Driftwise
Driftwise Privacy Policy
This policy is available in several languages. In case of any discrepancy between translations, the English version prevails.
The short version
Driftwise is built privacy-first. We designed it so that we collect as little as possible, ideally nothing that identifies you.
- No accounts. You don't sign up, and we don't ask for your name, email, or phone number to use the app.
- Your data lives on your device. Your trips, flight legs, sleep profile, and the plans Driftwise generates are stored locally on your iPhone, and synced only through your own private iCloud, never our servers.
- No tracking. No ads. No third-party analytics. We don't track you across other apps or websites, we don't show advertising, and we don't embed third-party analytics or advertising SDKs.
- One optional network call. The only time Driftwise reaches out to the internet for your data is when you choose to look up a flight, and even then it sends only the flight number and date.
The sections below explain this in full.
1. Who we are
Driftwise ("Driftwise," "we," "us," or "our") is the iOS application and the website at driftwise.io.
The app and site are operated by Callisto SLU, based in Andorra.
For any privacy question, you can reach us at privacy@driftwise.io.
For the purposes of the EU/UK General Data Protection Regulation (GDPR), Callisto SLU is the "data controller" for the limited personal data described in this policy.
2. Our privacy principles
We follow a few simple rules:
- Collect as little as possible. If a feature can work on your device, it stays on your device, and syncs only through your own private iCloud, never our servers.
- No surveillance. We do not build profiles of you, sell data, or track your behavior across apps and websites.
- You stay in control. iCloud sync is on by default and you can turn it off any time in the app's Settings; flight lookup only happens when you ask for it.
3. What data Driftwise handles, and where it lives
3.1 Data stored on your device
When you use Driftwise, you may create or enter:
- Trips and flight legs (origin, destination, dates, times, time zones, and travel mode such as plane, train, bus, or car);
- Your sleep profile (for example, your typical bedtime and wake time, and chronotype-related preferences);
- The adaptation plans Driftwise generates for you (recommended light exposure, sleep, and (where relevant) melatonin timing).
All of this is stored locally on your device using Apple's on-device storage framework (SwiftData). It is not sent to Driftwise servers, because we don't run servers that store your personal data.
If you delete the app, this data is deleted from your device.
3.2 iCloud sync (your own private iCloud)
Driftwise syncs your data across your own Apple devices using iCloud (Apple's CloudKit). This is on by default, and you can turn it off any time in the app's Settings.
While it is on:
- Your data syncs only through your own private iCloud account, managed by Apple. It does not pass through or get stored on Driftwise servers, and we cannot read it.
- Apple's handling of your iCloud data is governed by Apple's Privacy Policy.
- You can turn sync off at any time in the app's Settings and/or in your device's iCloud settings.
3.3 Optional Apple Health (read-only)
If you turn it on in Settings, Driftwise reads your recent sleep from Apple Health to estimate your usual bedtime and wake time, so your plan starts from a more accurate baseline. This is off by default.
While it is on:
- The read is read-only and happens on your device. Your Health data is not sent to Driftwise servers, and Driftwise does not write anything back to Apple Health.
- It is used only to set your plan's starting point, never for any other purpose.
- You can turn it off at any time in the app's Settings. Apple's handling of your Health data is governed by Apple's Privacy Policy.
3.4 Optional flight lookup (the only data we transmit on your behalf)
To save you typing, Driftwise can look up flight details for you. This feature is opt-in. It only runs when you actively choose to look up a flight.
When you do:
- The app sends only the flight number and the flight date to our lookup service.
- That service is a stateless proxy (a Cloudflare Worker) that forwards the request to a flight-data provider, FlightAware (with AeroDataBox as a fallback), and returns the result to your app.
- We do not send your name, your account (you don't have one), or a device identifier.
- The proxy is designed not to store or log anything that identifies you. Its only job is to pass the flight number and date through and hand the answer back.
- The flight providers (FlightAware, and AeroDataBox as a fallback) and Cloudflare process the request to deliver the result, under their own terms and privacy practices.
If you never use flight lookup, this network call never happens.
3.5 Place and time-zone resolution
When Driftwise needs to turn a place into a location or time zone (for example, to map an airport or city to its time zone), it uses Apple Maps (MapKit) and on-device data bundled with the app. Apple's processing of map requests is governed by Apple's privacy practices.
3.6 Purchases and subscriptions
Driftwise offers a one-time lifetime purchase and an auto-renewing annual subscription. Payments are handled entirely by Apple through the App Store, using Apple's own in-app purchase technology (StoreKit). We never see or receive your payment card details.
We do not use a third-party purchase or subscription-management provider. Your purchase is validated on your device against Apple's App Store, and we do not send your purchase data to any other company. Apple's handling of your purchase is governed by Apple's Privacy Policy.
3.7 What we deliberately do not do
- We do not show advertising.
- We do not use third-party advertising or analytics SDKs.
- We do not track you across other apps or websites.
- We do not sell or share your personal information for cross-context behavioral advertising.
- We do not build marketing profiles about you.
4. Why we process the limited data we do (legal bases)
For users in the EU, UK, and similar jurisdictions, the legal bases we rely on are:
- Performance of a contract: to provide the app's core features you ask for (e.g., generating your adaptation plan, looking up a flight you requested, validating your subscription so you can access paid features).
- Your consent: for optional features you choose to enable, such as iCloud sync and flight lookup. You can withdraw consent at any time by turning the feature off.
- Legitimate interests: to keep the app secure and functioning correctly, in a way that does not override your privacy rights.
5. Website (driftwise.io)
Our website is a simple, static marketing and support site. It does not collect personal data. There are no accounts, sign-up forms, or contact forms, and we do not use analytics, advertising, or tracking cookies. The only information processed is the standard hosting/CDN request data (such as IP address) that our infrastructure provider handles briefly for security and abuse prevention. We do not use the website to track you across other sites.
6. Data sharing
We do not sell your personal data. We share data only with the limited service providers needed to deliver features you use:
| Provider | Purpose | What they receive |
|---|---|---|
| Apple | App Store distribution; payment processing and purchase validation (StoreKit); iCloud sync (if you enable it) | Purchase/subscription details; your iCloud data (in your own iCloud) |
| Cloudflare | Hosts the stateless flight-lookup proxy | Flight number and date (when you use flight lookup) |
| FlightAware | Provides flight data | Flight number and date (when you use flight lookup) |
| AeroDataBox | Provides flight data (fallback) | Flight number and date (when you use flight lookup) |
We may also disclose information if required by law, to comply with a valid legal process, or to protect the rights, safety, and security of our users and our service.
7. International data transfers
Because Driftwise keeps most data on your device, there is little personal data to transfer. Where the limited processing above involves providers located outside your country (for example, in the United States or elsewhere), those transfers are made under appropriate safeguards, such as the European Commission's Standard Contractual Clauses or equivalent mechanisms relied on by those providers. For EU/EEA users, the relevant safeguards are those published by Apple, Cloudflare, and the flight-data providers (FlightAware and AeroDataBox) for the limited data described above.
8. How long we keep data
- On-device data stays on your device until you delete it in the app or uninstall the app. You control this entirely.
- iCloud data (if you enabled sync) stays in your iCloud until you delete it.
- Flight-lookup requests are designed to be processed transiently and not stored in a form that identifies you.
- Subscription records held by Apple are kept under Apple's retention practices for as long as needed to manage your subscription and meet legal/accounting obligations.
9. Your privacy rights
Depending on where you live (for example under the GDPR in the EU/UK, or the CCPA/CPRA in California), you have rights over your personal data, which may include the right to:
- Access the personal data we hold about you;
- Correct inaccurate data;
- Delete your data;
- Port your data (receive a copy in a portable format);
- Object to or restrict certain processing;
- Withdraw consent for optional features at any time;
- Not be discriminated against for exercising your rights;
- Lodge a complaint with your local data protection authority.
How this works for Driftwise: because the vast majority of your data lives only on your device, you can exercise most of these rights yourself, immediately:
- Access / portability: your trips, profile, and plans are visible in the app on your device.
- Deletion: delete a trip in the app, or delete the app to remove the on-device data; turn off and clear iCloud sync to remove synced copies.
- Subscription data: manage your subscription in your Apple App Store settings.
We hold essentially no personal data about you on our own servers, so in most cases there is little for us to access or erase on our side. If you still want to make a request, or you want help, email us at privacy@driftwise.io and we will respond as required by applicable law. We may need to verify your request before acting on it.
10. Children's privacy
Driftwise is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact privacy@driftwise.io and we will take appropriate steps.
11. Security
We design Driftwise to minimize the data at risk: by keeping data on your device and avoiding accounts and trackers, there is little for an attacker to take from us. Data on your device is protected by your device's own security (passcode, Face ID/Touch ID, and device encryption). The flight-lookup proxy uses encrypted connections (HTTPS). No method of storage or transmission is ever 100% secure, but we work to protect your information.
12. Changes to this policy
We may update this policy from time to time, for example when we add a feature. When we do, we'll change the "Last updated" date above, and for significant changes we'll provide a more prominent notice (such as in the app or on driftwise.io). Your continued use of Driftwise after an update means you accept the revised policy.
13. Contact us
Questions, requests, or concerns about privacy?
Callisto SLU
Av. del Consell de la Terra 19, pis 432, AD700 Escaldes-Engordany
Principality of Andorra
Email: privacy@driftwise.io