GonnaLand Privacy Policy

Betterself.ai LLC · Effective October 13, 2026 (version 10) · Covers the GonnaLand iOS app, gonnaland.com and app.gonnaland.com

1. Who we are

GonnaLand is made by Betterself.ai LLC ("Betterself", "we"). GonnaLand is an advisory landing training aid for general aviation. For anything in this policy — questions, access, correction, or deletion requests — email hello@betterself.ai.

2. What the app records — on your device

To do its job, GonnaLand records each approach locally on your device:

• Camera video — the forward view of your approach, for later review.
• Precise location — GPS position, groundspeed, and altitude during the approach.
• Device motion — accelerometer, gyroscope, attitude, and barometer readings.
• Nearby avionics data — if an ADS-B receiver (GDL90) or simulator feed is on your local Wi-Fi network, the app listens for its position broadcasts and records them alongside the flight. The app receives these; it does not transmit anything to your avionics.
• Aircraft & mount profile — the aircraft type, mount position, and optional calibration values you enter.

The app may also capture brief bursts of still photos outside your approaches — only when a compatible ADS-B receiver is connected and reports an aircraft that may be within the camera's view — together with those traffic reports and the position and attitude readings needed to interpret the photos. These are moments, not video: the app will not record continuous video of your en-route flying.

These recordings live in the app's storage on your device (also visible in the Files app), under your control. You can review and delete them in the app at any time.

The app uses the microphone only when you ask it to. If you turn on Record cockpit audio (in Settings, off by default), the cockpit sound is recorded with each approach video, stored on your device and, if sharing is on, shared with your recordings. We use it to measure engine and propeller speed. The headset delay check (in Settings) listens to a few test sounds to time your headset; that audio is analysed on your phone and never saved or uploaded.

3. The sharing program

Recordings are shared with us to help improve GonnaLand's perception — finding the runway and recognising nearby aircraft ("traffic") — including training and evaluating the machine-learning models that power those features. Sharing is on by default, is disclosed in the terms you accept when you first open the app, and can be turned off at any time in Settings → Sharing (uploads stop immediately, and anything already queued is discarded). It requires a free GonnaLand account — see section 4.

What uploads when sharing is on

• The approach video and sensor log (which includes the GPS track and motion data above)
• Runway identifier, approach duration, and your aircraft name
• Device model and app version
• Any traffic snapshots described in section 2 — the still photos, the ADS-B traffic reports that triggered them, and the associated position and attitude readings. Only when a compatible ADS-B receiver is connected, and under the same sharing switch as everything else.
• Your account identifier — a random string with no personal meaning. Your name and email are not attached to a recording; they stay in your account (section 4), and we look them up there if we need to reach you about a particular approach.

Uploads run only over Wi-Fi, and only for recordings that pass a quality bar (simulator and desk-test recordings, recordings without a runway or GPS, and broken files are never uploaded). Shared recordings are stored in Google Cloud Storage in the United States and are used for product development — improving runway and traffic detection and related safety features — and for nothing else.

Retention

• On your device: recordings are automatically removed from the device 7 days after the flight to save space (you can turn this off in Settings); a recording still waiting on an enabled upload is kept until the upload completes.
• Shared copies: a recording you share becomes part of the dataset we use to develop and evaluate GonnaLand's perception models, and we keep it indefinitely for that purpose. It carries only your account identifier, never your name or email.
• If you delete your account: we delete the account and everything in it — your name, your email, and the identifier's link to you. Recordings you already shared remain in the dataset, but nothing then connects them to you or to any account.
• Who sees a shared recording: people here do. We review shared approaches to judge whether they are useful for developing and testing the models, which means someone on our team may watch the video, and we delete the ones that are not useful. Recordings you have not shared are never uploaded, so we never see them at all.
• Removing shared recordings: email hello@betterself.ai and we will delete them. Please do this before deleting your account — afterwards we can no longer determine which recordings were yours.

4. Your GonnaLand account

A GonnaLand account is required to use the app. You sign in once, as part of first-time setup. The account exists so that recordings have a stable, verified owner, so we can reach you about one, and so that deleting your account can de-identify what you have shared.

• You sign in with Apple or Google, and we never see or handle a password: the sign-in happens with Apple or Google, who tell us your name and email address and give us an account identifier.
• If you use Sign in with Apple and choose Hide My Email, we receive an Apple private-relay address rather than your real one. That is fine; mail we send to it is forwarded to you by Apple.
• Your GonnaLand account is separate from any account you may have with our other products — deleting it affects GonnaLand only.
• You can delete your account from inside the app at any time (Settings → Account → Delete account). This removes the account, your name and your email, and turns sharing off. See Retention above for what happens to recordings you already shared.

5. Public links

Your approaches are private by default. No other user can open one, and we do not list them anywhere — except on a landing-challenge leaderboard, and only for an approach you choose to enter (below). A public link is created only when you choose to create one, for one specific approach at a time. (If you share approaches for training, our own team can see those — see Retention above.)

What becomes visible to anyone with the link: the replay itself (video, flight path and the guidance track), the airport and runway, the date and time of the approach, its duration, an aircraft type you supply, and the display name you choose.

What does not: your name, your email address, your account identifier as a readable field, your aircraft's registration (we ask for a type such as "C172", never a tail number), and your device model, iOS version or app version. The shared video has no audio track. Public links play a copy made without sound, even if you recorded cockpit audio, so nothing said in the cockpit is ever on a public page.

The link is unguessable, but it is not a secret. It contains about 128 bits of randomness, so it cannot be found by guessing, and we list a public approach only on a challenge leaderboard you choose to enter it in. But anyone you give it to can pass it on, and a link posted publicly can be seen by anyone who finds it. We ask search engines not to index these pages, which most honour, but that is a request rather than a guarantee. Treat a public link the way you would treat an unlisted video.

Your display name is public and it links your approaches together. It is globally unique and it appears on every approach you publish, so someone holding two of your links can tell they came from the same pilot. This is a deliberate part of the feature and it is worth understanding before you publish: choose a name you are comfortable being seen alongside your flying.

Landing challenges. When you create a public link you can also choose to enter that landing in a challenge, such as the spot-landing challenge (how close your main wheels touched down to a target on the runway). This is off unless you tick it, one landing at a time. An entered landing is listed on that runway's leaderboard, which is a public page anyone can open without signing in. It shows your display name, the aircraft type you supplied, the date, the measured distance and position, and a link to the approach — so entering makes the approach findable from the leaderboard, not only by people you send the link to. We ask search engines not to index leaderboards, as with public links. A leaderboard shows the runway on satellite imagery from Mapbox, which sees the viewer's IP address to serve it, as on a public link. Your best landing on each runway is the one ranked. A listing disappears when you withdraw it or make the link private (within a few minutes, while cached copies expire), or when you delete your account (within about a day). Scores are computed by us from your recording and can be recomputed when an approach is re-analysed or a target is re-measured.

Revoking a link. You can revoke a public link at any time from the web viewer. The page stops working immediately and we stop issuing any new access to the media at once. One honest caveat: a media address already issued to a viewer's browser keeps working until it expires, which is up to six hours. Deleting your account has the same effect as revoking every link, and additionally deletes your display name, releasing it for reuse.

We count views. We keep an approximate per-day count of how many times each public link is opened, to limit abuse and cost. It is a number attached to the link — we do not log who viewed it. Public pages are measured with the same cookieless, aggregate Cloudflare Web Analytics as the rest of our sites (see section 7); there is no advertising tracking. The page loads map imagery from Mapbox, which necessarily sees the viewer's IP address in order to serve the tiles.

6. App diagnostics and analytics

The app uses Google Firebase for crash reporting (Crashlytics) and usage analytics. This tells us things like which screens are used, that an approach was recorded (its duration and whether a runway was identified — never the video, the location track, or your name), the device model and OS version, a device-scoped identifier, an approximate region derived from IP address, and crash logs. We use this to fix bugs and understand which features matter.

7. Our websites

• Beta signup: if you request beta access, we store the email address you enter, a timestamp, and your browser's user-agent string — used solely to contact you about GonnaLand's beta and availability. The form is protected by Google reCAPTCHA v3, which evaluates interaction signals to block bots.
• Analytics: gonnaland.com, app.gonnaland.com and public link pages use Cloudflare Web Analytics — a cookieless, aggregate measurement service that counts page views and where they come from, without identifying you. None of our sites sets tracking cookies.

8. What we don't do

• We never store a password. Signing in is handled by Apple or Google, so we never see or handle one.
• No advertising, no ad networks, no ad tracking.
• We never sell personal data, and we don't share it with data brokers.

9. When data is shared with others

We use a small set of service providers to run GonnaLand: Google (Firebase and Google Cloud — hosting, storage, database, analytics, crash reporting, reCAPTCHA, and Google sign-in), Apple (Sign in with Apple, including its private email-relay service) Cloudflare (website and web-app analytics) and Mapbox (map imagery in the web replay viewer and on public link pages, which necessarily sees the viewer's IP address in order to serve tiles). They process data on our behalf under their respective terms. Beyond that, we disclose personal data only if required by law.

10. Your choices and rights

• Use the app fully with sharing off. An account is required to use GonnaLand; sharing your approaches is not.
• Turn sharing off at any time in Settings — uploads stop immediately.
• Delete any recording from your device in the app.
• Delete your account from inside the app (Settings → Account → Delete account), which removes your name, email and the account itself.
• Request access to, correction of, or deletion of anything you've shared with us — including shared recordings and your beta-signup email — at hello@betterself.ai. We won't discriminate against you for exercising these rights.

11. Children

GonnaLand is a tool for pilots and flight training. It is not directed at children, and we do not knowingly collect personal data from anyone under 17.

12. Security

Data in transit is protected with TLS. Uploads are authenticated with your account and can only ever write to your own area of our storage, and our upload service holds narrowly scoped credentials (it can create new objects, nothing else). No method of transmission or storage is completely secure, but we design for least privilege.

13. Changes to this policy

If we change this policy, we will post the new version here with a new effective date, and flag material changes in the app or on this site before they take effect.

14. Contact

Betterself.ai LLC · hello@betterself.ai

This policy is specific to GonnaLand. Our sibling product GonnaFly has its own policy at gonnafly.ai/privacy.