Last updated: 23 September 2026 · Version 1.6

Privacy Policy

This Privacy Policy explains how SkyISO (“we”, “us”) processes personal data when you use our aviation photography community at https://skyiso-8773d.web.app and related iOS and Android apps.

1. Data Controller

Martin Hettlinger
Hotterweg 5, 7311 Neckenmarkt, Austria
Email: skyiso.support@gmail.com
Service: SkyISO · Legal notice (Impressum)

2. Who This Policy Applies To

This policy applies to registered users of SkyISO. Community content (feed, rankings, messages) is only available after sign-in. SkyISO is not intended for children under 16.

3. Data We Collect

Account data

• Email address
• Display name
• Profile photo (optional)
• Firebase authentication user ID
• Terms acceptance timestamp and version
• Optional Pro / beta flags used to enable Challenge extras

User-generated content

• Uploaded photos and videos (including Challenge entries)
• Post titles, aircraft types, spotting metadata (registration, airport, airline)
• Likes, comments, monthly votes, ranking data, Challenge medals, and share counts
• Private messages and group chats (text, links, photos)
• Reports you submit about content or users
• Blocked-user list (stored on your account)

Technical data

• Basic device/browser information transmitted by Firebase and your browser
• Browser language/locale and timezone (stored once for aggregated service statistics — admin only, not shown to other users)
• Sign-in method: email and password on the web; the iOS app may also use Sign in with Apple or Google
• Authentication session data
• Optional push-notification token (FCM / APNs) if you allow notifications
• Local app preferences (for example cache flags in localStorage)
• A strictly necessary app-platform cookie on native shells so the WebView can detect iOS or Android

Photo metadata

When you upload a photo we usually re-encode it (JPEG, max 1600 px), which typically removes GPS and most EXIF. If encoding fails, the original file may be stored. For Challenge entries we may read DateTimeOriginal (capture time) to check that the photo was taken after the round started. We do not use GPS for maps or tracking.

We do not sell your personal data and we do not use third-party advertising trackers or advertising cookies.

4. Why We Process Your Data (Legal Bases)

Under the GDPR, we rely on the following legal bases:

• Contract (Art. 6(1)(b) GDPR): to provide account, upload, feed, voting, messaging, profile, and Challenge features you use.
• Legitimate interests (Art. 6(1)(f) GDPR): to secure the service, prevent abuse, review reports, run admin-only aggregates, and check Challenge photos against the task.
• Legal obligation (Art. 6(1)(c) GDPR): where we must retain or disclose data under applicable law (including the EU Digital Services Act).
• Consent (Art. 6(1)(a) GDPR): where you accept our Terms and Privacy Policy during registration, and where you allow push notifications.

5. How We Use Your Data

• Create and manage your account
• Display your posts and profile to other signed-in users
• Enable likes, comments, votes, rankings, Best Of archives, Challenge rounds, and share links
• Deliver private messages between participants
• Send optional push and in-app notifications (Master Caution) for likes, comments, replies, votes, and messages
• Process Challenge entries, including an automated motif check (see below)
• If a startscreen-hero feature is enabled by the operator, a winning photo may appear on the public landing and login pages for a limited time
• Process abuse reports and enforce our Community Guidelines
• Monitor aggregated usage (user counts, sign-up trends, approximate region from browser language) — admin only, never sold or used for ads
• Respond to support requests
• Delete data when you delete your account

6. Challenge photo check (Google Gemini)

If you submit a photo to a Challenge, our server may send that image (and the task text) to Google Gemini (Google Ireland / Google LLC as processor) so the photo can be compared with the mission (for example “engine” vs “landing gear”). This is not used for advertising. We do not train our own AI models on your photos. Google’s API terms apply to that call; for users in the EEA/UK we use a setup intended not to use those prompts for Google model training, subject to Google’s current terms.

You can use SkyISO without joining a Challenge. If you do not want this processing, do not submit Challenge photos.

7. Where Data Is Stored

SkyISO uses Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Hosting, and optionally Firebase Cloud Messaging). Data is hosted on Google Cloud. Google acts as a processor under its cloud terms; international transfers rely on appropriate safeguards (including EU Standard Contractual Clauses) where applicable.

Fonts (Inter, Rajdhani) are hosted on our own servers. We do not load fonts from Google Fonts in the live app.

8. Sharing of Data

We share data only when necessary:

• Other users: your display name, avatar, posts, comments, and ranking information are visible to other signed-in users. Email addresses are not shown in user search.
• Service providers: Google Firebase; Google Gemini for Challenge motif checks; Apple / Google for Sign in with Apple / Google on iOS; Apple Push Notification service / FCM if you enable push.
• Legal requests: we may disclose data if required by law or to protect users and the service.

We do not share data with advertisers. SkyISO is not affiliated with Flightradar24, airlines, airports, or aircraft manufacturers. Optional FR24 buttons only open a public webpage in your browser.

Share link previews and Share to Story

When you share a post link (/p/…), messengers may fetch a preview (title, pilot name, aircraft details, thumbnail). We do not expose your email in previews. Share to Story (your own uploads only) creates a branded 9:16 image that you can send via the system share sheet (for example Instagram). We do not post to Instagram on your behalf.

9. How to delete some of your data (without closing your account)

You can remove your own content in the app (web, iOS, or Android):

• Posts: open your post → menu → delete (or remove from your profile library).
• Messages: open Messages → delete a conversation to remove that thread from your account.
• Profile photo or display name: Profile → Edit Profile — change or replace them anytime.

For other data (for example a correction or erasure under GDPR), email skyiso.support@gmail.com from your account email. We respond within a reasonable time. Moderation records about your content may be kept in anonymized form for up to 24 months (see section 11).

10. How to delete your account

You can delete your SkyISO account yourself at any time (web app, iOS app, or Android app). No email request is required.

1. Sign in to SkyISO.
2. Open the Profile tab (bottom navigation).
3. Tap ⋯ (top right) and choose Delete account.
4. Confirm deletion when prompted. You may need to sign in again if your session expired.

If you cannot access the app, email skyiso.support@gmail.com from your account email and ask us to delete your account. We may verify your identity before processing the request.

What we delete: your Firebase authentication record, user profile, posts (including comments), votes, private messages, conversations you participated in, Challenge medals tied to deleted posts, and reports you filed, where technically possible. Storage files linked to your posts and avatar are removed where technically possible.

What we may keep: moderation reports about your content may be retained in anonymized or pseudonymized form for up to 24 months for legal compliance. Backups may take a short time to purge; we do not use deleted account data for new processing.

11. Retention

• Account and content data are kept while your account is active.
• When you delete your account, the deletions described in section 10 apply.
• Moderation reports about your content may be retained in anonymized or pseudonymized form for up to 24 months for legal compliance.

12. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to access, rectify, erase, restrict or object to certain processing, data portability where applicable, withdraw consent, and lodge a complaint with a supervisory authority. In Austria that is the Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Wien, www.dsb.gv.at.

Use in-app account tools or email skyiso.support@gmail.com.

13. Security

We use Firebase security rules, authenticated access controls, and HTTPS. No online service can guarantee absolute security.

14. International Users

If you access SkyISO from outside the EU, your data may be processed in countries with different data protection laws. We take steps to ensure appropriate safeguards through our infrastructure providers.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the date and version above. Where required, we will ask you to accept the new Terms version in the app.

16. Complaints & Illegal Content (EU)

If you believe content on SkyISO is illegal or violates your rights, use in-app Report or email skyiso.support@gmail.com. Provider details: Impressum. Copyright notices: Terms §9.

17. Contact

Questions about privacy?
Email: skyiso.support@gmail.com

← Back to SkyISO