Privacy Policy

Overview

DGR Labs, LLC ("we", "our", or "us") respects your privacy. This policy explains how we handle information in our apps.

The short version: We collect as little data as possible. Your data stays on your device or in your personal iCloud account, except where an app-specific section below says otherwise.

Information We Collect

Our apps are designed with privacy in mind. By default, we do not collect, store, or transmit your personal data to our servers.

• Local Data: App data is stored locally on your device.
• iCloud Sync: If you enable iCloud, your data syncs through your personal Apple iCloud account. We do not have access to this data.
• Analytics: We do not use third-party analytics or tracking services.

Some apps transmit data to servers, either for an optional feature or because that is how the app works. These are described in the app-specific sections below.

How We Use Information

Your information remains entirely under your control. Where app-specific features involve server-side data, usage is limited to providing that feature and preventing abuse — never for advertising, profiling, or any other purpose.

Data Sharing

We do not sell, trade, or transfer your personal information to third parties. Where app-specific features involve server-side data, that data is never shared except as required by law.

Bot Protection (Cloudflare Turnstile)

We use Cloudflare Turnstile to protect our signup forms from bots and automated abuse. When you complete a form protected by Turnstile, Cloudflare processes limited information — such as your IP address and certain browser and device characteristics — to distinguish humans from bots. This data is used only for that purpose.

For details on how Cloudflare handles this data, see the Cloudflare Turnstile Privacy Policy (opens in a new tab).

Signup Lists

When you leave your email address on one of our product pages (for a beta or a launch announcement), we store the address, the time, which page or link it came from, and the country the request came from, in a database on Cloudflare. We use the list only to send the mail that page describes, through Google Workspace or Resend, and we do not share or sell it. To be removed, write to [email protected].

CD Wally: Product Analytics

CD Wally sends a small set of anonymous usage events to our own servers so we can understand how the app is used and how the upgrade from a free wallet to a paid one is working. There are no third-party analytics or advertising SDKs.

• Install identifier: a random identifier generated on first launch. It is not tied to your name, email, Apple ID, or device hardware, and it resets if you delete and reinstall the app.
• App events: launches, each time the app comes to the front and goes to the background, how long it was in front, platform (iPhone, iPad, or Apple TV), and app and OS version.
• Wallet state, as numbers only: the wallet's capacity tier (6, 24, or 48), how many discs it shows, how many albums in your playlist do not fit, whether the wallet was started from Start Your Wallet, how many discs were played during a session, and how many times the back cover was reached.
• Your music library: nothing from your Apple Music library is ever sent. No album titles, no artist names, no playlist names or contents. Every field is a count, a wallet tier, a duration, or a word from a fixed list.
• Start Your Wallet: when the offer is shown, whether you accepted or declined it, and if you accepted, the kind of source you picked (a personal mix, Replay, an album shelf, or an editorial playlist) and how many tracks and albums it added. Not which mix, and not which albums.
• Purchase events: when the upgrade screen is shown, which part of the app led to it, how long it stayed open, and whether it ended in a purchase, a cancellation, a restore, trimming your playlist to fit (with the number of albums removed), or was simply closed, along with the tier involved. We never see or store your payment details. Purchases are processed entirely by Apple.
• Rating prompt: when the app asked you to rate it.
• Country: our server records the country an event came from, derived from the network connection. We do not store the network address itself, and the app never collects your location.

These events go only to our own servers and are used only to improve CD Wally. They are never shared, sold, or used for advertising or tracking.

Countdowns: Sharing

When you choose to share a countdown, the event name, date, and background image are uploaded to our servers and made accessible via a public link. This is entirely optional and only happens when you explicitly tap the share button.

If you share a countdown with a personal photo, Sign in with Apple is required. We receive only an anonymous Apple user ID — not your name or email. This ID is stored in a private audit log alongside your IP address and timestamp, solely for abuse prevention and moderation. Audit logs are never made public.

Shared countdowns can be reported by anyone. Content that receives multiple reports is automatically removed. You can also request removal of your shared content by contacting us.

Overflight: Location and Flight Data

Overflight's purpose is to show you the aircraft overhead, so it uses your location. Here is exactly where it goes:

• Finding aircraft: the app sends your coordinates to airplanes.live (opens in a new tab), a community-run flight-tracking network, to fetch the live positions of aircraft near you. These requests carry no account or identifier. We do not operate airplanes.live, and we do not store your location on our servers.
• Ground elevation: when a location fix carries no altitude (typically on Apple TV), the app looks up the ground elevation at your coordinates via Open-Meteo (opens in a new tab), an open weather and elevation service. As with airplanes.live, no account or identifier is sent.
• Route lookups: to identify a flight's route and aircraft type, the app sends the aircraft's public identifiers (callsign and transponder code) to our servers. Your location is never included.
• Apple TV precise location (optional): if you choose to send your Apple TV a precise location fix from your iPhone via the QR pairing flow, that one-time fix passes through our server only long enough for your TV to retrieve it and is deleted automatically within five minutes. After that it is stored only on your Apple TV.

Everything Overflight displays — positions, callsigns, routes, aircraft types — is public ADS-B data broadcast by the aircraft themselves. It is data about aircraft, not about you.

Overflight: Product Analytics

Overflight sends a small set of anonymous usage events to our own servers so we can understand how the app is used. There are no third-party analytics or advertising SDKs.

• Install identifier: a random identifier generated on first launch. It is not tied to your name, email, Apple ID, or device hardware, and it resets if you delete and reinstall the app.
• App events: launches, session start and end, session length, platform (iPhone, iPad, or Apple TV), app and OS version, and whether the app has Pro.
• Feature use: per session, how long spoken traffic was switched on and how many callouts it spoke, how many routes were shown, how busy the sky was (bucketed counts only), and how much of the session showed an empty sky. On Apple TV, when the phone pairing screen is opened and when it completes.
• Location permission: whether location access was granted, denied, or not yet asked, and on Apple TV whether the fix came from the network or from a paired iPhone. This is only the permission state. Your precise location is never sent.
• Purchase events: when the upgrade screen is shown, which part of the app led to it, and whether it ended in a purchase, a cancellation, or was simply closed, along with the plan involved. We never see or store your payment details — purchases are processed entirely by Apple.
• Country: our server records the country an event came from, derived from the network connection. Your precise location is never sent — no coordinates, no city, and nothing they could be derived from.

These events go only to our own servers and are used only to improve Overflight. They are never shared, sold, or used for advertising or tracking.

Overflight: Beta Diagnostics

Beta (TestFlight) builds of Overflight collect extra diagnostics to help us tune the app before release. Public App Store builds do not include this collection.

• Install identifier: a random identifier generated on first launch. It is not tied to your name, email, Apple ID, or device hardware, and it resets if you delete and reinstall the app.
• App events: launches, session start and end, platform (iPhone, iPad, or Apple TV), and app and OS version.
• Feature usage: milestones and interactions such as the first aircraft shown, browsing beyond the focused aircraft, changing the reach preset, and viewing a route.
• Sky activity: a coarse, bucketed measure of how many aircraft are visible. Your location is never sent — no coordinates, no city, and nothing it could be derived from.

These diagnostics go only to our own servers and are used only to improve Overflight. They are never shared, sold, or used for advertising. When Overflight leaves beta, this collection is reduced to the set described in the Product Analytics section above; this section will be removed once the beta builds have expired.

Flip Flap: Messages

Flip Flap shows a message on a split-flap board, on Apple TV or on the web display at flipflap.dgrlabs.co, and you change the message from a web remote that opens when you scan the board's QR code. To get a message from the remote to the board, Flip Flap uses Google's Firebase. This applies to the Apple TV app, the web display, and the web remote.

Each display and remote signs in to Firebase anonymously, with no account. Firebase creates a random identifier for that anonymous session. We never ask for your name, email, or phone number, and we have no way to connect the identifier to you. Like any online service, Firebase sees basic connection details such as your IP address, as described in Firebase's privacy information. Flip Flap includes no analytics or advertising SDKs.

When you send a message, we store its text, the time it was sent, and which button sent it, under the board's random room ID. We don't store any identifier for you or your device with the message. A room and its message are deleted automatically 7 days after the last message sent to that room, and the deletion can take up to a day after that. We keep no other record of messages.

A room ID works like a key. Anyone who has it, for example anyone who scanned the board's QR code, can read and change that room's message until the display starts a new room. Please don't put anything private on the board.

The web remote shows a link to another of our apps. The App Store badge image loads from Apple. If you tap the link, it goes through our own short-link service, which records the click along with the country and city our hosting provider estimates for the request, your browser's user-agent string, and the site you came from. It does not record your IP address or your room ID.

Data Security

Your data is protected by the security measures built into iOS and iCloud. We recommend keeping your device updated and using a strong passcode.

Children's Privacy

Our apps do not knowingly collect information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

If you have questions about this privacy policy, please contact us at [email protected].