Privacy Policy

Last updated: August 14, 2026 · Effective date: August 14, 2026

Airplein Studios LLC (“Airplein,” “we,” “us”), a Colorado limited liability company, makes an iPhone app and website that help plein air painters and urban sketchers track painting sessions, keep streaks, take on challenges, and find outdoor painting places. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to the Airplein iOS app, the airplein.com website, and related services (the “Services”).

By using the Services you agree to this Privacy Policy and to our Terms of Service.

1. Information We Collect

Information you provide

• Account information: email address, username, display name, and password. Authentication is handled by Amazon Cognito; we never see your password in plain text. You can sign in with email and password, Google, or Sign in with Apple. If you use a third-party sign-in, we receive basic profile information (typically your name and email) from that provider through Cognito.
• Profile information: bio, avatar photo, and optional details you choose to add, such as a home or studio address, the art mediums you use, how often you paint, your motivations, and your daily goal.
• Artwork photos: images of artwork you upload. If you allow it, we read the photo’s embedded EXIF metadata (including GPS coordinates and capture time) to place your artwork on the map — you choose the location source for each piece.
• Session details: information about painting sessions you record, such as date, duration, notes, mood, surface, artwork size, and the visibility setting you choose.
• Spots: painting locations you create or contribute to, including their coordinates, names, and descriptions.
• Communications: messages you send us, such as support requests or content reports.

Location information

Location is central to Airplein. With your permission, we collect precise When-In-Use GPS location when you record a painting session or create a spot. Artwork can also carry a location taken from photo EXIF data or a spot you select. If you set up an optional home or studio zone, we store its center coordinates and radius so we can protect locations near it. You can decline or revoke location permission in iOS Settings; features that depend on location will not work without it. Public spots and artwork can reveal the exact place where the art was made.

Information collected automatically

• Device and app information: device timezone, push notification token (if you enable notifications), app version, and device model and OS version.
• Usage analytics: events describing how you use the app and website (screens viewed, features used), collected through PostHog.
• Crash and error data: diagnostic reports when the app crashes or encounters errors, collected through Sentry.
• Subscription status: your subscription tier and purchase state (Pro monthly, Pro yearly, or Pro lifetime). Payment is processed by Apple through In-App Purchase; RevenueCat manages entitlements. We never receive your payment card number.
• Website cookies and pixels: the airplein.com website loads Meta’s Facebook Pixel on every page, which sets cookies and sends information about your visit to Meta. The pixel is not in the iOS app. See Section 5.

2. How We Use Your Information

• Provide the Services: accounts, maps, spots, sessions, artwork, and profiles;
• Power community features: showing your public spots, artwork, and profile to other users according to your visibility settings;
• Track your progress: points, streaks, challenges, and stats derived from your sessions;
• Moderate content: uploaded images are screened by automated AI moderation (AWS Bedrock) and may be reviewed by a person;
• Process subscriptions and verify entitlements;
• Send you service communications and, if you opt in, push notifications and newsletter or marketing emails (you can unsubscribe at any time);
• Understand usage, fix bugs, and improve the Services;
• Measure our advertising: understand which ads and campaigns bring people to Airplein, using the website pixel described in Sections 3 and 5. This applies to the website only;
• Enforce our Terms, prevent abuse, and comply with legal obligations.

3. How We Share Your Information

With other users

Content you share publicly — spots, artwork placed on the map, your profile, and sessions with a public visibility setting — is visible to other users. Publicly shared spots and artwork locations reveal the place where the art was made. Please be thoughtful about sharing locations near your home; the optional home-zone feature can help keep nearby locations private.

With service providers

We share information with the following processors, each only as needed to perform services for us:

• Amazon Web Services (AWS): hosting, databases, file storage (S3), and authentication (Cognito), in the US (us-west-2, Oregon);
• AWS Bedrock: AI models used for automated moderation of uploaded artwork images;
• PostHog: product analytics;
• Sentry: crash and error reporting;
• RevenueCat and Apple: subscription purchases and billing. Apple processes payment; RevenueCat manages subscription state. We never see your card number;
• Mapbox: map rendering and location services;
• Kit (ConvertKit): our email newsletter and marketing emails;
• Meta (Facebook Pixel): advertising measurement on the airplein.com website only — the pixel is not present in the iOS app. It loads automatically on every page of the website, including pages you view while signed in, and reports each page view to Meta along with the specific actions described in Section 5.

Other sharing

• Legal reasons: if required by law, subpoena, or legal process, or to protect the rights, safety, or property of Airplein, our users, or others;
• Business transfers: in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information;
• With your consent: in any other case, we will ask you first.

We do not sell your personal information for money. The Meta pixel on our website is advertising measurement: it tells us whether ads we run on Meta platforms led people to visit airplein.com. Some privacy laws treat that kind of measurement as “sharing” or a “sale.” We do not currently offer a standalone “Do Not Sell or Share My Personal Information” link. You can limit this tracking with the tools in Section 5.

4. Data Retention

We keep your information for as long as your account is active. When you delete your account (Settings → Delete Account), deletion is permanent: we delete your account record, content, and associated data from our databases and file storage. Residual copies may persist in encrypted backups for a limited period, typically up to 30 days, then purged. We may retain limited records where required by law or needed to resolve disputes or enforce agreements (for example, records of account terminations for abuse). Analytics and crash data are retained per our providers’ then-current retention settings. Spots you contributed to the shared map may remain available with identifying attribution removed, as described in the Terms.

5. Cookies and Tracking on the Website

The airplein.com website uses:

• PostHog analytics to understand how visitors use the site; and
• Meta’s Facebook Pixel to measure the effectiveness of ads we run (for example, whether an ad led to a sign-up). To be specific about what this does:
  • It loads on every page of airplein.com as soon as the page opens — including the sign-up, log-in, and signed-in pages, and including this one. A no-JavaScript fallback image reports the same page view if scripts are blocked.
  • On each page it sends Meta a PageView event containing the page address, the page you came from, your IP address, and information about your browser and device. We do not send your email address to Meta.
  • It sets and reads Meta’s own cookies (such as “_fbp”), which let Meta recognise the same browser across visits and, if you use Meta products, link the visit to your Meta account. Meta may then use that data for its own purposes under its own privacy policy, which we do not control.
  • It is not gated behind a cookie banner or consent prompt today — it loads before you take any action on the site.

You can control cookies in your browser settings, block trackers with a content blocker, use Meta’s ad-preference and off-Facebook-activity tools, and use browser privacy signals such as Global Privacy Control. We do not currently implement an automated GPC opt-out or a cookie consent banner. The mobile app does not use advertising trackers.

6. Your Rights and Choices

• Access and correction: view and edit your profile, sessions, artwork, and settings directly in the app, or email hello@airplein.com;
• Deletion: delete individual content in the app, or delete your entire account under Settings → Delete Account. Deletion is permanent;
• Location: grant or revoke When-In-Use location permission in iOS Settings, and control what is public with visibility settings and the home zone;
• Push notifications: turn off in iOS Settings or in the app;
• Marketing emails: unsubscribe using the link in any email;
• Anything else: email hello@airplein.com and we will help, including with requests to access, correct, or export your data.

US state privacy rights

We are a small company. If you live in California or another US state with a comprehensive privacy law (including the CCPA/CPRA), you may have rights to know, access, correct, delete, and port your personal information, and to opt out of certain sharing, without discrimination for exercising those rights. Use the in-app tools above or email hello@airplein.com. We will verify requests using the email on your account and may ask for additional information if needed. The categories of personal information we collect are identifiers (email, username, account IDs), profile and commercial information (including subscription status), internet and app activity, precise geolocation, and visual information (artwork and avatar photos). We use and disclose them as described in this policy. We do not sell personal information for money. We do not offer a “Do Not Sell or Share” link because we have not implemented one. Website advertising measurement via the Meta pixel is described in Section 5; you can limit it with browser controls, Meta’s tools, and GPC as described there.

European Economic Area, UK, and Switzerland

If you are in the EEA, UK, or Switzerland, you may have rights under the GDPR or equivalent laws, including access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority. We process your information in the United States. We have not appointed an EU or UK representative. If those laws apply to you, our legal bases are typically: performing our contract with you (providing the Services), our legitimate interests (securing and improving the Services, and measuring website advertising), your consent (for example, marketing emails and device location permission), and legal obligations. Contact hello@airplein.com to exercise a right or ask a question.

7. Children’s Privacy

The Services are for people 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at hello@airplein.com and we will delete the account and its data.

8. Data Security

We use standard TLS to encrypt information in transit between your device and our servers. The iOS app uses only exempt encryption for U.S. export-control purposes. We also use access controls and host with a major cloud provider. No system is perfectly secure, so we cannot guarantee absolute security. Protect your account by using a strong, unique password.

9. International Data Transfers

Airplein is operated from the United States. Your information is stored and processed on servers in the United States (AWS us-west-2, Oregon). If you use the Services from outside the US, your information will be transferred to and processed in the US, where privacy laws may differ from those in your country.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect, and we will update the “Last updated” date above.

11. Contact Us

For privacy questions or requests, contact Airplein Studios LLC at hello@airplein.com or by mail: