Overfly Privacy Policy

Version 2 · Effective 13 November 2026

The Spanish version governs. This English version is a courtesy translation.

1. Controller

Provider: Pablo Espinel
Location: Valladolid (Spain)
Contact: overfly.app@icloud.com

2. In short

Overfly has no accounts, no analytics, no ads, no tracking, no cookies and no backend of its own. We do not keep your data on any server. Diagnostics stay on your device and only leave it if you choose to email a problem report.

3. What data is processed and why

Device location. Used only on the device to centre the map and check the point. It is not sent anywhere as such. If you turn on "Tell me when I arrive" for a saved place (Pro), iOS also watches that place in the background, with location access set to Always, and Overfly checks the zones on the device when you get there. To tell driving past from arriving, it also reads your motion activity (Motion & Fitness) on the device only, at the moment of the arrival; it is not stored or sent.
Coordinates of the point you check (rounded to about 1 m). Sent to Open-Meteo (weather and elevation), IGN (elevation) and ENAIRE (NOTAMs) to answer your query.
IP addresses. Those services, Cloudflare (which delivers the zone data from overfly.servex.qzz.io and, if that host is filtered, from a mirror at overfly-data.pabloecab.workers.dev) and Apple receive your IP address when serving requests. They are independent services with their own policies.
Zones read directly from authorities. For some countries (for example Germany, the Netherlands, Finland, Portugal and Ireland) the app downloads the official zone files on your device directly from the relevant authority, which receives your IP address. Your coordinates are not sent.
On your device. Settings, saved places (Pro) and the data cache. They exist only on your device until you delete the app.
Acceptance of the terms. The accepted version and the date are saved only on your device.
Diagnostics. The app keeps a short log of its own activity (errors, which data was downloaded) and, if iOS provides them, crash and hang reports, only on your device. Nothing is collected or sent automatically. If you use "Report a problem" in Settings, Overfly prepares a report with technical details (app and iOS version, device model, language, permission states, the state of the zone data, counts of saved places and flights, and the recent log) and opens your email app so that you can read it and decide whether to send it to overfly.app@icloud.com. It contains no names or coordinates of your places. If you send it, we use it only to look into the problem you describe.
Pro purchase. Handled by Apple. Overfly does not receive your payment details.
Base map and place search. Provided by Apple Maps, under Apple's privacy policy.

4. Legal basis

Performance of the service you request (art. 6.1.b GDPR): sending coordinates to the services that answer your query.
Legitimate interest (art. 6.1.f GDPR): delivering the zone data quickly and securely through a content delivery network (CDN).

Providing the coordinates is necessary to get weather, elevation and NOTAMs; if you do not want to send them, do not check that point.

5. Recipients

Open-Meteo, IGN, ENAIRE and Apple handle data as independent controllers. Cloudflare provides our delivery service as a processor and also handles network data under its own policy:

Open-Meteo: https://open-meteo.com/en/terms
IGN / CNIG: https://www.ign.es/web/ign/portal/info-aviso-legal
ENAIRE: https://www.enaire.es/politica_de_privacidad
Cloudflare: https://www.cloudflare.com/privacypolicy/
Apple: https://www.apple.com/legal/privacy/

Check their policies to see how they handle data.

6. International transfers

Cloudflare and Apple may process data outside the European Economic Area. When they do, they rely on mechanisms provided by the GDPR, (arts. 45 and 46), such as an adequacy decision or standard contractual clauses. You can ask us for more information at overfly.app@icloud.com or see their policies.

7. Retention

Overfly keeps nothing on servers. Data on your device stays until you delete the app. Third parties keep data as their policies state.

8. No profiling or automated decisions

We do not build profiles. The verdict is informational and has no legal effect on you.

9. Your rights

You can exercise your rights of access, rectification, erasure, restriction, objection (including to processing based on legitimate interest) and portability by writing to overfly.app@icloud.com. Because Overfly does not store your data, in practice you will also need to contact the third parties listed above. If you think your rights are not respected, you can complain to the Spanish Data Protection Agency (AEPD, https://www.aepd.es).

10. Children

Overfly is not aimed at children under 14 and does not knowingly collect their data.

11. Changes

If this policy changes materially, we will publish a new version and the app will ask you to accept it again.