Privacy
What we collect, and what we don't
WingsAbove is designed to know as little about you as possible while still showing the planes near you. This policy covers the WingsAbove Desk device, WingsAbove Cloud and its accounts, Crew Mode, WingsAbove Plus billing, and this website. It is written in plain language on purpose, and it is part of our Terms of Service. If anything is unclear, email hello@wings-above.com and we'll explain it.
The short version.
- The device needs a rough location that you type in. It has no GPS, microphone, or camera.
- A WingsAbove Cloud account is an email address and a subscription status. Payments are handled by our payment processor; we never see your full card number.
- Crew Mode reads a calendar link you paste. The link lives on your display, not in an account with us, and we never ask for a crew-portal password.
- No advertising tracking inside the device or WingsAbove Cloud. An ad pixel runs on this marketing website only.
- We never sell personal data. The Meta pixel on this website does share browsing activity with Meta for advertising, which California law calls "sharing" — you can opt out of it.
- You can see what we hold about you, or have it deleted, by emailing us.
The Desk device
What it sends to our servers
- The location you set. You enter an airport code, a US ZIP code, or coordinates. The device turns that into an approximate latitude and longitude, stores it on the device, and sends it to our servers to fetch the aircraft near you. That is the only thing it is used for. Devices in the same area share one lookup, so we see an area, not a street address.
- A device identifier. Each device has a fixed identifier derived from its hardware. It is sent with every request so we can deliver updates, apply the WingsAbove Plus subscription that belongs to that device, answer support questions, and stop abuse. It is not linked to your name unless you contact us or claim a subscription.
- Health check-ins. About every five minutes the device reports its firmware version, board type, how long it has been running, free memory, Wi-Fi signal strength, how many aircraft it has seen, and why it last restarted. We use this to spot crashes, roll out fixes, and keep the fleet healthy. It contains no location and nothing you typed.
- Artwork reports. If you tap to flag wrong artwork, the device sends which flight was on screen, which artwork it showed, and its device identifier. A person looks at these to fix the artwork.
- Crew Mode sends the schedule link you pasted, so our servers can read it. See the Crew Mode section below.
What stays on the device
- Your Wi-Fi password is stored on the device only, so it can reconnect. It is never sent to us.
- Your settings, logbook, and screenshots live on the device and its memory card.
- Diagnostic logs are written to the memory card. They are not uploaded. If you contact support we may ask you to send them, and you decide whether to.
- No microphone, no camera. The device doesn't listen and doesn't watch.
- No keys on the device. All data-provider credentials live only on our servers, never on the device or the memory card.
WingsAbove Cloud and your account
- Signing in. Accounts are created through our sign-in provider, Clerk. Clerk handles your password or the sign-in method you choose and receives your email address and, if you provide one, your name. We store your account identifier and email address so we know which subscription is yours.
- Subscriptions. Payments are processed by Stripe. Stripe collects your card details directly and tells us only who you are, what you subscribed to, and whether the subscription is active. We never see your full card number.
- Device purchases. When you buy a device from our store, the store (Shopify) sends us the order number, the email address on the order, and what was bought, so we can grant the WingsAbove Plus period included with the device to the account that signs in with that email.
- Location. WingsAbove Cloud needs a location to centre the sky on, and it is used for nothing else: only to choose which aircraft to show you. An airport code or a ZIP code is approximate — a town, not an address. Coordinates you type, or a position your browser shares when you allow it, are a precise point that you chose. Either way it is stored with your account so any screen you sign in on opens on the same sky, and your browser keeps a copy so you don't have to type it again. We do not sell it, we do not use it for advertising, and we do not try to work out whose address it is. Change it any time in Settings; deleting your account removes it, and a Factory Reset removes it from a device.
- What you agreed to, when you subscribed. Before we take a card we show you exactly what you are agreeing to, and we keep a copy of that: the wording you were shown, the date, your email address, the network address and browser you used, and which plan and price. Automatic-renewal law requires us to be able to show that you were told, so we keep these for at least three years, including after an account is deleted. They are never used for anything else.
- Emails about your subscription. We email you when you subscribe, before a free trial becomes a charge, before an annual plan renews, and once a year while a subscription continues. These are service notices, not marketing, and the law requires several of them, so they have no unsubscribe link — they stop when your subscription does. They are sent through Postmark.
- Which screens have it open. A browser running WingsAbove Cloud checks in every few minutes so we know it is working. We record a random identifier for that browser and window, when it was last seen, and which account it belongs to — enough to tell one screen from another and to support you, and nothing about what you look at. A browser that stops checking in is forgotten after a week.
- Casting. If you cast WingsAbove Cloud to a TV, the casting service on that TV (for example Google Cast) is involved and handles that session under its own privacy policy.
- No analytics or ad tracking. WingsAbove Cloud uses only the cookie that keeps you signed in.
Crew Mode
Crew Mode follows one person's flying schedule, or a list of aircraft, instead of the sky overhead. Because it handles a work schedule, it is built to hold as little as possible.
- The calendar link. You paste the subscription link your crew portal already publishes. Our servers read that link each time the display refreshes, to find the flights in it. The link itself is stored on your display, not in an account with us.
- The parsed schedule is kept in a short-lived server cache, about 30 minutes, so the display doesn't re-read your portal every few seconds. It is not written to a database.
- The pairing code you type into the display expires within minutes of being issued.
- No crew-portal password. We never ask for one, and the setup page has no analytics or tracking.
- If it is your schedule and someone else has put it on a display, email us and we will disable it.
Screen Cast
Screen Cast streams your display over your local Wi-Fi only, and is off by default. While it's on, anyone on your network who has the address can view it. We do not receive or record the stream. A "watch from anywhere" option, where offered, would route through our servers and is clearly opt-in.
Our servers and the companies that help us
The device and WingsAbove Cloud talk only to our own servers. Our servers then fetch public flight data and images from the providers below on your behalf. The providers see requests from our servers, not from you: we send them a coarse area or an aircraft identifier, never your account, your device identifier, or your address.
| Who | What they do for us | What they receive |
|---|---|---|
| Fly.io | Runs our servers, in the United States | Everything the device and Cloud send us, described above |
| A managed database | Stores accounts, subscriptions, and device check-ins | The same |
| Cloudflare | Directs traffic to our servers and caches artwork | Request addresses and the artwork files |
| Clerk | Sign-in for WingsAbove Cloud | Email, sign-in method, name if given |
| Stripe | Payments | Card details, billing email |
| Shopify | Our online store | Your order, under Shopify's own policy |
| Flight-data providers | Aircraft positions, routes, registrations, flight status | A coarse area or an aircraft identifier |
| Postmark | Sends the service emails about your subscription | Your email address and the message itself |
| Netlify and Buttondown | This website's waitlist form and our mailing list | See "This website" below |
Server logs. Like any web service, our servers keep short-lived logs of each request: the time, the path requested, and the device identifier or network address it came from. We use them to operate the service, find faults, and stop abuse. We do not use them to build a profile of you, and we delete them routinely.
This website
This website works differently from the product, and it's worth stating plainly.
- Waitlist signups. The form stores your email address, the ad or link that sent you, your IP address, and your browser's user-agent, with our forms host (Netlify) and our email sender (Buttondown). We use it to email you about WingsAbove: launch, pre-orders, and updates. We don't sell it or pass it to anyone else, and every email includes an unsubscribe link.
- Meta Pixel (advertising). This site runs Meta's advertising pixel, which tells Meta (Facebook and Instagram) that a visit and a signup happened, so we can measure which ads work and reach people likely to be interested. Meta receives this as an advertising partner and handles it under their data policy. We do not send your email address to Meta. Passing browsing activity to an advertising network this way is what California law calls sharing for cross-context behavioural advertising. We do not sell your data and never have, but this counts as sharing, and you can stop it — see Your choices. You can also limit it in your Facebook or Instagram ad settings, or by using a browser that blocks trackers.
- We removed the TikTok pixel in September 2026. It is no longer on this site and TikTok receives nothing from it.
- The product is not involved. The pixel is on this marketing website only. Nothing on the device or in WingsAbove Cloud reports to Meta or any advertising network.
Children
WingsAbove is sold to adults, and the Services are not directed to children under 13. We do not knowingly collect personal information from a child under 13. A device on a family shelf is set up by an adult and sends nothing about who is watching it. If you believe a child has given us personal information, email us and we will delete it.
How long we keep things
- Your account and subscription record: for as long as the account exists. Ask us to delete it and we will.
- Device check-ins: for as long as the device is in service, so we can support it. A factory reset does not erase our copy; email us with the device identifier from the System Status screen and we will remove it.
- Artwork reports: until we have fixed the artwork.
- Crew Mode schedules: about 30 minutes in a server cache, then gone.
- Server logs: briefly, for operations and troubleshooting.
- What you agreed to when subscribing: at least three years, because automatic-renewal law requires us to be able to produce it. This outlives the account itself.
- A record of the service emails we sent you: kept alongside the subscription, so we can show a notice was given.
- Which browsers had WingsAbove Cloud open: forgotten a week after one stops checking in.
- Waitlist emails: until you unsubscribe or ask us to remove you.
Our servers and the companies that help us are in the United States. If you use WingsAbove from elsewhere, your data is processed there.
Your choices
- Change or clear your location at any time (Menu → Set Location on the device, or in WingsAbove Cloud).
- Factory Reset (Menu) erases your Wi-Fi, location, Crew Mode link, and settings from the device.
- Cancel a subscription from your account page; delete your account by emailing us.
- Unsubscribe from our mailing list or the waitlist using the link in its footer, or email us and we'll remove you by hand. Service notices about a subscription you hold — a trial ending, a renewal due — are required and have no unsubscribe link; cancelling the subscription ends them.
- Ask us what we hold about you, correct it, or ask us to delete it, at hello@wings-above.com. We answer these requests whoever you are and wherever you live, and we will confirm your identity first when a request concerns an account.
- Opt out of advertising sharing. We have never sold personal data and never will. We do share browsing activity on this marketing website with Meta through its advertising pixel, which California law counts as sharing for cross-context behavioural advertising. To opt out, email hello@wings-above.com with "Do Not Share My Personal Information" — no account or explanation needed. You can also block it yourself with a tracker-blocking browser or extension, or in your Facebook and Instagram ad settings. None of this affects the device or WingsAbove Cloud, where no advertising tracking runs at all.
Security
Traffic between the device, WingsAbove Cloud, and our servers is encrypted. Provider credentials live only on our servers. Firmware updates are digitally signed, so a device installs only software we published. Access to our servers and admin tools is limited to the people who run WingsAbove. No system is perfectly secure; if you find a problem, please tell us at hello@wings-above.com.
Changes to this policy
When we change this policy we will post the new version here with a new date at the top. If a change is material, we will also email account holders before it takes effect.
Who we are
WingsAbove LLC
PO Box 154
Pine Island, MN 55963, USA
Questions or data requests: hello@wings-above.com.