Scope and controller information
This policy covers the akincijet.com website, Flight Desk API, operations console and AKINCI JET Aviation iOS app. The verified official identity/name and address of the data controller must be added here before publication. For technical privacy questions, contact info@akincijet.com or +90 532 410 32 79.
Information we collect
In the current production release, accounts are created and verified only through Sign in with Apple. We receive the app-specific Apple user identifier (sub), Apple’s verified email or private relay address, name if supplied, required authorisation data, and an internal user identifier. We may also receive an email address that you voluntarily provide in a flight or contact form. The email one-time-code option remains in the software but is administratively disabled; until a verified delivery provider is configured, it does not create an account or verification challenge and does not send a code.
When you submit a flight request, we receive your full name, telephone number, the account email or private relay address supplied by Apple and any email address you provide in the form, origin and destination, outbound/return date and time, passenger and baggage counts, pet and transfer selections, aircraft preference and the acknowledgement record. Offer responses and messages you send to operations are added to the account-linked request. If you contact us separately by email, telephone or WhatsApp, we also receive information you voluntarily include in that communication.
To operate and secure the service, we may process request time, limited technical log information and a one-way IP digest that does not store the raw IP. Website forms may use a strictly necessary session cookie, which expires when the browser closes, for security.
If push functionality is configured and an iOS token is submitted, the token, platform and language may be stored. The current token-registration infrastructure does not deliver notifications unless a separate provider and sending worker are configured.
Data stored locally in the app
The language preference and multiple flight drafts saved by the user are stored in AsyncStorage; the account session credential is stored in iOS SecureStore. Drafts may include route, date/time, passenger, baggage, pet, transfer, aircraft, notes and contact details, and the relevant draft is removed after successful submission. Sign-out and account deletion explicitly clear the session, local account data and drafts. Because the operating system may preserve SecureStore data after app removal, removing the app alone is not described as guaranteed deletion of every credential.
Why we use information
We use information to receive your flight request, contact you, evaluate suitable aircraft and route options, manage quotations and operational planning, coordinate connections or transfers, provide support, prevent fraud and misuse, keep systems secure and meet legal obligations.
Sharing and service providers
We do not sell data. Personal data may be shared with hosting providers only as needed to perform their functions and with relevant email providers when delivering communications chosen by the user. Apple is the only enabled user authentication and authorisation provider in the current production release. Email sign-in is administratively disabled; until a verified delivery provider is configured, no verification challenge is created, no code is sent and no data is shared with an email-delivery provider for that purpose. The minimum necessary information may be shared with suitable licensed flight operators, FBO/ground handling, transfer, catering or other operational providers needed to serve your request. Information may be disclosed to competent authorities where legally required.
WhatsApp and other external channels
WhatsApp, email, telephone and the website are separate optional contact links; the primary flight request is sent to the Flight Desk API. If you open an external channel, that provider may process data under its own terms. You can review the message or cancel before sending it.
Tracking, advertising and sale
The current website and iOS app do not use behavioural advertising, third-party analytics SDKs, cross-app or cross-site tracking, or personal-data sales. We do not use an advertising identifier or request ATT tracking permission. If these practices change, this policy and the relevant permissions and disclosures will be updated before deployment.
International transfers
A hosting, email or font-infrastructure provider, or a service you choose such as WhatsApp, may use systems outside Türkiye. A transfer occurs only where necessary for the service and when the transfer conditions or safeguards required by applicable data-protection rules are in place. External providers’ own policies also apply to your direct interaction with them.
Retention and deletion
The software does not set a default retention period. The actual schedule for the live database, email, hosting logs, audit records, external channels and backups must be set and published by authorised persons. The code does not guarantee an unverified 24-month period or when and for what purpose backups are deleted.
When AKINCI_DATA_RETENTION_DAYS is configured and the purge job runs, only expired closed/cancelled requests and their linked records are deleted; other statuses are not automatically selected. Rate-limit buckets are removed by later operations after their 10-minute technical window. External-provider and backup records are not managed by this job.
The in-app account-deletion function permanently deletes the live account and its linked trip records, including related offers, messages, responses and approvals. If Apple is linked, Apple authorisation is revoked where possible; encrypted revocation data is retained in a server retry job after a temporary failure. This action does not automatically delete email mailboxes, external-provider records or backups. Any legal or operational duty to retain approved-flight records must be determined before release.
Security
Administrative and technical measures include HTTPS transport, form validation, access restrictions, rate limiting and data minimisation. No internet transmission or storage method is completely risk-free. If a security incident occurs, reasonable steps are taken to limit risk and make legally required notifications.
Your choices and rights
You may request access, correction of inaccurate data, deletion or restriction where applicable, information about recipients, objection, and withdrawal of consent you have given. Email info@akincijet.com with the subject “Personal Data Request”; only information needed to verify the request should be requested. The scope of a request across live systems, email, provider records and any backups is assessed against the actual infrastructure and applicable obligations; this software alone does not promise a backup-deletion period.
Children and policy changes
The service is directed to adult flight-request owners and is not intended to collect contact information directly from children. Contact us for a deletion review if you believe information was submitted by or about a child without proper authority.
If this policy changes, the new text and effective date will be published here. We will provide an appropriate additional notice for a material change.