Privacy Policy

Introduction

Aviato by Cuppa PTE LTD (“Aviato,” “we,” “us,” or “our”) respects and values your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our applications, website (https://aviato.so), and related services (collectively, the “Services”). By using our Services, you acknowledge that you have read and understood this Privacy Policy.

We are committed to transparency and compliance with applicable privacy and data protection laws, including the Singapore Personal Data Protection Act (PDPA), the General Data Protection Regulation (GDPR), and other relevant frameworks depending on your jurisdiction.

1. Information We Collect

We collect both personal and non-personal data to provide, maintain, and improve our Services.

1.1. Information You Provide Directly

Account and Profile Information: When you register for an Aviato account, we collect your name, email address, password, and other registration details.
Professional Information: Data you choose to input, including pilot license numbers, medical certificate dates, qualifications, and logbook records (such as flight hours, aircraft types, and training data).
Payment and Subscription Information: If you make a purchase, we collect payment details (processed through secure third-party providers such as Stripe).
Support Requests and Communications: When you contact our support team, we collect messages, attachments, or other details necessary to resolve your query.
Marketing Preferences: When you subscribe to newsletters or marketing communications through Mailchimp, we collect your preferences and engagement data.

1.2. Information Collected Automatically

Usage Data: Includes in-app activity, product interactions, feature usage frequency, and event logs collected for analytics and performance monitoring.
Device Data: Type of device, operating system, browser type, app version, time zone, and device identifiers.
Diagnostics Data: Crash reports, error logs, and performance metrics collected through Sentry and Amplitude.
Location Data: Precise location (when enabled) for features such as airport identification, flight mapping, or time zone adjustments.
Cookies and Similar Technologies: Cookies, pixels, and local storage used to remember preferences, session data, and improve functionality.

1.3. Information from Third Parties

Analytics and Performance Partners: We use Amplitude and Sentry to collect aggregated, anonymized analytics and diagnostic data.
Marketing Partners: Mailchimp helps manage newsletters and marketing communications.
Aviation Data Sources: For flight verification and enrichment, Aviato may collect publicly available data from aviation authorities or flight-tracking APIs (e.g., FR24, OpenSky Network).
Authorized Integrations: If you link external accounts or services (e.g., airline portals, HR systems), we may access related data as per your authorization.

2. How We Use Your Information

We use collected information to:

Provide and Maintain Services: Enable core functionality such as digital logbook storage, flight-hour tracking, and data verification.
Personalize User Experience: Customize features, recommendations, and display preferences.
Improve and Develop Features: Analyze usage patterns, detect bugs, and optimize product performance.
Communicate with Users: Send updates, respond to inquiries, and deliver support or account notifications.
Marketing and Engagement: Send newsletters or promotional updates through Mailchimp (only with consent).
Security and Compliance: Detect unauthorized access, protect against fraudulent activities, and comply with legal obligations.
Analytics and Research: Conduct internal analytics to enhance service performance, stability, and usability.
AI-Powered Enhancements: Improve accuracy and automation of features such as flight-time estimation, data verification, and predictive tools using anonymized datasets.

3. Cookies and Tracking Technologies

We use cookies and similar technologies for functionality, performance, and analytics.

Essential Cookies: Required to operate core features such as authentication and security.
Functional Cookies: Store user preferences and language settings.
Analytics Cookies: Measure engagement and usage trends via Amplitude and Google Analytics.
Opt-Out: You can manage or disable cookies through your browser settings, though some features may become unavailable.

4. Third-Party Services and Data Sharing

Aviato does not rent, sell, or trade your personal information. However, we share limited data with trusted third parties under strict confidentiality and security agreements.

4.1. Service Providers

We work with external partners to deliver essential functionality:

Amplitude: Analytics and usage tracking.
Sentry: Crash reporting and diagnostics.
Mailchimp: Marketing communications management.
Stripe (or equivalent): Secure payment processing.
Hosting Providers: Such as AWS or Supabase for cloud infrastructure and database management.

4.2. Business Partners and Integrations

When you authorize integrations (e.g., HR departments, flight schools, or regulatory bodies), specific data may be shared through encrypted links or APIs for verification purposes.

4.3. Legal and Regulatory Disclosures

We may disclose information if required to:

Comply with laws, regulations, or government requests.
Enforce our Terms of Use or policies.
Protect our rights, property, or users’ safety.

4.4. Business Transfers

If Aviato undergoes a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy commitments.

5. Data Transfers and International Storage

Aviato operates globally, and your information may be transferred to and stored in servers located outside your jurisdiction, including Singapore and the United States. We apply industry-standard safeguards, including encryption and data minimization, to protect your information. Where required, we rely on Standard Contractual Clauses or other lawful mechanisms to ensure adequate protection.

6. Data Retention

We retain personal data only for as long as necessary to fulfill operational, legal, and contractual obligations:

Account and logbook data: retained until deletion request or account closure.
Analytics and diagnostics: anonymized and retained for system optimization.
Marketing data: retained until you unsubscribe or withdraw consent.
Legal data: retained as required by applicable law.

After retention periods expire, data is permanently deleted or anonymized.

7. Data Security

We use administrative, technical, and physical safeguards to protect information:

Encryption of data in transit (TLS) and at rest.
Access controls and authentication protocols.
Regular security audits and vulnerability testing.
Strict role-based access to personal data within our systems.

Despite these measures, no online service can guarantee absolute security. Users are responsible for maintaining the confidentiality of their login credentials.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of your personal data.
Correction: Update or correct inaccurate information.
Deletion: Request deletion of your data (“right to be forgotten”).
Portability: Receive a copy of your data in a structured, machine-readable format.
Restriction: Limit processing of your data under certain conditions.
Withdrawal of Consent: Opt out of marketing or revoke authorization for specific data uses.

To exercise these rights, contact us at hello@aviato.so. We may verify your identity before processing requests.

9. Children’s Privacy

Aviato is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we learn that a child has provided personal data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in laws, regulations, or business practices. Updates will be posted on this page with the revised effective date. If significant changes occur, we may notify users via email or in-app alert.

11. Contact Information

For any questions, concerns, or data-related requests, please contact:

Aviato by Cuppa PTE LTD
105 Cecil Street, #18-00 The Octagon
Singapore 069534
Email: hello@aviato.so
Website: https://aviato.so

‍