Privacy Policy

Effective date: October 10, 2026
Service: Meet You When I Land (MYWIL)
Operator and data controller: Trevor Bissonette, operating as Bissonette Data Solutions ("MYWIL", "we", "us")

MYWIL is a schedule-first, private layover network. It compares selected travel and availability windows between accepted friends and shares only the overlap context needed to help them make a plan. There is no public nearby-people feed, and MYWIL does not publish a raw roster or private calendar address.

1. Scope and responsibility

This Privacy Policy explains how MYWIL collects, uses, discloses, retains, and protects personal information through our mobile app, website, Help Center, and related services (together, the "Service"). Trevor Bissonette, operating as Bissonette Data Solutions is responsible for this processing. Premium is initially intended for sale through Apple's App Store in Canada and the United States; people may still visit the website or travel internationally.

2. Information we collect

2.1 Account, profile, and connection information

Account information: your phone number, Firebase account identifier, authentication state, and verification or security records needed to create and protect your account.
Profile information: your display name, optional approved photo, private photo submissions, review status, rejection reasons, and update/decision records needed for account safeguards.
Connection information: exact-phone-number searches, invitations, accepted friend relationships, removals, blocks, and related status and timestamps. MYWIL does not upload your device address book.
Feedback and support: messages, screenshots, issue details, optional account-deletion feedback, and other information you choose to send us. Please redact rosters and never send a verification code, password, payment-card information, or private calendar address.

Photo review and safety reports

New and replacement photos are checked by an authorized human reviewer before publication. The pending image, account/submission identifiers, dates, status and decision records are private to the service and authorized operators. The previous approved photo or default avatar remains visible while review is pending; rejecting a replacement preserves the previous approved photo. Image processing removes EXIF metadata, including embedded location information, and creates a resized image for the profile.

In-app reports contain reporter and subject account identifiers, the selected concern, optional details, limited server-captured profile/encounter context, and resolution records. These are not public reports and are not anonymous to MYWIL. Reports, blocks and operator review help us handle abusive names, photos, unwanted requests, impersonation and suspected underage use.

2.2 Schedule, calendar, and availability information

MYWIL processes the schedule information needed to propose and compare useful availability. Depending on the source you choose, this can include event titles, locations, Notes or descriptions, event identifiers, airport or city, start and end times, all-day or cancellation status, home airport and time zone, positioning-flight preferences, manual availability, and normalized layover windows. Notes or descriptions may contain flight, report/check-in, departure, arrival, release, or aircraft details used to interpret potential layover times.

Device calendar: with calendar permission, the app reads events from the specific calendar you select, including available Notes or descriptions, and sends those event fields to MYWIL's servers for parsing and review. The app looks approximately 90 days ahead and reads up to four days before and after that period to connect surrounding trip events. Choose a dedicated work calendar to avoid sending unrelated personal events. It does not publish the calendar or give friends access to it.
ICS file: the app reads the iCalendar file you select and sends its contents for parsing, including event descriptions when present. A temporary local import copy is deleted after processing. Parsed suggestions require your review before they are used for matching.
Private calendar feed: if you connect an HTTPS or webcal subscription address, MYWIL stores an encrypted copy while the feed remains connected so it can refresh and interpret its events, including descriptions when present. Treat this address like a password. It is removed when you disconnect the feed or delete the related data.
Manual entry: MYWIL stores the airport and local availability times you enter.

2.3 Location and airport-confirmation information

Schedule matching works without location permission. MYWIL does not use continuous background tracking. Location features are optional and have manual alternatives.

Manual airport check-in: when you ask the app to suggest a nearby airport, location is used to make that suggestion. You confirm the airport before it is shared as a short-lived airport-level status, or you can enter the airport yourself without location access.
Smart Arrival: if you enable this Premium feature and grant background location access, the device registers geofences around relevant upcoming airports from a fresh connected/imported schedule source. Manual-only layovers do not satisfy that source requirement. On an eligible arrival event, a current observation may include latitude, longitude, accuracy, timestamp, and, when the operating system supplies them, speed or altitude. The observation is sent to MYWIL's server to validate the airport arrival; saved arrival state uses airport, time and method. We do not provide the coordinates to friends.
Friend-facing information: accepted friends receive relevant city- or airport-level overlap and confirmation context, not your precise observation, route, or a live location trail.

2.4 Notifications, devices, and service diagnostics

Notification information: an Expo push token, platform, notification preferences, and limited alert history or delivery state needed to send an eligible alert once and prevent duplicates.
Technical information: app or browser version, operating system, language, time zone, IP address, request timestamps, error information, and security or integrity signals generated when the Service is used.
Website measurement: our website uses Firebase Analytics for page-view and interaction measurement and Firebase App Check with reCAPTCHA for abuse protection. These services may process browser, device, cookie or local-storage identifiers, IP-derived information, and integrity signals. We use this information to understand site performance and protect forms, not for third-party ads.

Website analytics is separate from mobile measurement. In the mobile app, RevenueCat records Premium paywall impressions and subscription or trial events for subscription analytics and operation. These records use an opaque billing identifier that MYWIL links to your account. The mobile app has no dedicated crash-reporting integration; ordinary server/security/error logs still exist. We update this policy before introducing additional collection. Browser privacy controls can limit website cookies or similar identifiers, which may affect some website features.

2.5 Premium, purchase, and subscription information

When MYWIL Premium is available on iOS, Apple processes the purchase and payment method. RevenueCat helps MYWIL validate and administer subscription access. MYWIL and RevenueCat may process a random, opaque billing identifier and limited commerce data such as product and entitlement identifiers, storefront, currency, trial status, purchase and renewal state, expiration date, grace or billing-retry state, cancellation, refund, revocation, transfer, and restoration events. MYWIL also records whether an account has an authorized founding-member grant.

MYWIL does not receive or store your full payment-card number, Apple Account password, billing address, or full App Store receipt in its application database. The billing identifier does not use your phone number or email address, but server records link it to your account; it is not anonymous to MYWIL.

2.6 Website launch notifications

If you ask to be notified at launch, we collect your email address, the signup source, and signup or update timestamps. We also use a short-lived IP-based rate-limit record to protect the form from abuse. We use the email for the requested launch notice and directly related administration.

3. How we use information

We use personal information to:

authenticate users, operate accounts, and maintain trusted connections;
parse and normalize reviewed schedule data, compare eligible friends' availability, and display overlap results;
provide manual airport confirmation and optional Smart Arrival when enabled;
deliver requested alerts and suppress duplicate or ineligible notifications;
confirm Premium access, restore purchases, administer founding-member access, and respond to billing issues;
answer support, privacy, safety, and account-deletion requests;
monitor reliability, measure website use, prevent fraud or abuse, and protect the Service; and
comply with law, enforce our Terms of Service, and establish or defend legal claims.

Where law requires a legal basis, we rely on performance of our contract, your consent for optional device permissions or processing, our legitimate interests in operating and securing the Service, and compliance with legal obligations. You may withdraw a permission or consent, but that does not affect processing that was lawful before withdrawal.

We disclose personal information only for the purposes described below.

4.1 Discovery, requests, and accepted friends

A signed-in MYWIL user who knows your exact sign-in phone number can search for your name and approved photo before you accept a connection. Phone numbers appear in friend requests and accepted connections. There is no public browsable or nearby-people directory; blocked users cannot obtain that lookup result. An accepted friend may also see relevant schedule or airport-level context needed for a shared overlap. A free friend's consented schedule can participate in a Premium subscriber's comparison, but only the entitled subscriber receives that subscriber's Premium result. We do not disclose your raw roster, complete calendar, event Notes or descriptions, private feed address, or precise Smart Arrival observation to friends.

Approved photos are displayed using download links. A recipient can save or share the image/link. Replacement, removal or account deletion removes the old hosted object, but cannot recall copies already downloaded. Pending submissions never have those public download links and are not shown to other users.

4.2 Service providers and platforms

Google Firebase and Google Cloud for authentication, databases, file storage, functions, website analytics, and abuse protection;
Expo and the device platform's notification service to deliver push notifications;
Apple for iOS distribution, in-app purchases, subscription management, and refunds; and
RevenueCat to validate purchases, normalize Premium subscription status, and measure paywall impressions and subscription events.

For information processed on our behalf, we require service providers through applicable data-processing terms and access safeguards to provide the same or equal protection described in this policy and required by applicable privacy rules. These terms limit processing and require protection by their subprocessors. Apple and other platforms also process some information independently under their own terms and policies. For example, Google receives and stores phone-authentication numbers for spam and abuse prevention across Google services. Providers may process information in countries other than your own.

Provider details: Firebase privacy and security, Firebase data-processing terms, RevenueCat data-processing terms, RevenueCat privacy, Expo privacy, and Apple privacy.

4.3 Legal, safety, and corporate events

We may disclose information when reasonably necessary to comply with law or a lawful request, investigate fraud or a security incident, enforce our terms, or protect users, MYWIL, or others. Information may also transfer as part of a merger, financing, reorganization, acquisition, bankruptcy, or sale of assets, subject to applicable law and continued protection of the information.

5. No sale or third-party advertising

MYWIL does not sell or rent personal information, use it for third-party targeted advertising, or share it for cross-context behavioral advertising. The Service does not contain third-party advertising. We may create aggregated or de-identified statistics to operate, secure, understand, and improve MYWIL. We do not attempt to re-identify that information, and we treat it as personal information if it can reasonably be linked back to a person.

6. Data retention and deletion

We retain each category only as long as needed for the purposes above:

Account, profile, settings, and accepted connections: while the account is active, then deleted through the account-deletion process except for limited legal, security, or backup records.
Profile photos and review: pending submissions expire after 30 days, rejected records after 7 days, and decision/audit records after 90 days. Active approved images remain until replacement, removal or account deletion. Private orphaned uploads have a 32-day storage cleanup fallback.
Safety reports: report and moderation audit records expire after 90 days; daily cleanup removes expired records. Discovery receipts expire after one day. Account deletion removes records involving that account as implemented, except justified legal/security retention.
Support correspondence: routine closed emails and private case notes are deleted after 90 days from closure through our support review process. Relevant billing, security, dispute or legal records may be kept longer where necessary for their stated purpose; we limit access and review that need.
Schedule data: current and future reviewed windows remain while needed for your active schedule. Past availability is normally removed after 30 days.
Imports and feeds: an import preview normally expires after one hour; temporary local ICS copies are deleted after processing. Saved previews and layover records contain derived windows and limited import/status information, not raw event Notes or descriptions. An encrypted private feed address remains only while connected.
Airport confirmation: manual and Smart Arrival confirmation is short-lived, normally no more than two hours. Precise Smart Arrival observations are used for validation and are not kept as a friend-visible route history.
Overlap and alert history: normally retained for up to 90 days for reliability, deduplication, and troubleshooting.
Launch-list information: until the requested launch notice is sent and for a short administrative period, unless you ask us to delete it sooner.
Premium operations: access-transition audits expire after 730 days. Separate minimal billing account/reverse-identity records can remain after deletion to prevent delayed purchase events recreating access and to reconcile transactions. These records currently have no automatic expiry; they are restricted to server/operator access and reviewed on privacy requests. They are not covered by the 90-day deletion-lock period. Financial records may be retained where law requires.
Security and deletion records: limited anti-abuse, deletion-lock, audit, or backup information may remain for the applicable security window or backup cycle. A deletion lock may remain for up to 90 days to prevent partial account recreation.

Expiry and physical deletion are different: scheduled cleanup and database/storage expiry can take time to finish. Provider security, legal or backup retention follows the provider's applicable terms and deletion processes; deleting an app account does not instantly erase every provider-held record.

When retention is no longer necessary, we delete or de-identify the information. We may retain a narrowly limited record longer when required by law, needed to prevent fraud or replay, or necessary to establish or defend a legal claim.

7. Your choices and privacy rights

7.1 Product and permission controls

Review schedule suggestions before publishing them; pause, refresh, disconnect, or delete schedule data in the app.
Control schedule sharing and remove or block connections. These privacy controls are not paywalled.
Keep location permission or Smart Arrival off and use schedule matching or manual airport selection instead.
Change calendar, photo, location, background-location, and notification permissions in device settings.
Ask us to remove your launch-list email by contacting support@mywil.app.

7.2 Access, correction, portability, objection, and complaints

Depending on where you live, you may request access to, correction of, portability of, or deletion of your personal information; object to or restrict certain processing; withdraw consent; appeal our response; or use an authorized agent. You may also complain to your local privacy regulator. We may verify your identity before fulfilling a request, and we will not discriminate against you for exercising a privacy right.

7.3 Delete your MYWIL account

Start permanent deletion in Profile, Account settings, Delete account. Feedback and the reason are optional, including details for Other. After the identity and final confirmation steps, deletion begins immediately. You do not have to cancel a subscription or provide a cancellation receipt to delete MYWIL.

MYWIL removes the account's profile, connections, ordinary schedule data, pending/approved photo files and app access, subject to the narrow retention exceptions above. Keep the app online while deletion completes. Any unused MYWIL access ends with the deleted account, and an account-bound founding-member grant is permanently removed.

If you prefer to use the remaining subscription period, keep your account and return to delete it later. This is your choice outside the deletion flow; MYWIL does not schedule deletion for the subscription's end.

Deleting MYWIL does not cancel an Apple subscription. Apple may continue billing until you cancel through your Apple Account. You can manage Apple subscriptions before or after deleting MYWIL. An active App Store purchase may remain restorable under Apple's and RevenueCat's account-transfer rules, but restoration does not recreate deleted profile, friend, or schedule data.

For any privacy request or help with deletion, email support@mywil.app.

8. International processing

MYWIL and its providers may process information in Canada, the United States, and other countries where they operate. Those countries may have different privacy laws. Where required, we use contractual, organizational, or other recognized safeguards for cross-border transfers.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encrypted transport, restricted server-side data, encrypted storage for private calendar-feed addresses, integrity checks, and minimal billing identifiers. No system is completely secure. Protect your device and verification codes, connect only with people you recognize, and report a suspected account or privacy issue promptly.

10. Minimum age

MYWIL accounts are for people aged 16 and older. The service is not directed to children under 16. A higher minimum age or parental authorization may apply where local law requires it. We do not claim to verify every user's age. If you believe an account belongs to someone under 16, use the in-app report controls or contact support. We investigate, restrict ineligible use and delete improperly collected information where required. Please do not send identity documents or a child's full roster in ordinary email.

11. Changes to this policy

We may update this Privacy Policy as the Service or law changes. If a change is material, we will provide notice in the app or by another appropriate method. The effective date above identifies the current version.

12. Contact us

Direct privacy questions, requests, or complaints to the MYWIL Privacy Lead at Trevor Bissonette, operating as Bissonette Data Solutions:
support@mywil.app