Privacy policy
Applies to the VFR MAP EUROPE app for Android (vfrmapeurope.eu) and the vfrmap.eu website. Effective from 23 October 2026. This is a translation; if it differs from the Polish version, the Polish version prevails.
In short
- There are no VFR MAP EUROPE accounts, ads, analytics or tracking tools. The website uses no cookies.
- Your position, routes, logbook and GPS tracks are stored only on your phone. They do not go to the vfrmap.eu server or anywhere else unless you send them yourself.
- The app downloads maps, aviation data, weather and terrain from the internet. For some of these downloads the external service sees the area the request is about (details below).
- The app is paid as a subscription on Google Play. Payment is handled by Google - we do not see your payment details or email address.
- The only personal data that reaches us is the IP address in the website's server logs, subscription order data passed on by Google (without payment details) and whatever you write in an email.
Data controller
The controller of personal data is the owner of the vfrmap.eu service and publisher of the VFR MAP EUROPE app. Contact for all data matters: info@vfrmap.eu.
Location
The app asks for access to precise location to show the aircraft's position on the map, compute track, speed and times, warn about airspace and terrain, and record the flight track. During a flight a foreground service with a visible notification runs, so navigation continues with the screen off. Location is not sent to us or sold.
Data stored on the phone
- routes, aircraft profiles and settings,
- the logbook: block times, airfields, aircraft registrations, landings, notes and the GPS track (a point every few seconds),
- downloaded aviation data, weather, terrain tiles and the offline map,
- a description of the last app crash (if one happened) - only for you to send from Settings.
Uninstalling the app or clearing its data in Android settings deletes everything. You delete single flights in the Logbook. Exports (GPX, CSV, PDF) and crash reports go only where you share them yourself.
Connections to external services
These services receive standard connection data (IP address, app type) and process it under their own rules.
| Service | What for | What it sees besides the IP address |
|---|---|---|
| OpenAIP (api.core.openaip.net) | airfields, airspace, points, navaids | the country the data is downloaded for |
| OpenStreetMap (tile servers) | base map when there is no offline map | the part of the map being viewed |
| vfrmap.eu | the offline map file of Poland | nothing beyond the file download |
| NOAA aviationweather.gov | METAR and TAF | a fixed area of Poland - not your position |
| PANSA (airspace.pansa.pl) | the AUP/UUP airspace use plan | nothing beyond the plan request |
| Open-Meteo (api.open-meteo.com) | wind forecast at altitude - only after tapping "Get forecast" | the coordinates of the route points |
| Amazon S3 (elevation-tiles-prod) | terrain elevation tiles | the 1°×1° area terrain is downloaded for |
| Google Play (billing service on the phone) | plan prices, purchase and checking whether the subscription is active | your Google account and its subscriptions - under Google's rules |
Links to the AIP, NOTAM (PANSA, EUROCONTROL) and Google Play open in the browser - those sites' rules apply there.
Google Play subscription
The mobile app is paid as a Google Play subscription: 7 days free, then monthly or yearly, renewed automatically. The free map on vfrmap.eu needs no subscription. Plan details: app and pricing.
- Purchase and payment are handled by Google (Google Play) under the Google privacy policy and the Google Play terms of service. Google processes your payment details and Google account data - we do not receive them.
- What the app sees: through the Google Play billing service on the phone it checks which plans are available and whether you have an active subscription (product ID, state and purchase token). It also acknowledges the purchase with Google Play, because otherwise Google refunds the payment. It keeps on the phone only the date of the last subscription confirmation, so it can work offline for up to 7 days. This information is not sent to our server.
- What we receive from Google: in the Play Console we see order data (order number, product and plan, amount, currency, country, dates and subscription state) and aggregate sales reports. We do not see your name, email address or card details. We use them for accounting, refunds and complaints.
- Cancelling is done on Google Play (Payments & subscriptions → Subscriptions), also from the app: Settings → Subscription. Uninstalling the app does not cancel the subscription.
The vfrmap.eu website
The website uses no cookies or tracking tools. The last route and its parameters (speed, leg altitudes, wind) and the fact that you closed the app QR code badge are saved only in your browser's storage (localStorage), and you can delete them by clearing the site's data. Files loaded for flight replay are processed in the browser and are not sent anywhere.
The website uses external resources whose servers see your IP address:
- map tiles - OpenStreetMap, OpenTopoMap, CARTO, Esri (also the part of the map being viewed),
- terrain elevation for the route profile - Open-Meteo (api.open-meteo.com), which receives the coordinates of points along the planned route,
- the map and QR code libraries - cdnjs (Cloudflare),
- fonts - Google Fonts.
Server logs
The website and the mailbox are hosted on the servers of Zenbox sp. z o.o. in Poland, which processes this data on our behalf as a processor. Like any web server, it logs: IP address, date and time, the address of the page or file opened, the response code and browser information. The same entries are made when the app downloads the offline map from vfrmap.eu. The logs serve only to keep the server running and secure (e.g. to detect attacks); we do not combine them with other data or profile anyone based on them. They are deleted automatically after the retention period set by the hosting provider.
Email contact
If you write to us (including by sending a crash report from the app), we process your email address and the content of the message in order to reply. We keep the correspondence as long as needed to deal with the matter, and then for at most 2 years in case of further questions.
Legal bases
- server logs - our legitimate interest in keeping the website running and secure (Art. 6(1)(f) GDPR),
- correspondence - legitimate interest in replying to your message (Art. 6(1)(f) GDPR),
- subscription order data from Google Play - performance of the contract, i.e. providing the app under the subscription (Art. 6(1)(b) GDPR), and accounting and tax obligations (Art. 6(1)(c) GDPR); we keep it for the period required by accounting and tax law,
- data on the phone and in the browser - not processed by us, because it does not reach us; you decide about it.
Your rights
You have the right to access your data, to rectify it, to erase it, to restrict its processing, to data portability and to object to processing based on legitimate interest. Write to info@vfrmap.eu. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
We do not transfer data to countries outside the European Economic Area. The external services listed above (e.g. NOAA, Amazon, Google, Cloudflare) may process the IP address outside the EEA as well, under their own rules.
Children
The app and the website are intended for pilots and are not directed at children.
Changes and contact
We announce changes to this policy on this page, with a new effective date. Questions and requests about data: info@vfrmap.eu.