Privacy Policy

FlightPortrait · Effective 28 September 2026

YODE PTE LTD (UEN 202424259R) (“YODE”, “we”, “us”), registered at 160 Robinson Road, #14-04, Singapore 068914, operates FlightPortrait. This policy explains how we handle personal data under Singapore’s Personal Data Protection Act 2012 (PDPA). It covers our website and pre-orders, and the FlightPortrait frame and app.

1. What we collect

• When you pre-order or contact us: your email address, name, and delivery address. Payments are processed by Stripe; we do not see or store full card numbers.
• When you use a frame or the app: your account email if you choose to link one; the approximate location of your frame, stored as a coarse center rounded to roughly one kilometre together with its place label and timezone; and basic device and usage records (device health, which flights were shown) needed to run the service.
• When you choose current position or search in the mobile sky picker: the app may ask for foreground location permission. It never asks for background location. A precise current-position fix is used transiently on your phone, rounded before it is sent to FlightPortrait, and then discarded. You can decline and choose your sky by moving the map instead.
• If you opt in to product updates: we store your email address and your consent to email you, until you unsubscribe. Opting in is a separate, deliberate tick, never bundled with a pre-order, and we record the wording you agreed to, when, and the IP address it came from, so that consent is verifiable. Every update we send carries a one-click unsubscribe, honoured immediately, and we act on it at once.
• If you hang your own pictures on your frame: we store each picture only in the form the frame displays it, a six-colour version prepared for the panel; the original upload is processed and immediately discarded, never kept. Your pictures are used for nothing except showing them on your frames, are never shared, and are deleted when you remove them.
• Automatically: limited technical data such as IP address and browser type, for security, fraud prevention, and to keep the site working. We use PostHog, hosted in the EU, to understand how visitors use this website: the pages viewed, the parts of a page reached and the buttons clicked. It sets no cookies and stores nothing on your device, does not keep your IP address, records no sessions, and each visit stays anonymous. Your browser's Do Not Track or Global Privacy Control setting turns it off. We never use advertising trackers.
• The flight data the product displays (ADS-B) is publicly broadcast aircraft information; it is not personal data about you.

2. Why we use it

To process and fulfil orders; provide, maintain and support the product and app; communicate with you about your order or account; keep our systems secure; and comply with legal obligations. We rely on your consent and on purposes a reasonable person would consider appropriate under the PDPA.

3. Consent and withdrawal

By providing personal data you consent to this policy. You may withdraw consent at any time by contacting our Data Protection Officer (below). We will explain the likely consequences; for example, we may be unable to fulfil an order or operate your device.

Consent to marketing email is separate and specific: buying a frame does not subscribe you to anything, and you can withdraw it on its own, at any time, using the unsubscribe link in any update we send. Doing so stops the updates and leaves the rest of your account untouched.

4. Who we share it with

Only with service providers who help us operate: notably Stripe (payments), Resend (which delivers our email, including the update emails you opt in to), PostHog (website analytics, as above), and our cloud hosting provider, and only as needed, under obligations to protect it. The mobile sky picker also uses Apple MapKit and Apple location services on iOS, or Google Maps and Android location and geocoding services on Android. Apple or Google may process map, search, geocoding, and current-position interactions under their own privacy terms. FlightPortrait's own service receives only the rounded center, coarse place label, and timezone. Our subscriber list itself is held in our own database, not theirs. We do not sell your personal data. We may disclose data where required by law.

5. Transfers outside Singapore

Some providers may process data outside Singapore. Where they do, we take steps so your data receives protection comparable to the PDPA.

6. How long we keep it

Only as long as necessary for the purposes above or as required by law (for example, order and tax records). Pre-order data is kept until your order is fulfilled or refunded, plus any legally required period. FlightPortrait does not receive or retain the precise phone fix; the mobile app discards it after rounding. Pictures you hang on your frame are kept until you remove them or your account is deleted, whichever comes first.

7. How we protect it

Personal data is encrypted in transit and at rest. The frame communicates by one-way transmission: it only initiates outbound connections, has no microphone or camera, and accepts nothing inbound. Location is rounded on the phone before it reaches FlightPortrait and snapped again at our API boundary, so we store only a roughly one-kilometre area. These choices are our strongest protection: we cannot lose what we do not collect.

8. Your rights

You may request access to the personal data we hold about you and how it has been used, ask us to correct it, or withdraw consent. Contact our DPO and we will respond within a reasonable time in line with the PDPA. If the data protection law of the country where you live (for example the EU or UK GDPR) gives you further rights, such as erasure, portability, or objection, we will honour requests under them too.

9. Data Protection Officer

Contact our Data Protection Officer at [email protected], or by post to the registered office above.

10. Children

FlightPortrait is not directed at children under 13, and we do not knowingly collect their personal data.

11. Changes

We may update this policy; we will post the new version here with a revised effective date and, where appropriate, notify you of material changes.

12. Governing law and complaints

This policy is governed by Singapore law. If you are not satisfied with our response, you may contact Singapore’s Personal Data Protection Commission (PDPC).