Privacy Policy
This Privacy Policy explains how SkyISO (“we”, “us”) processes personal data when you use our aviation photography community at https://skyiso-8773d.web.app and related apps.
1. Data Controller
Martin Hettlinger
Hotterweg 5, 7311 Neckenmarkt, Austria
Email: skyiso.support@gmail.com
Service: SkyISO · Legal notice (Impressum)
2. Who This Policy Applies To
This policy applies to registered users of SkyISO. Community content (feed, rankings, messages) is only available after sign-in. SkyISO is not intended for children under 16.
3. Data We Collect
Account data
- Email address
- Display name
- Profile photo (optional)
- Firebase authentication user ID
- Terms acceptance timestamp
User-generated content
- Uploaded photos and videos
- Post titles, aircraft types, and metadata
- Likes, comments, monthly votes, ranking data, and share counts
- Private messages between users
- Reports you submit about content or users
- Blocked-user list (stored on your account)
Technical data
- Basic device/browser information transmitted by Firebase and your browser
- Browser language/locale and timezone (stored once for aggregated service statistics — admin only, not shown to other users)
- Sign-in method (email, Google, or Apple)
- Authentication session data (email/password or Sign in with Apple / Google via the iOS app)
- Local app preferences (e.g. service worker cache flags)
We do not sell your personal data and we do not use third-party advertising trackers.
4. Why We Process Your Data (Legal Bases)
Under the GDPR, we rely on the following legal bases:
- Contract (Art. 6(1)(b) GDPR): to provide account, upload, feed, voting, messaging, and profile features.
- Legitimate interests (Art. 6(1)(f) GDPR): to secure the service, prevent abuse, review reports, and improve reliability.
- Legal obligation (Art. 6(1)(c) GDPR): where we must retain or disclose data under applicable law.
- Consent (Art. 6(1)(a) GDPR): where you explicitly accept our Terms and Privacy Policy during registration.
5. How We Use Your Data
- Create and manage your account
- Display your posts and profile to other users
- Enable likes, comments, votes, rankings, Best Of archives, and **share links** to posts
- Deliver private messages between participants
- Process abuse reports and enforce our Community Guidelines
- Monitor aggregated usage (e.g. user counts, sign-up trends, approximate region from browser settings) to operate and improve the service — visible only to the operator admin, never sold or used for ads
- Respond to support requests
- Delete data when you delete your account
6. Where Data Is Stored
SkyISO uses Google Firebase (Authentication, Cloud Firestore, Cloud Storage). Data is hosted on Google Cloud infrastructure (project region as configured in Firebase, typically EU multi-region for European projects). Google acts as a data processor under its cloud terms; international transfers rely on appropriate safeguards (e.g. EU Standard Contractual Clauses) where applicable.
7. Sharing of Data
We share data only when necessary:
- Other users: your display name, avatar, posts, comments, and ranking information are visible to other signed-in users. Email addresses are not shown in user search.
- Service providers: Google Firebase (hosting, database, storage, authentication). Sign in with Apple / Google on iOS is provided by Apple / Google under their respective terms.
- Legal requests: we may disclose data if required by law or to protect users and the service.
We do not share data with advertisers.
Share link previews
When you share a post link (/p/…), messengers and social apps may fetch a preview page. That page includes public metadata already visible in the app: post title, pilot display name, aircraft details, and a thumbnail URL. This helps recipients see context before opening SkyISO. We do not expose your email address in share previews.
Deutsch — Link-Vorschau
Beim Teilen eines Post-Links können Messenger eine Vorschau laden (Titel, Pilotenname, Flugzeug-Infos, Vorschaubild). Es werden keine E-Mail-Adressen in der Vorschau angezeigt.
8. Retention
- Account and content data are kept while your account is active.
- When you delete your account, we delete your user profile, posts (including comments), votes, private messages, conversations you participated in, and reports you filed. Storage files linked to your posts and avatar are removed where technically possible. Your Firebase authentication record is deleted.
- Moderation reports about your content may be retained in anonymized or pseudonymized form for up to 24 months for legal compliance.
9. Your Rights (GDPR)
If you are in the EU/EEA, you have the right to:
- access your personal data;
- rectify inaccurate data (edit profile in-app);
- erase your data (delete account in-app);
- restrict or object to certain processing;
- data portability, where applicable;
- withdraw consent where processing is based on consent;
- lodge a complaint with your local data protection authority.
To exercise your rights, use in-app account tools or email skyiso.support@gmail.com.
10. Security
We use Firebase security rules, authenticated access controls, and HTTPS transport. No online service can guarantee absolute security, but we take reasonable steps to protect your data.
11. International Users
If you access SkyISO from outside the EU, your data may be processed in countries with different data protection laws. We take steps to ensure appropriate safeguards through our infrastructure providers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date above.
13. Complaints & Illegal Content (EU)
If you believe content on SkyISO is illegal or violates your rights, use the in-app Report feature or contact skyiso.support@gmail.com. Provider details: Impressum. Copyright notices: Terms §9.
14. Contact
Questions about privacy?
Email: skyiso.support@gmail.com