1. About this policy
This policy covers only the Overhead Flights app for iPhone and Android (“Overhead”, “the app”), made by Dylan Parker / QuSpace (“we”, “us”). Overhead sends you a notification when a plane, or a satellite or other sky event you choose, is about to pass over a place you pick. It explains what data the app uses, who receives it, and how to have it deleted.
2. Data the app uses and why
Anonymous device ID
The first time you open Overhead, it registers with our alert server and gets a random device ID and access token. They are not linked to your name, email, phone number or store account.
Location
- Watch points: places you save (for example “Home”), each with its coordinates, a label, an alert radius and a maximum altitude. They are stored on our server so it can check for aircraft passing over them.
- Current location (optional): if you allow location access, the app uses your device’s location. If you turn on live GPS and allow background location (“Always” on iPhone), the app sends your approximate position (balanced accuracy, not the highest GPS precision) to our server when you move a significant distance. The server keeps one “Current location” watch point and replaces it with each update. Turning live GPS off removes it.
- Live map: the coordinates of the area you are viewing are sent to our server to fetch nearby aircraft.
Notifications
If you allow notifications, the app sends our server an Expo push token so it can deliver alerts through Expo’s push service and Apple or Google’s push systems. Your space-alert settings and your device’s time zone are also stored on our server so alert times are shown correctly.
Alert history
For each alert we send, the server records the aircraft details (callsign, registration, type, route, position and altitude), the time, how close it passed to your watch point, and which device and watch point it was for. This history is shown in the History tab.
On your device
Your settings, saved places, the device token and whether you have Remove Ads are also stored on your phone (in app storage and the system’s secure storage). Deleting the app removes them from your phone.
Overhead does not include its own analytics or crash-reporting tools, and does not access your contacts, photos, camera or microphone.
3. Flight, sky and map data sources
To find and describe aircraft, our server sends coordinates (your watch points or the map area you are viewing), aircraft identifiers and callsigns to public data services: airplanes.live, adsb.lol and adsb.fi (live aircraft positions), adsbdb.com and hexdb.io (routes and aircraft details), Planespotters.net and Wikipedia/Wikimedia Commons (photos). For sky alerts it downloads satellite, launch and sky data from CelesTrak and The Space Devs (Launch Library); your location is used on our server to calculate passes and is not sent to them. Our server makes these requests itself, so the services see our server’s IP address, not yours.
Your phone connects directly to a few services: OpenStreetMap’s tile servers (map images for the area you are viewing), unpkg.com (the map library), and photo hosts such as Planespotters and Wikimedia (aircraft photos). Like any website, these services can see your IP address and what you request from them.
4. Advertising (Google AdMob)
The free version of Overhead shows ads from Google AdMob: a banner on some screens and occasional full-screen ads. To show and measure ads and prevent fraud, Google may collect your device’s advertising ID, your IP address (and the general location it reveals), device information, and how you interact with ads. Google uses this data under its own policies: How Google uses information from sites or apps that use its services and the Google Privacy Policy. Overhead does not give Google your watch points, GPS location or alert history.
- Consent: where the law requires it (for example in the EEA, the UK and Switzerland), the app shows Google’s consent form before ads start. If the form is required for you, you can change your choice at any time in Settings › Privacy & ad choices.
- iPhone: the app asks for permission to track you through Apple’s App Tracking Transparency prompt. If you decline, your advertising identifier (IDFA) is not shared and you get non-personalized ads. You can change this in iOS Settings › Privacy & Security › Tracking.
- Android: the advertising ID is used for ads. You can reset or delete it, or opt out of personalized ads, in your device’s Google ad settings. If you don’t give consent for personalized ads, the app requests non-personalized ads.
- Non-personalized ads: these may still use limited data, such as your IP address and general location, for frequency capping, measurement and fraud prevention.
If you have Remove Ads, the ad SDK is not started. You see no ads and no consent or tracking prompts.
5. Remove Ads subscription (RevenueCat)
Overhead offers an optional “Remove Ads” subscription for $9.99 per year (or the local equivalent shown in the store). Apple or Google processes the payment; we never receive your card or payment details. We use RevenueCat to confirm and restore purchases. RevenueCat receives an anonymous app user ID it generates, along with purchase details from the store (product, transaction and receipt information). See RevenueCat’s Privacy Policy. Manage or cancel the subscription in your App Store or Google Play account settings.
6. Sharing
We share data only with the services named in this policy, and only for the purposes given here. We may also disclose data if the law requires it. We do not sell or rent personal information.
7. Security
Data between the app and our server is encrypted in transit (HTTPS). Each device can only read its own watch points and alerts, using its private token.
8. Retention
- Watch points: kept until you delete them in the app or ask us to delete your data. Your live-GPS location is replaced with each update and removed when you turn live GPS off.
- Alert history: our server keeps only the most recent 2,000 alerts across all users. Older entries are deleted automatically, so they usually last a short time.
- Device ID, push token and settings: kept until you ask us to delete them. Deleting the app does not remove them from our server, so email us if you want them removed (Section 10).
- Server logs: our server’s operational logs can include the internal IDs of your device and watch points and details of alerts. They do not include your coordinates. They are kept only as long as needed to run and fix the service.
- Google, RevenueCat, Apple and Google Play keep data under their own policies.
9. Children
Overhead is not directed at children and is intended for users 18 and over. We do not knowingly collect personal information from children. If you think a child has used the app and you want their data deleted, contact us (Section 10).
10. Deleting your data
To delete the data our server holds for your device (device ID, push token, watch points, location, settings and alert history), email [email protected] with the subject “Overhead data deletion”. Overhead has no accounts, so tell us the name of at least one of your saved watch points and the rough area it is in, or the approximate time of an alert you received, so we can find your device’s records. We will confirm and delete the data within 30 days. We do not keep a copy, except where the law requires it.
You can also delete watch points in the app at any time and turn off live GPS. Deleting the app removes everything stored on your phone. To delete data held by Google (ads) or RevenueCat (purchases), use their controls or contact them. Apple and Google keep your purchase history in your store account.
11. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, or to object to or limit how it is used. Email us to make a request.
12. Changes
If we change this policy, we will update this page and the effective date. If we make significant changes, we will also mention them in an app update.
13. Contact
QuSpace (Dylan Parker) · [email protected]