VertexFly Privacy Policy

1. General Data Processing Approach

VertexFly's core flight and telemetry features do not require a user account. VertexFly does not operate a centralized user database.

Telemetry received from the aircraft, flight records, mission information, vehicle profiles, and application settings are processed on the user's device and stored there when the relevant feature requires it. The application does not automatically upload flight records or the telemetry stream to VertexFly servers.

Network requests for online maps, airspace data, and terrain downloads, as well as information you send when contacting us, may involve additional data processing. These activities are described in sections 7 and 13.

2. Location Information

VertexFly receives the connected aircraft's GPS position through the telemetry connection. This information is used to display the aircraft on the map, monitor flights, plan missions, and provide location-related flight features.

The current Android version does not request permission to access the phone's or tablet's GPS location. The aircraft's GPS position is separate from the device's own location information.

When online maps or terrain data are requested, the requested map tile or terrain file may reveal the relevant geographic area to the service provider. Section 7 explains these activities in more detail.

3. Aircraft, Telemetry, and Application Data

Depending on the aircraft and features used, VertexFly may process:

• GPS position, altitude, speed, heading, and attitude;
• battery, GPS, flight mode, system health, and vehicle alerts;
• mission waypoints, routes, flight events, and timing information;
• aircraft identifiers, hardware information, and vehicle profiles;
• connection, video stream, and application settings selected by the user.

This data is used to display vehicle status, prepare and send missions to the aircraft, operate flight features, and enable review of past flights.

Mission, configuration, and control commands are sent to the relevant aircraft through the vehicle connection. Application preferences and vehicle profiles may be stored on the device so the same settings can be applied in later sessions.

4. Flight Records, Retention, and Deletion

VertexFly may create flight records from telemetry and operational information received during a flight. These records are stored on the user's device and used to view, replay, and export past flights.

The current version applies a limit of 80 flight records and 200 MiB of total record file size. Storage management prioritizes newer records; records outside these limits may be deleted automatically.

Flight records have no fixed retention period. They may remain on the device until the user deletes them or they are removed automatically under the storage limits.

Users can delete individual records or all records from the flight history interface. Records can also be exported in GPX, KML, or CSV format and shared with an application, person, or service selected by the user.

Exported files may include location, route, timing, and, depending on the format, vehicle or telemetry information. The user controls whether to initiate sharing and which recipient to select. Data processing by the selected sharing service is governed by that service's own privacy policy.

Deleting a record from VertexFly does not delete previously exported files or copies held by other people or services.

5. Camera and Video Streams

VertexFly can display live video from a compatible camera or video source configured by the user. In the current Android version, this feature does not require access to the phone's or tablet's camera.

The stream is played by connecting to the configured source. The application does not automatically upload this video to VertexFly servers or store it on those servers. Connection settings for the video source may be stored on the device.

If the user configures a remote video service, technical information received by that service during the connection and the service's own logging practices are subject to the provider's privacy policy.

6. Application Permissions

The current Android version uses internet access and network state permissions for aircraft connections and online data downloads. Android does not display a separate runtime permission prompt for these permissions.

When communicating with supported USB devices, Android may ask the user to approve access to the particular USB device. Export and sharing operations use file or sharing interfaces provided by the operating system.

The current Android version does not request device location, device camera, or broad storage access permissions. Denying the required USB access or disabling network connectivity may prevent the relevant features from working.

7. Internet and Third-Party Services

Map services

VertexFly retrieves map tiles from third-party map service providers to load and display maps. Different providers may be used depending on the selected map source or service availability.

During these requests, providers may receive the following information:

• Your IP address;
• the date and time of the request;
• technical information in request headers;
• the addresses of the requested map tiles.

The requested map tiles may reveal information about the geographic area you are viewing in the application.

For information about the identities of map service providers and their data processing practices, you may contact us at hello@vertexfly.com or through the other contact details in section 13.

VertexFly files and hosting services

VertexFly map image tiles, airspace data, and terrain/elevation files are stored on a third-party hosting service provider's infrastructure. The application may download these files through vertexfly.com.

During download connections, the server may receive information such as the IP address, connection time, technical information in request headers, and the requested file address. The requested map tile, country, or terrain file may reveal the geographic area of interest.

These downloads do not require uploading flight records or the telemetry stream to the server.

The hosting infrastructure generates technical access logs for requests to vertexfly.com. These logs may include:

• The date and time of the request;
• the IP address;
• the request method and the address of the requested resource or file;
• device and browser information inferred from request headers;
• the country estimated from the IP address;
• the amount of data transferred;
• the server response time.

These logs may be used to operate the data download service, monitor traffic and performance, investigate technical issues, and maintain service security. The device and country fields do not mean that the phone's or tablet's GPS location is collected.

For information about the identity of the hosting service provider and its data processing practices, you may contact us using the details in section 13.

Email services

A third-party email service provider's infrastructure is used to receive, store, and respond to enquiries. Your email address, message content, and attachments may be processed and stored on this infrastructure. Section 13 provides further information about contact data.

Server locations

Map, hosting, and email services may use server infrastructure in different countries. Technical information in map and file requests and contact data you send may therefore be processed or stored on servers outside the country in which you are located.

For information about service providers' identities, server locations, and data processing practices, you may contact us using the details in section 13.

8. Sale of Data and Advertising Use

VertexFly does not sell users' flight, telemetry, or location data or use it to create advertising profiles.

Map and data download requests are made to provide the relevant features. User-initiated export and sharing operations are explained in section 4.

9. Data Security

Flight records and local application data are stored subject to the access protections provided by the device and operating system. HTTPS connections are used to download maps, airspace data, and terrain data.

The security properties of connections to an aircraft or configured video source depend on the connection type and the configuration of the relevant system.

10. Children's Privacy

VertexFly is not designed for children. It is a technical Ground Control Station developed for aircraft management and flight operations.

The application does not provide a registration or profile creation feature intended to collect personal data from children. If you believe personal data relating to a child has been sent to us, you can contact us using the details in section 13.

11. Control Over Data and Personal Data Rights

VertexFly users can use the application's tools to view, export, share, and delete flight records. These features are available regardless of the country in which the application is used.

You can delete flight records stored only on your device using the application's deletion tools. Previously exported or shared copies must be managed separately; deleting a record within the application does not remove those copies.

Data processed locally by the application is obtained through aircraft connections and selections made in the application. Technical data concerning requests to online services is obtained during network connections, while contact data is obtained when you email us. The relevant purposes and services are explained in other sections of this policy.

Processing by the application on your device does not mean that flight records or the telemetry stream are automatically sent to the data controller. The controller's server and contact processing activities are described in sections 7 and 13.

Legal grounds for processing by the data controller

For server and contact processing activities subject to the KVKK, the following legal grounds are assessed subject to the relevant statutory conditions being met:

• Managing ordinary enquiries and support requests, and operating and securing the online data service: legitimate interests under KVKK Article 5(2)(f), provided the processing is necessary and does not harm the individual's fundamental rights and freedoms;
• assessing requests to exercise personal data rights and fulfilling legal obligations: compliance with a legal obligation under KVKK Article 5(2)(ç), to the extent the processing is necessary for the relevant obligation;
• handling a legal claim or dispute: establishing, exercising, or protecting a right under KVKK Article 5(2)(e), to the extent the processing is necessary for that right.

These grounds concern processing by the data controller for the relevant purposes; they do not mean that the same legal grounds apply to all processing undertaken by third parties for their own purposes.

Further information about processing conditions is available from Türkiye's Personal Data Protection Authority.

You may send questions and requests concerning your personal data to the data controller at hello@vertexfly.com or through the other contact details in section 13, regardless of the country in which you are located. The scope of your rights and the methods for submitting requests depend on the law applicable to the relevant processing activity. Requests will be assessed under the conditions and within the time limits required by that law. Only information necessary to verify that the request is yours and to assess it may be required.

Rights under the KVKK

For personal data processing activities subject to Türkiye's Personal Data Protection Law No. 6698 (KVKK), you may contact the data controller to exercise the following rights:

• Learn whether your personal data is processed and request information if it is;
• learn the processing purpose, whether the data is used for that purpose, and who receives it domestically or abroad;
• request correction of incomplete or inaccurate data;
• request deletion or destruction when legal conditions are met;
• request that recipients be notified of corrections, deletion, or destruction;
• object to adverse results based solely on automated analysis;
• request compensation for damage caused by unlawful processing.

Further information about these rights is available from Türkiye's Personal Data Protection Authority.

Other applicable data protection laws

Where the European Union's General Data Protection Regulation (GDPR) applies to the relevant processing activity, you may exercise the following rights, subject to the conditions set out in that law:

• Access your personal data and obtain a copy;
• request correction of incomplete or inaccurate data;
• request deletion of data;
• request restriction of personal data processing;
• object to personal data processing;
• exercise the right to data portability.

Where the relevant conditions are met, you may also exercise rights concerning decisions based solely on automated processing that produce legal or similarly significant effects for you.

If processing is based on your consent, you may withdraw it. Withdrawal does not affect the lawfulness of processing before the withdrawal. Your right to lodge a complaint with the competent data protection authority is also preserved.

Further information is available from the European Commission's explanation of personal data rights.

Where another country's data protection law applies to the relevant activity, you also retain the rights provided by that law. This policy does not limit your rights under applicable law.

12. Changes to This Privacy Policy

This policy may be updated when VertexFly's features or data processing practices change. The current version will be published on this page, and the last updated date will appear at the beginning of the policy.

If cloud synchronization, server-based flight record storage, or other data processing features are introduced, the relevant data categories, purposes, recipients, and retention terms will be added to this policy. Notices required by applicable law will be provided, and user consent will be obtained where required.

13. Contact

You can contact us about this policy, data processing practices, or your personal data rights:

• Data controller: Ahmet Arif Altıntaş
• Application: VertexFly
• Contact address: Güzelyurt Mah. Akyol Sok. 29/5 Nevşehir/Merkez, Türkiye
• Website: vertexfly.com
• Email: hello@vertexfly.com

When you email us, your email address, message content, and any attachments you voluntarily provide may be processed to assess and respond to your enquiry. This information is stored on the email service provider's infrastructure.

Contact emails and attachments are retained for the period necessary to assess and resolve the enquiry. Resolved enquiries are reviewed monthly. Correspondence is deleted unless it must be retained to comply with a legal obligation or to establish, exercise, or protect a right. Records that must be retained are kept only for the period required by the relevant obligation or necessary to protect that right.