Privacy Policy

1. Introduction

AIVIATION LLC ("we," "us") operates RegBrief (regbrief.app and the iOS app). RegBrief is primarily an offline FAR/AIM reference app: after a one-time content download, reading, search, and browsing work with no network connection. We collect usage analytics to understand how the app is used and to improve it, as described below. We do not collect your name, email address, or maintain any account, and we do not use third-party advertising or tracking.

2. Data We Collect

Stays on your device (all tiers):

• Your notes, highlights, and bookmarks stay on your device (or your iCloud account if you enable sync)
• Your search queries stay on your device
• Your reading history and reading position stay on your device
• We have no account system — no username, password, name, or email address

Usage analytics (all tiers): To understand how RegBrief is used and to improve it, the app sends usage-analytics events to AIVIATION servers. These events record product-interaction data — for example, app launches, which screens and regulations you open, and features you use — and subscription events such as which subscription you hold and when a purchase or renewal occurs. When you run a search, the analytics event records only that a search happened, along with non-identifying details such as the length of your query and how many results it returned, and which result you open — never the text of the search itself, which stays on your device. Each event is associated with a device identifier that is generated on your device and is not your name, email, or an account. When you are signed into iCloud, each event is also associated with a cross-device identifier — a random identifier stored in your own iCloud account — so that we can recognize activity from the same person across the different devices they use; it is likewise not your name, email, or a login account, and it is absent if you are not signed into iCloud. Because this data is tied to these persistent identifiers, it is treated as linked to your identity for App Store privacy-label purposes. We do not attach your name, email, or Apple ID; we do not use third-party analytics or advertising services; and we do not use this data to track you across other companies' apps or websites, and we do not sell or share it. This analytics data is retained in our systems for up to seven years.

Pro tier — Cloud AI Q&A: When you use the cloud AI question-and-answer feature, your question text is sent to AIVIATION servers to generate an answer with citations. The answer is produced using Anthropic's Claude model, accessed through Amazon Web Services (AWS). When applicable, the regulation section you are currently reading is also sent as a hint so the answer can scope to your context. We retain question and answer text for up to 90 days for quality and abuse-prevention purposes, after which it is automatically deleted. We do not store your name, Apple ID, or any other personal identifier alongside your questions, and your questions are not tied to the usage-analytics device identifier described above. AWS does not retain your questions or use them to train its or Anthropic's AI models, and no query data is sold or shared with third parties.

3. iCloud Sync (Optional)

If you enable iCloud sync, your bookmarks, notes, and highlights are stored in your personal iCloud account and synced across your Apple devices. AIVIATION LLC does not have access to your iCloud data. This sync is optional and entirely controlled by you in iOS Settings. Apple's privacy policy governs iCloud storage: apple.com/legal/privacy.

4. AI Features

On-device Apple Intelligence (Plus and Pro, on supported hardware): Plain-English RegBriefs (section-level and per-subsection), AI-enhanced search re-ranking, and selection RegBriefs are generated by Apple Foundation Models running entirely on your device. No regulation text or generated RegBrief leaves your device for these features. Apple's on-device AI framework governs this processing.

Cloud Q&A (Pro only): Pro subscribers can ask questions answered by Anthropic's Claude model, accessed through Amazon Web Services (AWS). When you submit a question, the question text — and, when applicable, the regulation section you are reading, as a hint — is transmitted to AIVIATION servers. See Section 2 above for retention and processing details. No name, email, Apple ID, or other personal identifier is attached to these queries.

5. Subscriptions

RegBrief offers three tiers: Free, Plus, and Pro. All subscription purchases are processed by Apple via StoreKit. We receive a record that your subscription is active (so we can unlock Plus or Pro features), but we do not receive your payment details. Apple's privacy policy applies to subscription processing.

6. App Store Privacy Nutrition Label

RegBrief's App Store privacy nutrition label reflects the practices described in this policy. Specifically, it discloses:

• Identifiers (Device ID and User ID) and, when signed into iCloud, a cross-device User ID; Usage Data (Product Interaction); and Purchases (Purchase History) — collected for analytics, linked to your identity through the identifiers described in Section 2, and not used for tracking across other companies' apps or websites.
• User Content — your notes, highlights, and bookmarks. Apple's label framework treats this as data the app handles for app functionality, so it is listed under User Content (not linked to your identity). This content stays on your device, and in your own iCloud account if you enable sync; it is never transmitted to AIVIATION, and we cannot access it.

The Pro tier cloud AI Q&A feature transmits your question text to AIVIATION servers, retained up to 90 days and not linked to your identity.

7. Your Rights and Data Deletion

On-device content (all tiers): your notes, highlights, bookmarks, searches, and reading history stay on your device (and, if enabled, in your iCloud account), so you control them entirely. Delete them in the app, or delete the app itself. No request to us is needed.

Usage analytics (all tiers): analytics events are associated with a device identifier (and, when you are signed into iCloud, a cross-device identifier), not with your name, email, or a login account, so we cannot identify you from them or tie a specific record back to a particular person. For that reason we generally cannot locate an individual's analytics records on request. You can stop generating new analytics by deleting the app.

Pro tier (cloud AI Q&A): question and answer text is retained up to 90 days on AIVIATION servers. Because it is not stored alongside your name, Apple ID, or a device identifier, we cannot tie a specific record back to you. You can stop submitting new questions at any time by not using the cloud Q&A feature; existing questions automatically expire within 90 days. For privacy questions or requests, contact privacy@aiviation.dev.

8. CCPA (California Residents)

This section applies to California residents under the California Consumer Privacy Act, as amended (CCPA/CPRA). RegBrief is offered only in the United States.

Personal information we collect and why:

• Identifiers — a device identifier and, when you are signed into iCloud, a cross-device identifier stored in your own iCloud account that lets us recognize the same person across their devices (neither is your name, email, or a login account), used for analytics to understand and improve the app.
• Internet or other electronic network activity information — your interactions with the app (screens and regulations opened, features used, and that a search was run together with non-identifying details such as query length and result count, but not the search text itself), used for analytics.
• Commercial information — your subscription status and purchase/renewal events, used for analytics.
• Other user content (Pro tier) — the question text you submit to the cloud AI feature, used to generate an answer, retained up to 90 days.

We collect this information from your use of the app and disclose it only to the service providers that operate our infrastructure on our behalf. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use sensitive personal information for purposes that would trigger a right to limit its use.

California residents have the right to know, access, delete, and correct personal information, and to be free from discrimination for exercising these rights. Because our analytics data is tied only to device and cross-device identifiers and is not associated with your name, email, or a login account, we generally cannot verify your identity against, or locate you within, that data, which may limit our ability to fulfill an individualized request. To make a request, contact privacy@aiviation.dev.

9. Children's Privacy

RegBrief is not intended for users under 13, and we do not direct it to children. We do not knowingly collect personal information from children under 13. The usage analytics described in this policy are not designed to identify any individual; the Pro tier collects only question text, never linked to identifying information. If you believe a child has provided us information, contact privacy@aiviation.dev.

10. Changes to This Policy

We may update this policy. Changes will be posted here with a new effective date. Continued use after the new effective date constitutes acceptance.

11. Contact