1) Scope
This Privacy Policy explains how SARA — System for Aviation with Real‑time AI ("SARA", "we", "our") collects, uses, and shares information when you access or use our services, including web, mobile, and integrated applications. By using SARA, you consent to the practices described in this Policy.
2) Information We Collect
- Account Identifiers: such as your name (if provided), email address, and user ID.
- Authentication Data: tokens, metadata and timestamps required to authenticate your sessions securely.
- Subscription & Billing: information related to your subscription plan, Stripe customer and session IDs, transaction statuses. We do not store your full payment card data.
- Usage Metrics: message counts, AIP (Aeronautical Information Publication) accesses, local document counts, feature flags (e.g., beta access).
- Device and Log Info: IP addresses, device identifiers, error logs, timestamps used to enforce guest limits, secure our platform and diagnose issues.
- Support Communications: messages and inquiries you send to our support team.
3) Sources and Legal Bases for Processing
We collect data you provide directly, data generated through your use of our services, and data from trusted third-party processors such as Stripe. Our legal bases include performance of contract, legitimate interests (security, fraud prevention, analytics), consent where applicable, and compliance with legal obligations.
4) How We Use Your Information
- To provide core service features: authentication, enforcing plan limits, credit allocations.
- Process subscriptions, payments, and refunds via Stripe.
- Maintain security, prevent abuse and enforce Terms of Service.
- Measure and improve product performance and user experience (e.g., via Firebase Analytics where enabled).
- Communicate service updates, critical notices, and customer support responses.
5) AI and Third-Party Processing
To generate AI-powered responses, your prompts may be transmitted securely to trusted AI vendors (e.g., OpenAI, Mistral). These vendors process data strictly to deliver the service and under their own privacy terms. We do not sell your personal data nor use your content to train our own AI models.
6) Cookies and Local Storage
We use essential cookies and local storage for authentication and session continuity. Additionally, analytics cookies may be used in production environments. You can control and disable cookies through your browser settings, though this may limit some functionality.
7) Sharing and Disclosure
- Service Processors: Stripe (payments), Google Firebase (hosting, database, analytics), and other subcontractors who assist in service operation.
- Legal Requirements: We may disclose information to comply with laws, legal processes, or to protect rights.
- No Sale of Personal Data: We do not sell or rent your personal information to third parties for marketing.
8) Security Measures
We implement industry-standard technical and organizational safeguards, including encryption in transit, access controls, and regular audits. While we strive to protect your information, no system is completely secure. Please report any suspected security incidents promptly.
9) Data Retention
We retain your information for as long as your account is active and as necessary to comply with legal obligations, resolve disputes, and enforce agreements. Data no longer required is securely deleted or anonymized.
10) International Data Transfers
Your data may be processed in countries outside your residence. We ensure appropriate safeguards and contract clauses with providers to protect your privacy rights during such transfers.
11) Your Rights and Choices
Subject to local laws, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to processing. To exercise these rights, please contact us at
saraapp.dev@gmail.com.
12) Children's Privacy
Our services are not intended for children under the legal age in your jurisdiction. Please do not register minors without appropriate parental or guardian consent.
13) Updates to This Policy
We may revise this Privacy Policy from time to time. Material changes will be posted here and, where appropriate, communicated via email or in-product notifications. Continued use after such changes constitutes acceptance.