1. Who we are

SkyYoke ("we", "us", "the app") is the developer and data controller of the SkyYoke iPhone application. You can reach us about privacy at support@menumeld.com or via ifkits.com.

This policy explains what information the app handles, how and why, who it is shared with, how long it is kept, and the rights you have. It covers the app only — not the third‑party simulators (Infinite Flight, Microsoft Flight Simulator) you connect it to, which are operated by their own companies under their own policies.

2. Information we handle

a. Data that never leaves your device

The following is processed only on your iPhone and is not collected, transmitted to us, or stored on our servers:

• Microphone audio & speech — used only by the optional AI Voice Copilot, transcribed on‑device by Apple's Speech framework (forced on‑device). Audio and transcripts are processed in real time and discarded.
• Device motion (accelerometer/gyroscope) — used to drive the tilt yoke.
• Flight data read from your simulator — aircraft position, heading, altitude, speed, traffic, weather, systems and ATC messages. This is read live over your local network for display and control, kept in memory, and not persisted. The only exception is the limited flight information described in (g) if you use Flight Live Activity.
• Your control inputs — sent over the local network only to the simulator device you are controlling.
• App settings — control‑tuning preferences, your last‑used connection (host IP address), selected simulator and display units, stored locally on your device (in iOS UserDefaults).

b. Account information (only if you sign in)

Signing in is optional and uses Sign in with Apple. If you sign in we receive and store, through our authentication provider (Supabase):

• your email address (you may use Apple's "Hide My Email" private relay),
• your name, if you choose to share it, and
• a randomly generated account identifier (a UUID) that links your subscription and settings.

Your authentication session/token is stored securely on your device (iOS Keychain).

c. Subscription & purchase information (only if you subscribe)

In‑app purchases are processed by Apple and managed via RevenueCat. We do not receive or store your payment card or full Apple Account details. We do store subscription metadata tied to your account identifier: active status, plan/entitlement, product identifier, store, environment (production/sandbox) and expiry date.

d. AI usage and AI assistant content (subscriber features)

• AI usage counters. For any AI feature that runs through our servers we record per‑day counts (number of requests and token totals) tied to your account identifier, to enforce fair‑use limits. We do not store the content of your prompts on our servers.
• Cloud AI assistant content. If you use a cloud‑based AI assistant feature, the text you type is sent through our secure proxy to Google's Gemini API to generate a response. That text is processed by Google subject to Google's terms; we do not retain it. (Note: the speech/voice copilot described above is separate and stays on your device.)

e. Technical & diagnostic data

Our backend providers may process standard technical information in server logs for security and to operate the service. When the app requests or downloads the optional Kokoro voice model, Supabase Storage and its CDN may process standard HTTP and network information, including your IP address, User-Agent, request time, response status, and related technical network and server logs, to authenticate the request, deliver the files, secure the service, and diagnose failures.

The checklist text used for speech, generated audio, and Kokoro inference remain on your device. The model download does not send checklist text or audio to Supabase, and it is not used for advertising or cross-app tracking.

f. Advertising measurement & attribution

To measure how our advertising performs — for example, to learn which campaigns bring people to the app — the app includes the TikTok and Meta (Facebook) attribution SDKs. These report a limited set of app events (such as first launch, app opens and completed purchases, including the purchase amount, currency, product identifier and transaction identifier), together with standard technical device information, to TikTok and Meta so an install or purchase can be matched to the ad you saw. TikTok and Meta may also use this data under their own privacy policies, including to help show you more relevant ads.

Because this counts as tracking under Apple's rules, the app shows the iOS App Tracking Transparency prompt. Your device's advertising identifier (IDFA) is shared only if you tap "Allow". If you choose "Ask App Not to Track" (or turn tracking off in iOS Settings), no advertising identifier is collected and attribution falls back to Apple's privacy‑preserving SKAdNetwork, which reports installs and conversions only in aggregate, without identifying you. These SDKs never read your flight data, account information or AI content.

g. Flight Live Activity (optional; signed‑in Pro subscribers)

Flight Live Activity shows your Infinite Flight multiplayer flight on your Lock Screen and in the Dynamic Island, and keeps it updated after you close SkyYoke. It is available only if you are signed in with an active Pro subscription; for those users it is on by default, and it can be turned off at any time in SkyYoke's Settings → Flight Live Activity. It starts automatically only for a flight with a filed IFR flight plan on an Infinite Flight multiplayer server, once you are airborne. It is not available for Microsoft Flight Simulator.

While the feature is on, the following is sent to and processed by our server (hosted by Supabase):

• Device identifier and credential — a random identifier our server creates for this installation of SkyYoke, and a secret device credential that lets the app reach our server even while it runs in the background. The credential is kept in your iPhone's Keychain; our server stores only a one‑way hash of it. Alongside them we store whether Live Activities are allowed on the device, your iOS major version and the app version, so updates are sent in a format your device supports.
• Live Activity push tokens — the push tokens Apple's ActivityKit issues to SkyYoke: one that lets our server start a Live Activity on this device (the push‑to‑start token), and one for each Live Activity. They are sent to our server and used only to deliver Live Activity updates through Apple Push Notification service (APNs).
• Infinite Flight identifiers — the multiplayer session (server) ID and flight ID of your current flight, read from the simulator. When our server first finds that flight on Infinite Flight's Live API, it also records the Infinite Flight user ID the flight belongs to and links it to your SkyYoke account, so an account cannot be used to follow someone else's flight.
• Flight details from the app — your flight plan route (simplified to at most 200 points), departure and arrival airports, aircraft and livery name, callsign and whether you are airborne; a snapshot of your simulated aircraft's position (latitude, longitude, altitude, ground speed and the time it was read), which our server uses to confirm that the flight it finds is really yours; and, if it happens, a "landed" or "crashed" event with the nearest airport code. The app reports the flight as soon as it detects a multiplayer flight with a flight plan — possibly while you are still on the ground — and refreshes it when the flight changes and every 15 minutes while you are connected. These are positions of your simulated aircraft, not your real‑world location; SkyYoke does not use your iPhone's location.

Updates after you close the app. While a flight is tracked — also when SkyYoke is closed, until the flight ends — our server checks Infinite Flight's public Live API about once a minute for that flight's position, altitude, speed, vertical speed, callsign, Infinite Flight username and flight‑plan type, which Infinite Flight makes available for multiplayer flights. Apart from the Infinite Flight identifiers above, this information is processed in memory and never stored as received; we keep only derived values such as progress, flight phase and timestamps. Our server then sends the Live Activity content — callsign, Infinite Flight username, aircraft and livery, departure and arrival airports, progress, distance remaining, estimated arrival time, altitude and ground speed — to your device through APNs. How long each item is kept is described in Section 6.

None of this is sold, shared with our advertising partners, or used for advertising or tracking. The Live Activity service's logs record only counts and status codes — never your tokens, identifiers, callsign or positions.

3. How we use information and our legal bases

Purpose	Data	Legal basis (GDPR/UK GDPR)
Provide the controller (connect to your simulator)	Local network, control inputs, settings	Performance of a contract; legitimate interests
Create and maintain your account	Email, name, account ID	Performance of a contract
Provide and verify subscriptions	Purchase/subscription metadata	Performance of a contract; legal obligation (records)
Provide AI features and enforce fair use	AI usage counts; prompt text (cloud AI)	Performance of a contract; legitimate interests; consent
On‑device voice control	Microphone, speech	Consent (device permission); processed on‑device
Deliver the optional on‑device voice model	IP address, User-Agent, model-download network/server logs	Performance of a contract; legitimate interests
Flight Live Activity (optional, Pro): show and update your flight on the Lock Screen	Device identifier and credential hash, push tokens, Infinite Flight session/flight/user IDs, flight plan route and airports, aircraft, callsign, simulated position snapshot, flight progress from the Infinite Flight Live API	Performance of a contract; legitimate interests (confirming the flight is yours, preventing abuse)
Security, abuse prevention, debugging	Technical/server logs	Legitimate interests; legal obligation
Measure advertising performance (attribution) and show more relevant ads	App events (install, purchase); advertising identifier (only with your consent); technical device info	Consent (ATT / advertising identifier); legitimate interests (aggregate measurement)

4. Who we share information with

If you allow tracking, the app shares a limited set of advertising data — your device's advertising identifier and app‑event data such as installs and purchases — with our advertising partners TikTok and Meta. They act as independent third parties and use this data under their own privacy policies to measure ad performance and, as noted in the App Tracking Transparency prompt, to help show you more relevant ads. We do not sell your personal information for money; however, under some U.S. state privacy laws (such as California's CCPA/CPRA) this advertising activity may be treated as a "sale" and/or "sharing" for cross‑context behavioral advertising, and you can opt out at any time by declining the tracking prompt or turning tracking off in iOS Settings. Apart from that advertising, we do not share your personal information for cross‑context behavioral advertising. The companies we work with — our backend processors, our advertising partners and, for Flight Live Activity, Infinite Flight's Live API — are:

• Apple — Sign in with Apple, App Store purchases, on‑device speech, Apple Intelligence, and Apple Push Notification service (APNs), which delivers Flight Live Activity updates to your device. (Apple Privacy)
• Supabase — authentication, backend hosting, and optional Kokoro voice-model delivery through Storage/CDN (account, subscription and usage records; Flight Live Activity device and flight records; standard model-download network/server logs). (Supabase Privacy)
• RevenueCat — subscription management. (RevenueCat Privacy)
• Google — the Gemini API, only when you use the cloud AI assistant. (Google Privacy)
• Infinite Flight — only while Flight Live Activity is tracking a flight, our server requests that flight's multiplayer data from Infinite Flight's public Live API using the flight's session and flight IDs. We do not send Infinite Flight your name, email, device identifiers or push tokens.
• TikTok — advertising partner (independent third party); ad attribution, measurement and more relevant ads, only if you allow tracking. (TikTok Privacy)
• Meta (Facebook) — advertising partner (independent third party); ad attribution, measurement and more relevant ads, only if you allow tracking. (Meta Privacy)

We may also disclose information if required by law, or to protect our rights, users, or the public.

5. International data transfers

Our providers (Apple, Supabase, RevenueCat, Google, Infinite Flight, TikTok, Meta) may process data on servers located in the United States and other countries. Where required, such transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. Data retention

On‑device and live flight data are not retained by us, apart from the short‑lived Flight Live Activity records described below. Account, subscription and AI‑usage records are kept for as long as your account is active and for a reasonable period afterwards to meet legal, tax and accounting obligations, then deleted or anonymized. You can request deletion at any time (see Section 8).

Flight Live Activity data is kept only as long as it is needed to show your flight:

• Flight records (route, airports, aircraft, callsign, Infinite Flight session and flight IDs, and derived progress values) are deleted within 24 hours after the flight ends. When a flight ends, its position snapshot, Live Activity push token and progress values are wiped immediately, and tracking of any single flight ends automatically after at most 60 hours.
• The position snapshot is deleted as soon as our server has confirmed the flight.
• A Live Activity push token is deleted when its flight ends; where needed, a copy with no link to your account is kept for at most one hour, only to remove the Live Activity from your screen.
• The link to your Infinite Flight user ID is cleared no later than 24 hours after your last tracked flight ends.
• The device registration (device identifier, credential hash, push‑to‑start token and the settings above) is kept while this device stays registered. Signing out of SkyYoke on the device deletes its push tokens immediately and the rest of the record within 48 hours; a device that has not contacted us for 180 days is deleted automatically. Turning the feature off ends any tracking at once and stops our server from using the device's tokens.
• Short‑lived rate‑limit counters (your account or device identifier and a request count) are deleted after one day.

7. Security

Connections to our backend use HTTPS/TLS. Server secrets (AI and payment keys) are held only on the server and never in the app. Database access is restricted by row‑level security so each signed‑in user can read only their own records. Flight Live Activity device credentials are stored on our server only as one‑way hashes, and that service's tables can be reached only through server‑side functions that check the data belongs to you. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

8. Your rights and choices

Depending on where you live (e.g. the EEA/UK under the GDPR, or California under the CCPA/CPRA), you may have the right to access, correct, delete, port, or restrict/object to the processing of your personal information, and to withdraw consent. California residents have the right to know, to delete, to correct, and to not be discriminated against for exercising these rights; we do not sell or share personal information.

• Delete your account & data: use the in‑app "Delete Account" option where available, or email support@menumeld.com. We will delete your account and associated records (subscription, AI‑usage and Flight Live Activity data) within 30 days, subject to any records we must keep by law.
• Permissions: you can turn off Microphone, Speech Recognition, Local Network or Motion access at any time in iOS Settings; the related features will simply be unavailable.
• Advertising & tracking: decline the App Tracking Transparency prompt, or turn tracking off any time in iOS Settings → Privacy & Security → Tracking; the app will then not collect your advertising identifier and ad measurement falls back to Apple's aggregate SKAdNetwork.
• Flight Live Activity: turn it off at any time in SkyYoke's Settings → Flight Live Activity; tracking stops immediately and any Live Activity for the flight is removed. Signing out also stops it and deletes this device's push tokens.
• To exercise any other right, contact us at the address above. We will respond within the time required by applicable law.

9. Children's privacy

The app is not directed to children under 13 (or the equivalent minimum age in your country, such as 16 in parts of the EEA) and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. Third‑party simulators

SkyYoke is an independent, unofficial app and is not affiliated with, sponsored by, or endorsed by Infinite Flight LLC or Microsoft. When you connect the app to a simulator, you are communicating with software you run on your own device over your own network; that software is governed by its own publisher's terms and privacy policy. Flight Live Activity uses Infinite Flight's public Live API, which Infinite Flight operates under its own terms and privacy policy.

11. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, provide a more prominent notice. Your continued use of the app after an update means you accept the revised policy.