GonnaLand Privacy Policy
1. Who we are
GonnaLand is made by Betterself.ai LLC ("Betterself", "we"). GonnaLand is an advisory landing training aid for general aviation. For anything in this policy — questions, access, correction, or deletion requests — email hello@betterself.ai.
2. What the app records — on your device
To do its job, GonnaLand records each approach locally on your device:
- Camera video — the forward view of your approach, for later review.
- Precise location — GPS position, groundspeed, and altitude during the approach.
- Device motion — accelerometer, gyroscope, attitude, and barometer readings.
- Nearby avionics data — if an ADS-B receiver (GDL90) or simulator feed is on your local Wi-Fi network, the app listens for its position broadcasts and records them alongside the flight. The app receives these; it does not transmit anything to your avionics.
- Aircraft & mount profile — the aircraft type, mount position, and optional calibration values you enter.
The app may also capture brief bursts of still photos outside your approaches — only when a compatible ADS-B receiver is connected and reports an aircraft that may be within the camera's view — together with those traffic reports and the position and attitude readings needed to interpret the photos. These are moments, not video: the app will not record continuous video of your en-route flying.
These recordings live in the app's storage on your device (also visible in the Files app), under your control. You can review and delete them in the app at any time. The app does not use the microphone.
3. The sharing program
Recordings are shared with us to help improve GonnaLand's perception — finding the runway and recognising nearby aircraft ("traffic") — including training and evaluating the machine-learning models that power those features. Sharing is on by default, is disclosed in the terms you accept when you first open the app, and can be turned off at any time in Settings → Sharing (uploads stop immediately, and anything already queued is discarded). It requires a free GonnaLand account — see section 4.
What uploads when sharing is on
- The approach video and sensor log (which includes the GPS track and motion data above)
- Runway identifier, approach duration, and your aircraft name
- Device model and app version
- Any traffic snapshots described in section 2 — the still photos, the ADS-B traffic reports that triggered them, and the associated position and attitude readings. Only when a compatible ADS-B receiver is connected, and under the same sharing switch as everything else.
- Your account identifier — a random string with no personal meaning. Your name and email are not attached to a recording; they stay in your account (section 4), and we look them up there if we need to reach you about a particular approach.
Uploads run only over Wi-Fi, and only for recordings that pass a quality bar (simulator and desk-test recordings, recordings without a runway or GPS, and broken files are never uploaded). Shared recordings are stored in Google Cloud Storage in the United States and are used for product development — improving runway and traffic detection and related safety features — and for nothing else.
Retention
- On your device: recordings are automatically removed from the device 7 days after the flight to save space (you can turn this off in Settings); a recording still waiting on an enabled upload is kept until the upload completes.
- Shared copies: a recording you share becomes part of the dataset we use to develop and evaluate GonnaLand's perception models, and we keep it indefinitely for that purpose. It carries only your account identifier, never your name or email.
- If you delete your account: we delete the account and everything in it — your name, your email, and the identifier's link to you. Recordings you already shared remain in the dataset, but nothing then connects them to you or to any account.
- Who sees a shared recording: people here do. We review shared approaches to judge whether they are useful for developing and testing the models, which means someone on our team may watch the video, and we delete the ones that are not useful. Recordings you have not shared are never uploaded, so we never see them at all.
- Removing shared recordings: email hello@betterself.ai and we will delete them. Please do this before deleting your account — afterwards we can no longer determine which recordings were yours.
4. Your GonnaLand account
A GonnaLand account is required to use the app. You sign in once, as part of first-time setup. The account exists so that recordings have a stable, verified owner, so we can reach you about one, and so that deleting your account can de-identify what you have shared.
- You sign in with Apple or Google, and we never see or handle a password: the sign-in happens with Apple or Google, who tell us your name and email address and give us an account identifier.
- If you use Sign in with Apple and choose Hide My Email, we receive an Apple private-relay address rather than your real one. That is fine; mail we send to it is forwarded to you by Apple.
- Your GonnaLand account is separate from any account you may have with our other products — deleting it affects GonnaLand only.
- You can delete your account from inside the app at any time (Settings → Account → Delete account). This removes the account, your name and your email, and turns sharing off. See Retention above for what happens to recordings you already shared.
5. Public links
Your approaches are private by default. No other user can open one, and we do not list them anywhere. A public link is created only when you choose to create one, for one specific approach at a time. (If you share approaches for training, our own team can see those — see Retention above.)
What becomes visible to anyone with the link: the replay itself (video, flight path and the guidance track), the airport and runway, the date and time of the approach, its duration, an aircraft type you supply, and the display name you choose.
What does not: your name, your email address, your account identifier as a readable field, your aircraft's registration (we ask for a type such as "C172", never a tail number), and your device model, iOS version or app version. The video has no audio track — the app records video only, so nothing said in the cockpit is captured in the first place, by anyone, ever.
The link is unguessable, but it is not a secret. It contains about 128 bits of randomness, so it cannot be found by guessing and we do not list public approaches anywhere. But anyone you give it to can pass it on, and a link posted publicly can be seen by anyone who finds it. We ask search engines not to index these pages, which most honour, but that is a request rather than a guarantee. Treat a public link the way you would treat an unlisted video.
Your display name is public and it links your approaches together. It is globally unique and it appears on every approach you publish, so someone holding two of your links can tell they came from the same pilot. This is a deliberate part of the feature and it is worth understanding before you publish: choose a name you are comfortable being seen alongside your flying.
Revoking a link. You can revoke a public link at any time from the web viewer. The page stops working immediately and we stop issuing any new access to the media at once. One honest caveat: a media address already issued to a viewer's browser keeps working until it expires, which is up to six hours. Deleting your account has the same effect as revoking every link, and additionally deletes your display name, releasing it for reuse.
We count views. We keep an approximate per-day count of how many times each public link is opened, to limit abuse and cost. It is a number attached to the link — we do not log who viewed it, and there is no analytics or advertising tracking on the public page. The page loads map imagery from Mapbox, which necessarily sees the viewer's IP address in order to serve the tiles.
6. App diagnostics and analytics
The app uses Google Firebase for crash reporting (Crashlytics) and usage analytics. This tells us things like which screens are used, that an approach was recorded (its duration and whether a runway was identified — never the video, the location track, or your name), the device model and OS version, a device-scoped identifier, an approximate region derived from IP address, and crash logs. We use this to fix bugs and understand which features matter.
7. The website
- Beta signup: if you request beta access, we store the email address you enter, a timestamp, and your browser's user-agent string — used solely to contact you about GonnaLand's beta and availability. The form is protected by Google reCAPTCHA v3, which evaluates interaction signals to block bots.
- Analytics: gonnaland.com uses Cloudflare Web Analytics — a cookieless, aggregate measurement service. The site sets no tracking cookies.
8. What we don't do
- We never store a password. Signing in is handled by Apple or Google, so we never see or handle one.
- No advertising, no ad networks, no ad tracking.
- We never sell personal data, and we don't share it with data brokers.
9. When data is shared with others
We use a small set of service providers to run GonnaLand: Google (Firebase and Google Cloud — hosting, storage, database, analytics, crash reporting, reCAPTCHA, and Google sign-in), Apple (Sign in with Apple, including its private email-relay service) Cloudflare (website analytics) and Mapbox (map imagery in the web replay viewer and on public link pages, which necessarily sees the viewer's IP address in order to serve tiles). They process data on our behalf under their respective terms. Beyond that, we disclose personal data only if required by law.
10. Your choices and rights
- Use the app fully with sharing off. An account is required to use GonnaLand; sharing your approaches is not.
- Turn sharing off at any time in Settings — uploads stop immediately.
- Delete any recording from your device in the app.
- Delete your account from inside the app (Settings → Account → Delete account), which removes your name, email and the account itself.
- Request access to, correction of, or deletion of anything you've shared with us — including shared recordings and your beta-signup email — at hello@betterself.ai. We won't discriminate against you for exercising these rights.
11. Children
GonnaLand is a tool for pilots and flight training. It is not directed at children, and we do not knowingly collect personal data from anyone under 17.
12. Security
Data in transit is protected with TLS. Uploads are authenticated with your account and can only ever write to your own area of our storage, and our upload service holds narrowly scoped credentials (it can create new objects, nothing else). No method of transmission or storage is completely secure, but we design for least privilege.
13. Changes to this policy
If we change this policy, we will post the new version here with a new effective date, and flag material changes in the app or on this site before they take effect.
14. Contact
Betterself.ai LLC · hello@betterself.ai
This policy is specific to GonnaLand. Our sibling product GonnaFly has its own policy at gonnafly.ai/privacy.