Privacy Policy
Effective date: October 7, 2026
This Privacy Policy explains how Jof Software LLC ("Jof Software," "we," "us") handles information in connection with the Westwind iPad application (the "App") and the westwindefb.com website (the "Site"). Jof Software LLC is a California limited liability company located at 2108 N Street, Suite N, Sacramento, CA 95816. Westwind is in pre-release development and is intended for distribution only in the United States.
Summary
- Most of what you enter into Westwind (flight plans, aircraft profiles, weight and balance, notes) stays on your iPad.
- To produce weather briefings and related information, the App sends your planned route, airports, times, and altitude to our servers, which query public aviation data sources and, for written summaries, a third-party AI model provider.
- Accounts are optional. If you sign in with Apple, we store your Apple account identifier and email address.
- We do not use advertising, analytics, or tracking tools, and we do not sell or share personal information for advertising.
Information that stays on your device
The App stores the following on your iPad only. It is not sent to us except as described in the next section:
- Flight plans, including routes, times, alternates, and the aircraft registration you enter.
- Aircraft profiles, performance data, weight and balance loading, and personal minimums.
- Cached briefings, airport favorites and recent airports, and saved NOTAMs.
- Scratchpad notes and drawings, which are deleted automatically after 30 days.
- Downloaded aviation data such as charts, airport data, procedures, terrain, and obstacles.
Stored flight and aircraft data is protected using iOS data protection. If you sign in, your session credentials are stored in the iOS Keychain on the device and are not synced to other devices.
Information sent to our servers
The App sends information to our servers (hosted by Fly.io in the United States) when you use features that need current data:
- Weather briefings and route weather: departure, destination, and alternate airports; route waypoints and their coordinates; planned departure and arrival times; VFR or IFR; cruise altitude; and planned groundspeed. We do not send your name, aircraft registration, or aircraft type for briefings.
- Weather map: the geographic area shown on the map and, if a route is active, the route.
- Airport information: the identifiers of the airports you look up.
- Data downloads: the names of the data sets and map tiles you download. Downloads are delivered from Cloudflare's storage service, so your device connects to Cloudflare directly and Cloudflare receives your IP address.
We use this information only to return what you asked for, and we do not keep a server-side history of your flight plans, routes, or briefings. Our servers hold briefing results in temporary memory for about one minute to avoid repeating identical work, and hold IP addresses in temporary memory for one minute for rate limiting. Neither is written to a database. Our servers also keep operational logs, held by our hosting provider, to run and secure the service. These logs may contain airport identifiers and network information; coordinates, route details, and credentials are removed from log entries.
Location
With your permission ("While Using the App"), the App uses your iPad's location to show your aircraft's position on the map. The App does not use location in the background, and it does not record or store a history of your location. Your location can leave the device in these cases:
- If you plan a route that begins at your present position, that position is sent with the route when you request a briefing or route weather.
- When the map is centered on your position, the map area sent for weather overlays, and the map tiles requested from Apple Maps and our data storage, reflect your general location.
You can turn off location access at any time in iPadOS Settings. Flight planning works without it.
ADS-B receivers and your local network
With your permission, the App communicates with portable ADS-B receivers on your local Wi-Fi network. It announces itself on that network with a short message that contains the App's name and a network port number and no personal information. Traffic and weather received from the receiver are displayed and kept only in memory; they are not sent to us.
Accounts
Signing in is optional and is needed only for community airport information (fuel prices and FBO comments). We use Sign in with Apple. When you sign in, Apple provides us a unique account identifier and an email address, which may be an Apple private relay address if you choose to hide your email. We do not request your name. If you sign in, we store:
- Your Apple account identifier and email address.
- Session tokens, stored in hashed form, used to keep you signed in.
- A usage record each time you request a briefing while signed in: the feature used, the date and time, and the amount of AI processing used. Usage records do not contain your airports, route, or times.
- Fuel prices and comments you submit (see below).
Community airport information
If you are signed in, you can submit fuel prices and comments about airport services (FBOs). Submissions are stored with your account.
- Fuel prices are visible to other signed-in users right away.
- Comments are reviewed before they are visible to other users.
- We do not display your name or email address with your submissions. Other signed-in users can currently see an internal account identifier attached to each submission, which could allow submissions made by the same account to be linked to one another.
Do not include personal information in comments.
AI-generated briefing summaries
Written summaries in briefings are generated using Anthropic's Claude models through Anthropic's commercial API. To produce them, our servers send Anthropic weather observations and forecasts for the relevant airports and route; the departure, destination, and alternate airport identifiers; the planned arrival time; the cruise altitude; and the identifiers of route waypoints affected by weather hazards. We do not send Anthropic your account information, email address, IP address, or location coordinates. Under Anthropic's commercial terms, Anthropic does not use this content to train its models. Anthropic deletes API inputs and outputs within 30 days, except where it must retain them longer to enforce its usage policy or comply with the law.
Service providers and data sources
We use these service providers to operate Westwind:
- Fly.io: hosts our servers and database (United States).
- Cloudflare: stores and delivers downloadable aviation data.
- GitHub: hosts this Site.
- Anthropic: generates written briefing summaries, as described above.
- Apple: Sign in with Apple, and Apple Maps base map tiles in the App.
To answer your requests, our servers also query public aviation data sources. These queries contain only what is needed for the lookup:
- FAA NOTAM and temporary flight restriction services: airport identifiers.
- NOAA / National Weather Service (aviationweather.gov and api.weather.gov): airport identifiers, the geographic area around the route, and the coordinates of departure, destination, and alternate airports.
- Iowa State University Mesonet: airport identifiers, for model output statistics.
These requests come from our servers, not your device, and are not associated with your account.
What we do not do
- We do not include advertising, ad attribution, analytics, or crash-reporting tools in the App or on the Site.
- We do not track you across other companies' apps or websites.
- We do not sell personal information or share it for cross-context behavioral advertising.
- The Site does not use cookies. Its host may log standard request information, such as IP addresses, to deliver and secure the Site.
- We do not respond to "Do Not Track" browser signals, because neither the Site nor the App tracks users across sites.
Retention
- Information on your iPad remains there until you delete it in the App or delete the App.
- If you have an account, your account information, usage records, and submissions are kept until you delete your account or ask us to delete them.
- Temporary server memory (briefing results and rate-limit data) is discarded within about one minute.
- Operational logs and service-provider records are kept according to those providers' standard practices.
Deleting your information and your choices
- Delete your account in the App under Settings → Account → Delete Account. This permanently deletes your account, usage records, fuel price submissions, and comments from our servers.
- Delete on-device data by removing it in the App or deleting the App.
- Requests: you can ask us what information we hold about you, or ask us to correct or delete it, by emailing privacy@westwindefb.com. We will respond within 45 days.
Security
Information sent between the App and our servers is encrypted in transit using HTTPS. On the device, stored data uses iOS data protection, and session credentials are kept in the iOS Keychain. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children
Westwind is intended for pilots and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact privacy@westwindefb.com and we will delete it.
Business transfers
If Jof Software is involved in a merger, acquisition, reorganization, conversion to another entity form, or sale of assets, information covered by this policy may be transferred as part of that transaction. We will post notice on the Site before information becomes subject to a different privacy policy.
Changes to this policy
We will update this policy when the App or our practices change, and update the effective date above. If a change materially affects how we handle information we already hold, we will post notice on the Site and, where practical, in the App before it takes effect.