StuFly
Privacy Policy
- There are no accounts, no advertising and no analytics or tracking.
- Your flights and waypoints stay on your watch and phone. We never upload them.
- Your location is sent only to services that return weather, maps and place names. Those requests carry no name, account or device identifier.
- To check your subscription, we store a random install ID and your subscription status. Nothing we store identifies you by name or email.
Who we are
StuFly is developed by an independent developer in the United Kingdom, who is the data controller for the limited data described here. Contact: stuflydev@gmail.com.
Data that stays on your devices
StuFly is a flight instrument, so it needs sensor data to work. The following is processed on your watch and phone and is not sent to us:
- Precise location (GPS), used for speed, heading, distance to home, the map and flight recording, including while the app runs in the background during a flight.
- Barometric pressure and motion sensors, used for altitude and the variometer.
- Recorded flights (GPX files), stored on the watch and transferred to your paired phone over the Wear OS connection.
- Waypoints, settings and diagnostic logs, stored on your devices.
Flight files leave your phone only if you choose to share them, or save a backup to a location you pick.
Services that receive your location
A few features need an internet service. For each, the request contains the coordinates or search needed to answer it, and nothing else: no name, email, account, advertising ID, device identifier or subscription information. Like any internet request, the provider can also see your device's IP address and a generic app name. On Wear OS, requests may be routed through your paired phone.
| Feature | Service | What is sent |
|---|---|---|
| Weather, wind and ground elevation | Open-Meteo | Current coordinates and time zone |
| Map display | OpenStreetMap tile servers; MapLibre demo style and fonts (phone) | Requests for the map tiles covering the area shown |
| Naming a flight or weather location; place search when adding waypoints | Android's built-in geocoder, provided by Google | The launch point coordinates, or the place name you type |
These providers handle requests under their own privacy policies, linked above.
Subscription and licence checks
StuFly is a paid subscription with a free trial, sold through Google Play. Google handles payment, and we never see your card details, name or email address. See Google's Privacy Policy.
To confirm that a subscription is valid and that the app is a genuine copy installed from Google Play, the watch periodically contacts our licensing service. It uses Google's Play Integrity API and the Google Play Developer API, and it stores:
- a random install ID the app generates. It is not linked to your Google account, name or hardware serial;
- the purchase token Google Play issues for your subscription, stored under a one-way hash, plus its status (for example active, cancelled or expired), expiry date, renewal setting and whether it was a test purchase;
- the app version, the integrity result Google returns (whether the app and device passed Google's checks), and the time of the last check.
The service runs on Google Cloud (Firebase) in London, United Kingdom. Google acts as our processor. We use this data only to provide the subscription and prevent fraud, such as unlicensed copies or refunded purchases. Its use is necessary to perform our contract with you (UK GDPR Article 6(1)(b)) and in our legitimate interest in preventing fraud (Article 6(1)(f)).
How long we keep it
- Short-lived anti-abuse records (used integrity tokens and one-time codes) are deleted automatically, normally within a day.
- Records of Google Play notifications are deleted automatically after about 30 days.
- Subscription and install records are kept while your subscription is active and for a reasonable period afterwards to handle renewals, refunds and disputes. They are deleted on request.
Sharing
We do not sell or rent data, share it for advertising, or use it for any purpose other than those described here. We disclose it only if required by law.
Security
All network traffic uses encrypted HTTPS. The licensing database cannot be accessed from outside our service, and the subscription confirmations the app stores are cryptographically signed so they cannot be forged.
Your rights
Under UK GDPR you can ask to access, correct or delete your data, or object to its processing. Email stuflydev@gmail.com. To delete the licensing record, include the order number from your Google Play receipt (it starts with GPA.) so we can find it, since we hold no name or email to search by. Uninstalling StuFly removes all data stored on your devices. You can also complain to the Information Commissioner's Office.
You can manage or cancel your subscription at any time in Google Play subscriptions.
Children
StuFly is intended for adult pilots and is not directed at children.
Changes
If this policy changes, we will update it here and change the effective date. Significant changes will also be noted in the app's release notes.