Supabase.
• Demo request information — if you submit our "Book a Demo" form: name, company, work email, optional phone number, preferred date/time, fleet size, and any notes you provide.
• Early Access / Design Partner application information — if you submit our early access form: first name, last name, email, company/organization, your role, and optionally fleet size, country, and intended use case.
• Weather and location information — location search text you type, and, only if you grant your browser's permission, your device's latitude and longitude.
• Aircraft, fleet, and operational information — for signed-in organization users, information about aircraft, organizations, assigned pilots (by account reference), and telemetry data submitted by connected devices or systems.
• IP addresses — processed transiently for security and abuse-prevention purposes, described further below.

We do not currently collect payment information, government identification, or biometric data through the Service.

04How we collect information

• Directly from you, when you create an account, submit a form (Book a Demo, Early Access), or otherwise provide information to us.
• Automatically, when your browser or device communicates with our servers (e.g. your IP address as part of any web request).
• From your browser, when you affirmatively grant permission for a specific feature, such as sharing your device's location for the weather feature.
• From organization users, when aircraft, fleet, or telemetry data is entered or submitted into the application on behalf of an organization.

05How we use information

We use the information described above to:

• Operate, maintain, and secure the Service, including authenticating accounts and enforcing access controls;
• Respond to demo requests and early access / design partner applications, and communicate with you about them;
• Provide features you actively use, such as weather lookups and fleet/aircraft management for your organization;
• Protect the Service against abuse, through measures such as rate limiting;
• Maintain administrative and security logs for troubleshooting and accountability.

06Authentication and account information

Account sign-up, sign-in, sign-out, and session management are handled by our authentication provider, Supabase. Supabase stores your email address and manages your password; Airwynn's own servers do not receive or store your password.

When you sign in, Supabase's client software keeps your session information (an access token that proves you're signed in) in your browser's localStorage so you stay signed in across page reloads. Our backend independently verifies this token on every request before granting access to any account-specific data — it does not simply trust information presented by your browser.

Our application also stores a small, non-authoritative display record in localStorage (such as a display name) purely so the interface can show it without an extra request; this record is never used to grant access to anything.

Based on Airwynn's current implementation, Airwynn does not use advertising trackers, analytics platforms, tracking pixels, or browser fingerprinting, and does not use cookies for advertising or tracking purposes. Airwynn does use browser localStorage for application and session functionality, as described above. localStorage is a different browser mechanism than a cookie and should not be described as one.

07Demo requests and Early Access / Design Partner applications

If you submit our Book a Demo form, the information you provide (name, company, work email, optional phone, preferred date/time, fleet size, and any notes) is transmitted to our backend, stored in our database, and a notification is sent to our team so we can follow up with you.

If you submit our Early Access / Design Partner application, the information you provide (first name, last name, email, company/organization, role, and any optional fields you complete) is likewise transmitted to our backend, stored in our database, and a notification is sent to our team.

We only store information from a form once it has actually been submitted through a working submission process. If any interest form on our site is not yet fully connected to our backend, no information from it is transmitted or retained by us.

08Weather and location information

The Service includes an optional weather feature. If you type a location into the search field, that text is sent to our backend, which relays it to our weather data provider (OpenWeatherMap) to find matching locations. If you choose to share your device's location with your browser, your coordinates are sent to our backend and relayed to OpenWeatherMap to retrieve current conditions and a forecast for that location.

We do not store a history of your location searches or geolocation coordinates in our database. Your browser holds your most recent search only in memory while the Weather page remains open, so the "retry" option can work without asking again.

09Aircraft, fleet, and operational information

For users signed in on behalf of an organization, the Service allows entry and storage of aircraft records (such as registration, type, manufacturer, and maintenance status), organization information, and references to assigned pilots by account identifier. Where a connected device or system actually submits telemetry, we store data such as latitude, longitude, altitude, heading, speed, battery level, flight mode, and the associated timestamp.

This information is scoped to the organization it belongs to and is used to provide fleet-management functionality to that organization's authorized users.

10IP addresses and security logs

Your IP address is processed transiently to enforce rate limits that protect the Service from abuse (for example, limiting how many login or form-submission attempts can occur in a short period). For certain sensitive administrative actions, the acting administrator's IP address is included in our structured server logs for security and accountability purposes. We do not currently maintain a queryable, database-backed log of IP addresses for general use.

11AI Copilot / simulated features

The Service currently includes an "AI Copilot" interface. At present, this feature is a client-side simulated demonstration: the responses it shows are pre-defined examples, and your prompts or interactions with it are not currently transmitted to OpenAI or any other external AI provider, and are not sent to our backend for AI processing. If this changes in the future — for example, if the Copilot is connected to a live AI provider — we will update this Policy before that change takes effect.

12How we share information

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes. We share information only:

• With the service providers described below, to the extent necessary for them to help us operate the Service;
• If required to do so by law, regulation, legal process, or governmental request; or
• To protect the rights, property, or safety of Airwynn, our users, or others, where permitted by law.

13Third-party service providers

We currently rely on the following service providers to operate the Service:

• Supabase — provides account authentication and our application database (Postgres). Account credentials, session tokens, and application data described in this Policy are processed through Supabase.
• OpenWeatherMap — provides weather and location-search data, as described in "Weather and location information" above.
• Resend — delivers email notifications to our team when a demo request or early access application is submitted.
• Render — hosts our backend application server.
• Vercel — hosts our website and web application's static files.
• Leaflet / OpenStreetMap and related content-delivery infrastructure — used to display map imagery within the application. Loading map content causes your browser to make a direct request to these providers' infrastructure, in the same way loading any embedded map does.

Each provider processes information only as necessary to perform its function for us.

14International processing

Some of our service providers may process information outside Singapore. Where applicable, we take steps to address such transfers in accordance with applicable law.

15Data security

We use a number of technical measures intended to protect information processed by the Service, including: authentication based on signed, server-verified session tokens; application-level access controls that govern what each account is permitted to do; database-level row security policies that scope organizational data to authorized accounts; rate limiting on sensitive endpoints; secrets and API keys stored as environment variables rather than in source code; parameterized database queries designed to prevent SQL injection; and encrypted transport (HTTPS) provided by our hosting infrastructure.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We do not claim that the Service is "100% secure" or invulnerable to compromise.

16Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, to provide and maintain the Service, meet applicable legal or regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods may vary depending on the type of information and the purpose for which it is processed.

17Your privacy rights and requests

You may contact us at airwynnhq@gmail.com with any question or request relating to your personal information, including requests to access, correct, or delete information we hold about you, or to withdraw consent where consent is the basis for processing. We will handle requests as required by applicable law.

The Service does not currently include a self-service tool for account deletion, data export, or consent withdrawal. Until such tools exist, please use the contact address above and we will assist you directly.

18Children's privacy

The Service is intended for business and professional use and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at airwynnhq@gmail.com so we can address it.

19Changes to this Privacy Policy

We may update this Privacy Policy as the Service evolves. When we do, we will revise the effective date at the top of this page. We encourage you to review this page periodically. Material changes to how we handle your personal information will be reflected here before they take effect.

20Contact information

Airwynn is currently operated by Pranav Mohan. For any question, concern, or request relating to this Privacy Policy or your personal information, please contact:

Email: airwynnhq@gmail.com

21Governing law

Singapore is the intended jurisdiction governing Airwynn's operations. This Policy is intended to describe Airwynn's handling of personal information in a manner consistent with applicable privacy obligations, including those under Singapore's Personal Data Protection Act (PDPA) where applicable. This Policy is descriptive of our current practices and is not a representation of formal, certified regulatory compliance.