Privacy policy

Last updated: 2 November 2026

1. Who we are

This Privacy Policy describes how Fyshh Pty Ltd (ABN 76 109 487 434), trading as Fyshh Aero ("Fyshh Aero", "we", "us" or "our"), collects, uses, discloses and protects your information when you visit this website at fyshh.aero, use the Fyshh Aero·FLT app for iPhone and Apple Watch ("FLT" or "the app"; previously published as "Flying Assistant"), use the Fyshh Aero·FIT app for iPhone ("FIT" or "the FIT app", section 5), or otherwise interact with us.

We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth). By using the website or the app, or by providing information to us, you agree to the practices described in this policy.

2. In short

• An account is optional. FLT works without a Fyshh Aero account, and without one it stores flights on your device and, if you have iCloud enabled, in your own private iCloud database. We store nothing about people who use the app without an account.
• Sharing is opt-in. Flight data reaches our servers only if you create an account and turn on flight sync or live streaming. It is then held in Australia and seen only by you and, if you choose, your flight school. Section 3 sets out side by side what changes when you create an account.
• Your school keeps a record of you as its student. If you join a flight school's account, its staff can record your training stage, licences and milestones and pin notes on your shared flights. That record is the school's and ends with your membership.
• No advertising. The app and this website have no advertising software and no third-party analytics or advertising trackers.
• Few network requests. Without an account, the only request the app makes to a service outside Apple's is an anonymous terrain-elevation lookup. With an account it also talks to Fyshh Aero's own servers, as described below.
• Health data is opt-in. In the FLT app, heart rate is read only if you turn the feature on, and a workout is saved to Health only if you choose that too.
• The FIT app keeps health data on the phone. Everything it reads from Apple Health is processed and kept on your iPhone, never synced to iCloud and never sent to us; its estimates and summaries are generated on the device. Only the outcome of a check (Go, Caution or Stand down) reaches your Fyshh Aero profile, and only if you opt in (section 5).
• This website sets no cookies of its own. Once you sign in to the web portal, it sets a session cookie on the fyshh.aero domain that the EXM trainer shares, so a single sign-in serves both. It holds the sign-in token, not your e-mail address (section 6).

3. Standalone or with an account: what changes

The FLT app is built to be used either way, and the choice is yours at any time. Creating an account does not upload anything by itself; the sync and live-streaming switches are separate and off until you turn them on.

Going back is as simple as signing out and deleting the account: the app keeps working standalone with everything on your device.

4. The FLT app

4.1 Information the app records

When you record a flight, FLT stores on your device:

• engine start and stop times, and the flight's GPS track (position, altitude, speed, heading and reported accuracy, roughly once per second);
• barometric pressure and the altitude derived from it against the QNH you enter;
• motion data from the accelerometer, reduced to load factor and touchdown firmness;
• detected landings, touch-and-goes, go-arounds and turns, and the analysis derived from them;
• the aircraft registration and any notes or labels you type;
• heart rate, only if you have turned that feature on;
• your settings, including units, QNH, reminder schedules and altitude ceiling;
• reference manoeuvres you star or import.

This information is used to provide the app's features: the logbook, landing and turn analysis, reference comparison and in-flight reminders. Unless you turn on flight sync (section 7) or live streaming (section 8), none of it reaches us.

4.2 Where it is stored

Flight data is stored on your iPhone and, if you use one, your Apple Watch. If iCloud is enabled on your device, the app mirrors your flights to your private iCloud database so that they are backed up and available on your other devices. That data is held by Apple under your Apple Account and Apple's own privacy terms; Fyshh Aero cannot read it. Deleting a flight in the app removes it from iCloud as well.

4.3 Device permissions

• Location, including in the background. Used to record the flight's track and to detect take-offs, landings and turns. Background location lets the phone keep recording in a pocket or on a mount with the screen off.
• Motion and fitness. The accelerometer is used to measure load factor during the flight and touchdown firmness near the ground.
• Health (optional). If you turn on heart-rate recording, the watch runs a workout session during the flight so heart rate can be logged alongside each sample. The workout is discarded after landing unless you choose to save it to Health. If the feature is off, the app does not access HealthKit at all.
• Notifications. Reminders on the phone are local notifications generated on the device. If you sign in to a Fyshh Aero account, the app also registers the device for push notifications so that instructor messages (section 8) can reach it: it sends our server a device installation identifier (an identifier Apple assigns to the app on that device, not the device's serial number or advertising identifier) and the push token Apple issues for it. Without an account, nothing is registered and no notifications are sent from a server.

4.4 Network requests

After a flight, to draw the ground beneath your altitude profile, the app sends the coordinates of that flight's track points to the free Open-Meteo elevation service and receives ground elevations in return. The request contains coordinates only. It carries no account, device identifier, name or other personal information, and we have no way to link it to you. Open-Meteo's handling of requests is described in its own privacy policy at open-meteo.com.

Without an account, that elevation lookup and Apple's iCloud synchronisation are the only network requests the app makes, and it works fully offline. With a Fyshh Aero account, the app also talks to Fyshh Aero's servers to sign you in, to check your subscription, and, if you turn those features on, to sync flights, stream a flight live, receive instructor messages and fetch weather, as described in sections 5 to 8.

4.5 Files you export or share

• Reference sets exported from the app contain manoeuvre measurements and traces, the aircraft registration, the dates flown and any label or notes typed by the exporter. They contain no positions and no personal identifiers unless typed into a label.
• Telemetry and logbook exports (CSV files) contain the flight's positions, altitudes and other recorded values. You choose who to share them with; once shared, they are outside our control and the app's.

4.6 What the app does not do

The app has no advertising software and no third-party analytics or advertising trackers, and does not use your data for advertising, profiling or sale. App Store download and crash statistics that Apple provides to developers are aggregated and anonymised by Apple under its own terms.

5. The FIT app

Fyshh Aero FIT (the FIT app) is a daily IMSAFE self-assessment aid for pilots, in development and not yet released; this section applies from its release and describes how it is built. It is not a medical device and it never decides whether you are fit to fly; under CASR 91.520 and FAR 91.17 that remains your responsibility.

5.1 Information the app reads

With your permission, and only for the categories you choose, the FIT app reads from Apple Health on your iPhone: sleep, resting heart rate, heart-rate variability, respiratory rate, sleeping wrist temperature, blood oxygen, breathing disturbances, body temperature, blood pressure, steps, exercise minutes and workouts, dietary energy, water, caffeine and alcoholic drinks, State of Mind entries, mindful minutes, body mass, blood glucose, environmental sound exposure, time in daylight, the symptoms you log, and the medications and doses you record in the Health app. It also reads the temperature, humidity and air-quality sensors in your home that you choose to connect through Apple Home, and the weather for your location through Apple Weather. Your check-ins themselves (an answer per letter and your declaration) are recorded in the app.

5.2 Processed and stored on the device

All of your health data is processed on your iPhone. Everything the FIT app reads, computes and learns, your check-ins, the signals derived from your health data, your personal baselines and the model fitted to your own answers, is kept in the app's own storage on the phone. Nothing is synced to Fyshh Aero's servers and nothing is synced to iCloud: the FIT app does not use iCloud at all. Your Apple Watch holds your latest check-in state for its complications and nothing else. The one exception in the Fyshh Aero ecosystem is the heart rate the FLT app logs during a flight when you turn that feature on there, which travels with that flight's record under section 4.

5.3 Estimates and generated summaries

The app's estimates for each letter are computed on your phone from your own earlier answers and signals. Written summaries are generated on your phone by the on-device model of Apple Intelligence on a supported iPhone; nothing is sent to Apple or to us to produce them, and every generated text is marked as generated on your iPhone. On an iPhone without Apple Intelligence the same screens show templated text.

5.4 Network requests

Without a Fyshh Aero account the FIT app makes one kind of request: your coordinates to Apple Weather for local conditions, with no account or identifier attached, under Apple's privacy terms. With a Fyshh Aero account and the Standard subscription, and only when you turn on "Attach my IMSAFE check to my flights", the app sends each check-in's outcome (Go, Caution or Stand down), time, kind (morning, pre-flight or evening), time zone and app version to your private space on our servers in Sydney, where it is attached to your Fyshh Aero profile. Nothing per letter, no health value and no number from your health data ever leaves the phone. We attach that outcome to the flight you recorded in the FLT app in the following hours and show it in your logbook. If you also turn on "Share my IMSAFE check with my schools", the instructors and school staff who can already see a shared flight see its outcome and time; nothing else, and a private flight never carries it.

5.5 How long we keep it, and deleting

An outcome attached to a flight stays with that flight record for as long as the flight does, and is deleted with the flight or with your account (section 18). On the phone you can export everything the app holds, move it to a new phone with an encrypted archive, or delete it all in the app's settings; deleting the app deletes it too.

5.6 What the app does not do

The FIT app does not store health information in iCloud, does not share health data with third parties, does not use it for advertising or profiling, and does not diagnose or treat anything.

6. Your Fyshh Aero account (optional)

You can use FLT without an account. A Fyshh Aero account is needed for the Standard subscription and for the features that depend on our servers: flight sync, live streaming, instructor messages, weather and the web portal at app.fyshh.aero.

Accounts are held in Amazon Cognito, Amazon Web Services' identity service, in the Sydney region. You sign in with an e-mail address and a password, and a sign-in code is sent to your e-mail address on every sign-in. For an account we store:

• your e-mail address and, if you set one, a display name;
• your app settings, such as units and the sync and live-streaming switches;
• your subscription state: the Apple or Stripe subscription identifier and its status, and any promotional or granted subscription records;
• your flight-school memberships and roles, and links between you and your instructors;
• for each device you sign in on, its installation identifier and push-notification token, so that instructor messages can reach your phone (section 4.3);
• the app version you use and the date you last used it, and one activity event per day you use the app signed in (section 12).
• if you use Fyshh Aero EXM, the free practice-exam trainer at exm.fyshh.aero, while signed in: your practice progress (which questions you have seen and how you answered them, the exam in progress) and each finished exam run with its score and the questions you missed, plus a summary of your averages by subject and by exam. Without an account the trainer saves nothing and sends nothing to us. Your flight school sees the summary and your runs only if you turn on Share my EXM results with my flight school in the portal (off by default); it never sees the questions you missed.

With an account, Fyshh Aero also sends you service e-mails: the sign-in codes and any school invitations, and, unless you switch them off under Account › Settings in the portal, a summary after each synced flight (or after your instructor has debriefed it, when your school works that way) and a once-a-day note of training milestones reached. Each optional e-mail carries a one-click link to stop that kind. A flight recorded as dual stores which instructor flew with you; your instructor may also record which parts of a shared flight they flew, and a previous-experience balance (hours and landings before FLT) can be entered by you or by your school and is kept on your account.

When you sign in to the web portal, it sets a session cookie on the fyshh.aero domain that is shared with the EXM trainer, so that one sign-in serves both sites. The cookie holds the short-lived sign-in token (not your e-mail address or password) and expires after one day; the credential that renews it stays in the portal alone. It is a strictly necessary cookie set by the portal, not by this website, and it is removed when you sign out of either site. Our access logs do not record cookies.

If you belong to a flight school's account, the school's staff may also hold about you, within the school's own scope:

• a student record: training type, stage of training, preferred instructor, licences and certificates with their numbers and dates, training milestones such as first solo, and notes typed by an instructor or admin; it is visible to the school's instructors and admins only, and is deleted with your membership;
• pinned moments and instructor notes on the flights you share with the school, which reach your app as read-only notes; and lesson records signed by an instructor;
• an invitation, if the school invited you by e-mail before you had an account: the e-mail address, the roles offered and when it was sent, kept until it is accepted, withdrawn or 90 days after it expires;
• a seat assignment, if the school pays for its students' subscriptions: a record that your account holds one of the school's seats;
• the aircraft flight manuals a school admin uploads for the school's fleet, which you can read from the portal and which Fyshh Aero EXM turns into practice questions for the school's members; the manual and the questions never leave the school's membership.

Nothing is stored about people who use the app without an account. You can delete your account at any time from the app or the web portal; what happens then is described on our account and data deletion page and in section 20.

7. Flight sync (optional)

Flight sync is off until you turn it on in the app's settings. It needs a Fyshh Aero account and the Standard subscription. When it is on, each flight you record is uploaded to your account after it ends: the flight record (times, aircraft registration, counts, notes), the telemetry file (positions, altitudes, speeds and sensor values, about once a second), the analysis file (landings, turns and scores, computed on the phone) and the raw recordings from the phone and watch.

Synced flights are stored in private Amazon S3 buckets and DynamoDB tables in the AWS Sydney region (ap-southeast-2). Files are reached only through short-lived signed links issued to a signed-in user; nothing is publicly readable.

Each flight has a visibility you control. A private flight is visible only to you. A school flight is visible to the flight school recorded on it: the instructors linked to you and the school's administrators can open it, and nobody else. Private flights never appear to anyone but you, which is enforced in the database query rather than in the screen that shows the list. You can change a flight's visibility at any time in the app or the portal.

From each synced flight our servers derive summary rows for lists and dashboards: duration, landings, go-arounds, the distance flown along the track and the scores the app computed. Nothing is re-analysed on the server; the phone computes every score.

Deleting a flight in the app or the portal removes it from the portal at once, and its files are purged within 30 days. Backup copies (database point-in-time recovery for 35 days and object versions for 90 days) expire after that. Section 17 lists every retention period.

8. Live streaming (optional)

Live streaming is a separate switch in the app, off by default, and needs the Standard subscription. While it is on, the phone sends your position and flight state to our servers every few seconds during the flight. The instructors linked to you and the administrators of the flight's school can watch the flight on the web portal as it happens. A private flight cannot be watched by anyone.

While you stream, a linked instructor or school administrator can send you a short message, such as a check-in or a pre-set phrase. The watch shows it and you answer with a one-tap reply; there is no typing in flight. Messages and replies are stored with your account.

The live frames are archived with the flight in Sydney and removed when the flight is deleted. The live-status record for a flight is kept for 7 days after the flight ends.

9. Weather data

With an account, the app shows a weather card for the nearest aerodrome. To find it, the app sends your current position to our server, which looks up the nearest reporting stations. Our server then requests the observations by station identifier only: from Airservices Australia's NAIPS service for Australian stations (including ATIS), and from the NOAA Aviation Weather Center elsewhere and as a fallback. Those upstream requests carry no position and no account. We keep daily counts of weather requests under a hashed account identifier, for capacity and licence reporting, and nothing else about the lookup.

10. Aircraft images and registers

Aircraft shown in the app and the portal may carry a photograph from Wikimedia Commons, displayed with the photographer's name and licence, or a photo uploaded by the flight school. When an aircraft is added by registration, its type and configuration are pre-filled from the public aircraft registers published by CASA (Australia) and the FAA (United States). These are public records about aircraft, not about you.

11. Generated summaries (AI)

If your flight school turns the feature on, an instructor can ask for a written progress summary or a draft lesson note generated by a language model from the student's synced flight data. Every such text is labelled as machine-generated for instructor review, is read and edited by the instructor, and is never used for any automated decision about a pilot. The text is generated on Amazon Bedrock in the Sydney region; prompts carry the flight measurements, not your name or e-mail address. Only pilots who sync flights to a school are covered, and private flights are never included.

12. Analytics for signed-in accounts

When you are signed in, the app sends one activity event per day (app version and platform), and our servers record service events such as a flight being synced or a subscription changing, identified by an internal account identifier. We use these only for aggregate statistics about how the service is used. There are no third-party analytics or advertising trackers anywhere in the app, the portal or this website. After you delete your account, the identifier no longer resolves to a person.

13. Payments

The Standard subscription is paid through Apple (in-app purchase on iPhone) or through Stripe (on the web portal). We never see your card number. Stripe handles card details under its own privacy policy, and Apple handles in-app purchases under its terms. We store the subscription status and the processor's customer and subscription identifiers so that we can tell which features your account is entitled to.

If your flight school pays for its students' subscriptions, the school is Stripe's customer, not you: the card, the invoices and the monthly seat count belong to the school's account, and we record only that your account holds a seat and for how long. Prices include GST; the school's discount depends on how many students it covers.

14. Where your data is stored (hosting)

Account data, synced flights, live-streaming data and the web portal are hosted on Amazon Web Services in the Sydney region (ap-southeast-2), with this website, the portal and the API delivered through Amazon CloudFront. Access logs for this website, the portal and the API (IP address, browser type, the request made and its outcome) are kept for up to 400 days for security and operational purposes.

15. This website

This website is a set of static pages. It sets no cookies of its own, and contains no advertising or social-media trackers.

• Hosting logs. The site is delivered through Amazon CloudFront, and standard access logs (such as IP address, browser type and the pages requested) are kept for up to 400 days for security and operational purposes (section 14).
• Fonts. Pages load the Montserrat typeface from Google Fonts. Your browser makes that request directly to Google, which may record your IP address under Google's privacy policy.
• Links. The site links to third-party sites, including the App Store and the products on our comparison page. Their privacy practices are their own.

16. When you contact us

If you email us, we collect what you send: your name, email address and the content of your message, which may include device details or exported flight files if you choose to attach them. We use this to respond to you, to investigate and fix problems and to improve the app. Correspondence is kept for as long as needed for those purposes and can be deleted on request (see section 20).

The contact form on our support page does not submit anything to this website; it opens your own mail app with a message addressed to us.

17. Children

Our website and app are not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

18. How long we keep data

Without an account we keep nothing, so there is nothing to retain. With an account, the periods are:

• Account record (e-mail, display name, settings, subscription state, memberships): until you delete the account; then an anonymised ledger entry with no identifiers is kept for accounting.
• Synced flights and their files: until you delete the flight or the account; files are purged within 30 days of deletion, and backup copies (database point-in-time recovery, 35 days; object versions, 90 days) expire after that.
• Live-streaming data: the live-status record for 7 days after the flight ends; the archive of streamed frames until the flight is deleted, or until it is replaced by the full record the app uploads after the flight.
• Instructor messages and your one-tap replies: with the account, until it is deleted.
• Pinned moments and instructor notes on a flight: with the flight; deleted when the flight or the account is deleted.
• IMSAFE check outcome and time (FIT app) attached to a flight: with the flight; deleted with the flight or the account. Everything else the FIT app holds is on your phone only.
• Student record held by your school: until your membership ends or the school deletes it; the school's signed lesson records remain as the school's training record, without a link to a person once your account is deleted.
• Invitations to join a school: until accepted or withdrawn, and at most 90 days after they expire.
• Role and membership changes (an audit record of who changed what, by account identifier): 2 years.
• Generated reports you or your school request: 1 year.
• Payment records: subscription status and processor identifiers with the account; Apple and Stripe keep their own records under their terms, and the invoices of a school that pays for its students stay with the school's billing account.
• Access logs for this website, the portal and the API: up to 400 days.
• E-mail correspondence: as long as needed to deal with it, and deleted on request.

19. Security

Flight data on your device is protected by the security of your device and your Apple Account, including device passcode, encryption and iCloud protections. Data held on our servers is encrypted in transit and at rest; the buckets and tables that hold it are private, files are reached only through short-lived signed links, and private flights are filtered out at the database. We take reasonable steps to protect the information you send us directly, but no method of transmission or storage is completely secure and we cannot guarantee absolute security.

20. Access, correction and deletion

Flight data on your device and in your iCloud is under your direct control: you can view, export and delete flights in the app, and delete all of the app's data by deleting the app and removing its iCloud data. If you have a Fyshh Aero account, you can see and change your details in the app and the portal, delete synced flights from either, and delete the whole account from the app (Settings, Account, Delete Account) or from the portal. Deleting the account removes your login, profile, subscription records, synced flights and their uploaded files, live-stream data and archives, messages, device push registrations, instructor links, reports, the debrief sessions and notes you created, and school reference grants; your school memberships are ended, and a nightly check verifies that nothing referring to the account remains. What remains is an anonymised ledger entry and the school's signed lesson records, which no longer link to a person. Step-by-step instructions are on our account and data deletion page.

The student record your flight school keeps about you is the school's: ask the school's instructors or admins to correct it, or leave the school and it is deleted with your membership. You can leave a school from the app's account settings or the portal at any time; your flights stay yours and the school keeps only what it had already recorded for the period you were a member.

To access, correct or delete information you have sent us by email, contact us at the address below. We will respond within a reasonable time and, where we hold information about you, delete it unless we are required to keep it by law.

21. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with a new "last updated" date. Material changes to how the app handles data will also be described in the app's release notes.

22. Contact and complaints

Questions about this policy or about how we handle your information:

Fyshh Pty Ltd, trading as Fyshh Aero
6-7/49 Townsville Street
Fyshwick ACT 2609, Australia
info@fyshh.aero

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.