Privacy Policy

Who is responsible for your data

Your data is controlled by GF Labs Tecnologia (a Brazilian company, CNPJ 46.834.711/0001-62). For any request about your data, write to contato@aerozulu.com.br. We answer within 15 days.

What the app collects

The AeroZulu app collects three things, and only these:

• your email address, used to create the account, confirm it, sign in and reset the password;
• the content of your conversations with the agent — your questions and the generated answers — stored so your history is there when you come back;
• your subscription state, if you subscribe — which plan is active and until when, along with the purchase events reported by Google Play.

What the app does NOT collect

We do not request or read your location: routes are planned from the airport codes you type. There are no advertising trackers and no advertising identifiers.

The GPX files you export are written to the folder you choose on your own device. They are never sent to us.

Voice dictation and the microphone

Voice dictation is optional and exists so you do not have to type. The microphone is only activated after you tap the microphone button, and stops as soon as you tap again or the dictation ends.

Your speech is transcribed by the device’s own speech-recognition service — the same one the keyboard uses. Depending on the device and its settings, that service may send the audio to Google’s servers (Android) or Apple’s (iOS) to turn it into text; that leg is governed by those companies’ privacy policies.

We do not record, store or receive the audio: what reaches us is only the transcribed text, and only when you tap send. That text becomes an ordinary message, handled like any typed question. You can revoke the microphone permission at any time in your device settings and keep using the app by typing.

Why we process this data

The account, the history and the subscription state exist to provide the service you signed up for — without an email there is no login, without storing conversations there is no history, and without the subscription record there is no way to unlock the plan you paid for.

Technical server logs (IP address, timestamp and requested route) are kept for the legitimate purpose of keeping the service up and protecting it against abuse.

Who your data is shared with

We do not sell your personal information, and we do not share it for anyone else’s own use. Three processors handle data on our behalf, under contract and only on our instructions, so the service can work:

• Amazon Web Services — hosts the account, the history and the conversation server, with the primary infrastructure in the São Paulo region (sa-east-1);
• Amazon Bedrock (AWS) — runs the Claude language model by Anthropic, which writes the briefing. Your question and the conversation context are sent to generate the answer. The model runs inside AWS, which does not use it to train models;
• RevenueCat — manages subscription state. It receives an internal account identifier (not your email) when you sign in, and the purchase events reported by Google Play if you subscribe.

How long we keep data, and how to delete it

The account and the history are kept for as long as the account exists. You have two controls, both inside the app and both immediate:

• delete a specific conversation, from the conversation list;
• delete everything in Settings → Delete account, which removes the account and the whole history.

If you no longer have access to the app

The email path for requesting deletion is described at https://aerozulu.com.br/en/delete-account/, along with the list of what is erased and what may be retained.

Security

Communication between the app and our servers uses HTTPS, and access credentials live in the device operating system’s secure storage. Conversation content is never written to server logs.

What this site collects

This site (https://aerozulu.com.br) is a static page. It sets no analytics cookies, uses no tracking pixels and asks for no data. There is no form and no login.

The hosting provider records technical access data (IP address, timestamp, requested page and user agent) in server logs, for the legitimate purpose of keeping the service up and protecting it against abuse.

Where data is processed

Hosting runs on Amazon Web Services with the primary infrastructure in Brazil (São Paulo, sa-east-1); content delivery uses a global network, the language model runs on AWS infrastructure outside Brazil, and RevenueCat processes subscription data in the United States. If you use the app from the US, your data is processed in both countries under the safeguards described here.

Your privacy rights

Depending on where you live (including under US state privacy laws such as the California Consumer Privacy Act, as amended), you may have the right to:

• know whether we process data about you, and access it;
• correct inaccurate or outdated data;
• delete your data (the in-app deletion above honors this immediately);
• receive a portable copy of your data;
• not be discriminated against for exercising any of these rights.

We do not sell or share for advertising

We do not sell personal information and we do not share it for cross-context behavioral advertising, in the meaning US state privacy laws give those terms. There is nothing to opt out of.

Changes to this policy

If this policy changes, the date at the top changes with it. Relevant changes are announced on the site before they take effect.