Meridian Ops Privacy Policy
Effective date: September 9, 2026 · Last updated: September 9, 2026
Meridian Ops (“the app”) is run by Spiced Martini LLC (“we”, “us”). This policy says what we collect, what we do with it, and the choices you have. It is written to be read, not to hide things. If anything is unclear, email contact@meridianairops.com and a person will answer.
The short version
- You can use the app without an account. Nothing leaves your device until you sign in.
- If you sign in, we store your email and the data you make in the app so it syncs across your devices.
- We do not sell your data, share it with advertisers, or track you around the web. There are no ads and no analytics trackers in the app.
- You can download everything we hold about you, or delete your account and all its data, from the Account tab in the app. Deletion is immediate and total.
What we collect
If you use the app without an account: nothing is sent to our servers. Your checklists, flight logs, and settings stay in your browser’s storage on your device.
If you create an account:
- Email address. Used to sign you in with a magic link (no passwords) and to reach you about your account. Nothing else.
- Your app data. The things you create or save in the app: your name (as you enter it for documents), checklists and SOPs, checklist run records, flight logbook entries, battery logs, incident and waiver drafts, quotes and invoices, saved sales prospects and notes, and your settings. This is stored so it syncs to every device you sign in on.
- Your plan. Which plan your account is on (Free or Pro) and when that was set.
If you pay for a plan (when payments launch): payments are handled by Stripe. We never see or store your card number; Stripe sends us only a confirmation and your plan status.
Location, specifically
Several tools (weather, airspace map, Find Clients) use your device’s location, only when you tap them:
- Weather lookups send your coordinates to the U.S. National Weather Service (api.weather.gov).
- Find Clients sends your coordinates to the OpenStreetMap Overpass service (overpass-api.de or overpass.kumi.systems) to find nearby businesses.
- The airspace map loads map tiles from OpenStreetMap (tile.openstreetmap.org), which sees your IP address and the area you view, like any map.
We do not record, store, or build a history of your precise location on our servers. Your last known position may be stored on your own device so the tools open faster next time.
Who sees your data
Only the companies that run the plumbing, and only to run it:
- Supabase (supabase.com) – sign-in and the database that holds your synced data, hosted on AWS in the US (us-west-2).
- Surge (surge.sh) – serves the app itself. Their servers log standard request data (IP address, browser type) like any web host.
- Stripe (stripe.com) – payments, when they launch.
- Content delivery networks (Google Fonts, unpkg, cdnjs) – deliver the app’s fonts and code libraries. They see a standard web request from your device when the app loads.
- OpenStreetMap and the National Weather Service – as described in the Location section.
Business data shown in Find Clients comes from OpenStreetMap. OpenStreetMap data is (c) OpenStreetMap contributors, available under the Open Database License (opendatacommons.org/licenses/odbl).
We do not sell personal information, and we do not share it for cross-context behavioral advertising. Under California law (CCPA/CPRA), that means there is nothing to opt out of – but if that ever changes, this policy will change first and an opt-out will be provided before any change takes effect.
Your rights (California and everyone else)
Whether or not the law requires it where you live, you can:
- See and download your data. Account tab > Download my data gives you a complete copy in a readable format (JSON).
- Delete everything. Account tab > Delete my account permanently deletes your account, your email, and all your synced data from our servers immediately. This cannot be undone.
- Correct your data. Edit it in the app, or email us.
- Ask questions or make a request. Email contact@meridianairops.com. We answer within 30 days.
- Not be discriminated against for using any of these rights.
California residents: these are the rights the CCPA/CPRA gives you (access, deletion, correction, opt-out of sale or sharing, non-discrimination), and the app builds them in rather than making you ask. If you prefer to make a request by email, the address above works, and we will verify it is you by emailing the address on the account.
How long we keep data
Account data is kept while your account exists. When you delete your account, your data is deleted from live systems immediately, and from provider backups within a few days. If you never create an account, we keep nothing.
Security
Sign-in uses emailed links instead of passwords, so there is no password to leak. Data travels encrypted (HTTPS) and every account’s data is isolated at the database level – users can only ever read or write their own rows.
Children
The app is for adults working under FAA Part 107 rules. It is not directed at children, we do not knowingly collect data from anyone under 18, and accounts found to belong to minors are deleted.
Changes
If this policy changes, the “last updated” date at the top changes, and a notice appears in the app for anything material. The current version is always at meridianairops.com/ops-privacy.
Contact
Spiced Martini LLC