Privacy Policy

This Privacy Policy ("Policy") describes how Bumpwise ("Bumpwise," "we," "us," or "our") collects, uses, discloses, stores, and protects information when you use the Bumpwise mobile application for iOS (the "App"), our website at bumpwisesite.vercel.app, bumpwise.app, and any related services, APIs, or features (collectively, the "Services").

By downloading, installing, accessing, or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use the Services.

This Policy applies to all users worldwide. Certain jurisdictions provide additional rights described in dedicated sections below, including for residents of the European Economic Area, United Kingdom, Switzerland, California, and other U.S. states with comprehensive privacy laws.

Bumpwise is operated by Snowflake Studio. For privacy related inquiries, data subject requests, or complaints, contact us at:

• Email: contact@snowflake.studio
• Mail: 548 Market Street, Suite 35410, San Francisco, CA 94104, United States
• Website contact form: bumpwise.app/#contact

We will respond to verified requests within the timeframes required by applicable law, typically within 30 to 45 days depending on your location.

We collect information in three broad categories: information you provide directly, information collected automatically, and information from third parties.

3.1 Information You Provide Directly

• Account information: If you create an account, we may collect your name, email address, password or authentication credentials, and profile preferences.
• Flight and travel information: Flight numbers, airline codes, departure and arrival airports, travel dates, saved trips, and any other flight details you enter to obtain turbulence forecasts.
• Communications: Messages you send through our contact form, support emails, feedback, survey responses, and any other correspondence with us.
• User generated content: Notes, preferences, or settings you configure within the App.

3.2 Information Collected Automatically

• Device information: Device model, operating system version, unique device identifiers, mobile network information, language settings, and time zone.
• App usage data: Features accessed, screens viewed, buttons tapped, session duration, crash logs, performance data, and diagnostic information.
• Log data: IP address, access timestamps, referring URLs, browser type (for website visits), and general usage patterns.
• Approximate location: Only if you grant location permission, we may collect coarse location to provide regional weather context. We do not continuously track your precise location in the background unless you explicitly enable a feature that requires it and we disclose that use at the time of permission.

3.3 Information from Third Parties

• Aviation and weather data providers: We retrieve publicly available or licensed aviation weather, flight route, and atmospheric data from sources such as NOAA, the National Weather Service, Open Meteo, and flight data APIs. This data is generally not personal to you but is combined with flight details you provide.
• Apple Sign In: If you authenticate with Apple, we may receive a unique identifier and, if you choose to share it, your name and email address as provided by Apple.
• Analytics providers: Aggregated or pseudonymized usage statistics from service providers that help us understand App performance and user engagement.

We use collected information for the following purposes:

• Provide the Services: Generate turbulence forecasts, Bumpwise Scores, route timelines, storm alerts, and operational impact summaries for flights you look up or save.
• Personalization: Remember your saved flights, preferences, and settings across sessions and devices when you are signed in.
• Notifications: Send push notifications, email alerts, or in App messages about turbulence updates for saved flights, if you opt in.
• Improvement and research: Analyze aggregated usage patterns to improve forecast accuracy, fix bugs, develop new features, and conduct internal research. We use de identified or aggregated data where possible.
• Security and fraud prevention: Detect, investigate, and prevent unauthorized access, abuse, and violations of our terms.
• Legal compliance: Comply with applicable laws, regulations, legal process, and enforceable governmental requests.
• Communication: Respond to your inquiries and provide customer support.
• Marketing: With your consent where required, send promotional communications about Bumpwise. You may opt out at any time.

Legal bases (EEA/UK users): We process personal data based on performance of a contract (providing the Services you request), legitimate interests (improving security and the Services, analytics), consent (marketing, optional permissions), and legal obligation where applicable.

We do not sell your personal information. We do not share personal information for cross context behavioral advertising. We may share information in the following circumstances:

• Service providers: Trusted vendors who process data on our behalf under contractual obligations, including cloud hosting (e.g., Fly.io, Vercel), analytics, email delivery, customer support tools, and authentication services. These providers may only use data as instructed by us.
• Weather and aviation APIs: When you request a forecast, flight identifiers and route parameters may be sent to third party APIs to retrieve weather and flight data. These providers receive only what is necessary to fulfill the request.
• Legal requirements: When required by law, regulation, subpoena, court order, or governmental request, or when we believe disclosure is necessary to protect rights, safety, or property.
• Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.
• With your consent: When you direct us to share information or otherwise consent to sharing.
• Aggregated or de identified data: We may share information that cannot reasonably identify you for research, marketing, or industry analysis.

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

• Account data: Retained while your account is active and for a reasonable period afterward to comply with legal obligations and resolve disputes.
• Flight lookup history: Retained according to your settings; you may delete saved flights within the App.
• Support communications: Typically retained for up to three years unless a longer period is needed for legal purposes.
• Log and analytics data: Generally retained in aggregated or pseudonymized form; raw logs may be kept for up to 12 months for security and debugging.

When data is no longer needed, we delete or anonymize it using commercially reasonable methods.

We implement administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption in transit using TLS/SSL for network communications
• Encryption at rest for sensitive data stored on our servers
• Access controls limiting employee and contractor access to personal data
• Regular security assessments and monitoring for unauthorized activity
• Secure development practices and dependency management

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

If we become aware of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal exceptions.
• Portability: Request a machine readable copy of certain data you provided.
• Restriction: Request that we limit processing in certain circumstances.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: Where processing is based on consent, withdraw consent at any time without affecting prior lawful processing.
• Opt out of marketing: Unsubscribe from promotional emails using the link provided or by contacting us.
• Push notifications: Disable notifications in your device settings or within the App.
• Location permissions: Revoke location access in your device settings at any time.

To exercise your rights, contact us at contact@snowflake.studio or through our contact form. We may need to verify your identity before processing requests. You may designate an authorized agent to submit requests on your behalf where permitted by law.

EEA and UK residents may lodge a complaint with their local data protection authority. We encourage you to contact us first so we can address your concerns.

If you are a California resident, the California Consumer Privacy Act as amended by the CPRA provides additional rights:

• Right to know what personal information we collect, use, disclose, and sell or share
• Right to delete personal information subject to exceptions
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information (we do not sell or share for cross context behavioral advertising)
• Right to limit use of sensitive personal information (we use sensitive information only as necessary to provide the Services)
• Right to non discrimination for exercising privacy rights

Categories collected in the past 12 months may include identifiers, commercial information (subscription status if applicable), internet activity, geolocation data (if permitted), and inferences drawn from usage to improve forecasts.

Shine the Light: California residents may request information about disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing.

Bumpwise is based in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate.

For EEA, UK, and Swiss users, we rely on appropriate safeguards for international transfers, such as Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Agreement, or other lawful transfer mechanisms where required.

The Services are not directed to children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at contact@snowflake.studio and we will take steps to delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, contact us to request deletion.

The Services may contain links to third party websites, apps, or services not operated by Bumpwise. This Policy does not apply to those third parties. We encourage you to review the privacy policies of any third party services you access.

The App may integrate with Apple App Store, weather data providers, and aviation information services. Your use of those services is governed by their respective terms and privacy policies.

Our website may use cookies, local storage, and similar technologies to:

• Enable essential website functionality
• Remember preferences
• Analyze website traffic and performance

You can control cookies through your browser settings. Disabling cookies may affect certain website features. The App may use local storage on your device to cache forecast data and preferences.

We may use analytics and crash reporting tools to understand how the App is used and to diagnose technical issues. These tools may collect device identifiers, crash logs, and usage events. Where required, we obtain your consent before enabling non essential analytics. You may limit ad tracking through your device settings (e.g., Limit Ad Tracking on iOS).

You may delete your account at any time through the App settings or by contacting us at contact@snowflake.studio. Upon deletion, we will remove or anonymize your personal information within a reasonable timeframe, except where retention is required by law or for legitimate business purposes such as fraud prevention, dispute resolution, or backup systems that are purged on a regular cycle.

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated Policy on our website, updating the "Last updated" date, and, where required by law, providing additional notice such as an in App notification or email.

Your continued use of the Services after the effective date of an updated Policy constitutes acceptance of the changes, except where further consent is required by law.

For questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

• Email: contact@snowflake.studio
• Mail: Bumpwise / Snowflake Studio, 548 Market Street, Suite 35410, San Francisco, CA 94104, United States
• Web: Contact form