Effective September 22, 2026
Planeworthy is an iPhone and iPad app for tracking maintenance on an aircraft. This policy explains what the app collects, where it is stored, and how to remove it. The short version: your maintenance records stay in your own iCloud account where we cannot read them, and the only information our server holds is what it needs to send you Airworthiness Directive alerts.
Your maintenance records
Everything you enter about your aircraft, its engine, maintenance items, completions, tach entries, oil changes, oil analysis PDFs, to-do items, AD decisions and owner details is stored on your device and, when iCloud is on, in the private iCloud database of the Apple ID signed in on that device. That database belongs to you. Planeworthy's developer has no access to it and does not receive a copy. Apple's handling of iCloud data is described in Apple's privacy policy.
What our server holds
Airworthiness Directive lookup and new-AD alerts run on a server operated by the developer. To provide them, the server stores:
| Data | Why |
|---|---|
| Email address and a random account identifier | To create and sign in to your account, send the confirmation code and password resets, and tell your devices apart. |
| Password, stored only as a salted hash by Amazon Cognito | To sign you in. We never see the password itself. |
| For each device: a push notification token, the platform, the app version and whether the build is a TestFlight or App Store build | To send a notification when the FAA issues an AD that names a model you watch. |
| The FAA airframe, engine and equipment models you watch | To match new ADs to your aircraft. These are model names such as 182P, not your tail number or serial numbers. |
The server does not receive your tail number, serial numbers, maintenance records, readings, AD decisions or owner details. Serial number hints in the app are computed on the device.
The invitation code entered at sign-up is checked and then discarded.
What we do not do
- No advertising, no analytics SDKs, no tracking across apps or websites.
- No sale or sharing of personal information with third parties for their own purposes.
- No location access, no contacts access, no camera or microphone access.
Third parties that process data for us
The server runs on Amazon Web Services in the United States. Amazon Cognito handles accounts, passwords, and the confirmation and password reset emails, and Apple Push Notification service delivers alerts. Airworthiness Directive text comes from the FAA's public Dynamic Regulatory System and the Federal Register; no information about you is sent to either.
Retention and deletion
Account data stays until you delete the account. In the app, open Settings, then Account, then Delete Account. That removes your email address, account identifier, watched models and push registrations from the server immediately. Push registrations for a device are also removed when Apple reports the token is no longer valid.
Your maintenance records are yours to delete: remove the app and its iCloud data from iOS Settings (Settings, then your name, then iCloud, then Manage Storage).
Children
Planeworthy is for aircraft owners and is not directed at children under 13. We do not knowingly collect information from them.
Changes
If this policy changes, the new version is posted here with a new effective date.
Contact
Questions about privacy go to matt@cmdoj.com.