OnFlight
Privacy
Effective 6 September 2026 · OnFlight 0.4.2 Beta
Local-first by design. The OnFlight app does not require an account, contain advertising or use tracking technology.
- Flight Room information stays on participating iPhones.
- Room information is shared only with invited nearby members.
- OnFlight Beta 1 has no custom analytics or remote diagnostics service.
Who we are
OnFlight is provided by FlyProva LTD, a company registered in England and Wales. This policy explains how the OnFlight iPhone app handles information during its private TestFlight beta.
Information used inside a Flight Room
When you create or join a private Flight Room, you or other invited members may enter:
- display names and declared seats;
- route, flight number, departure time and estimated duration;
- chat messages and seat observations;
- cabin-order names, items, seats, prices and ordered status;
- landing-plan items and completion status; and
- private invitation credentials represented by a join code or QR code.
OnFlight uses this information to provide the room, synchronise its shared state and reconnect admitted members. It is visible to people admitted to that private room. FlyProva LTD does not receive or store this Flight Room content in Beta 1.
The app also creates a pseudonymous local participant identifier and room credentials so your device can reconnect securely. These are not OnFlight accounts and are not used for advertising or cross-app tracking.
Where Flight Room information goes
Flight Room information is kept in an encrypted archive on each participating device and synchronised over encrypted nearby peer-to-peer connections. Beta 1 does not store it in an OnFlight cloud service.
People you invite receive the information needed for the shared room features. Only invite people you trust, protect the private join code, and end or leave the room when it is no longer needed. OnFlight does not provide public passenger discovery or cabin-wide public chat.
TestFlight, diagnostics and support
OnFlight Beta 1 contains no third-party analytics or advertising SDK and its custom remote diagnostics endpoint is disabled. Privacy-safe technical event categories can be viewed locally during supervised testing, but OnFlight does not transmit them to FlyProva LTD.
Apple automatically collects certain crash logs and usage information when you test an app through TestFlight and makes relevant beta-testing information available to the app provider. If you submit TestFlight feedback, Apple and FlyProva LTD may also receive the comments, screenshots and technical information you choose to send. Apple handles this information under its TestFlight privacy notice and privacy policy.
If you contact FlyProva directly, we receive the contact details and message you provide, plus any information you choose to attach. Please do not include private join codes or private message content in feedback or support requests.
How we use information we receive
We use TestFlight data, feedback and support messages only to operate, secure, test and improve OnFlight, investigate problems, communicate with testers and meet applicable legal obligations. Where UK data protection law applies, we generally rely on our legitimate interests in safely operating and improving the beta and responding to requests, unless a different legal basis is required.
Website analytics
The OnFlight, FlyProva and Elixr websites use FlyProva's own privacy-conscious analytics to count page views, understand which pages are useful, see broad device categories and identify referring websites or campaign links. This website measurement does not use analytics cookies, advertising identifiers, raw IP addresses, full browser fingerprints or personal visitor profiles. Do Not Track and Global Privacy Control signals are respected, and event records are removed automatically after 90 days.
Device permissions
OnFlight may request:
- Local Network, to discover and connect to invited nearby devices;
- Camera, to scan a private room invitation QR code; and
- nearby networking capabilities provided by iOS.
OnFlight does not use these permissions to create a public passenger directory or discover unrelated passengers. You can review Camera and Local Network permissions in iOS Settings.
Retention and deletion
Flight Room information remains on participating devices while the room is retained. Leaving an active room, learning that the owner ended it, or removing the app's local data removes that room's active archive from your device according to the app's current behaviour. Other invited members control the copies stored on their own devices.
A pseudonymous device identifier or room credential may remain in the iOS Keychain until the app removes it or the device's Keychain data is cleared. FlyProva LTD cannot remotely inspect or erase Flight Room information that it does not hold.
We retain support communications and TestFlight information available to us only for as long as reasonably necessary to investigate the issue, improve the beta, protect the service and meet legal obligations. Apple applies its own retention periods to information processed through TestFlight.
Sharing, sale and tracking
FlyProva LTD does not sell Flight Room information. OnFlight Beta 1 does not use it for advertising, marketing profiles or app tracking. Room information is shared only with invited participating devices as part of the features you choose to use. TestFlight and support providers process information as described above and under their own privacy terms.
Security and flight safety
OnFlight uses Apple security technologies and encrypted local and nearby protocols to protect room information. No system can guarantee absolute security, and nearby availability and range depend on iOS, the devices and the environment.
OnFlight does not detect, control or bypass Airplane Mode. Follow airline and crew instructions at all times. Seat observations are comments from your group, not live airline availability.
Your choices and rights
You can choose what to enter, decline Camera access, manage Local Network access in iOS Settings, leave or end a room, and remove the app's local data. You can also ask the people in your room to remove information held on their devices.
Depending on where you live, you may have rights over personal information held by FlyProva LTD, including rights of access, correction, deletion, restriction, objection or complaint. Because FlyProva does not receive Flight Room content in Beta 1, we generally cannot retrieve that content from participants' devices. UK users can learn more from the Information Commissioner's Office.
International processing
The core Flight Room does not use an OnFlight backend in Beta 1. TestFlight or support communications may be processed by Apple, email or support providers in other countries under their own terms and safeguards.
Changes to this policy
We will update this policy before introducing a material change such as accounts, cloud messaging, payments, analytics or remote custom diagnostics. The current version and effective date will always appear on this page.
Contact
For privacy questions or to exercise a data-protection right, email info@flyprova.com or use the OnFlight support page.