Privacy Policy
Last updated: 11 March 2026
1. Data Controller
The data controller for this website is Kalukan Pte Ltd, contactable at contact@skyheinz.com.
2. Data We Collect
We collect the following personal data when you use SkyHeinz:
- Account data: Email address, display name, and hashed password when you register.
- Contribution data: Your confirmations, corrections, and associated points.
- Usage data: IP address, browser type, pages visited, and timestamps (collected automatically via server logs).
- Cookies: Authentication session cookies and an optional cookie consent preference (see Section 6).
3. Purpose of Processing
We process your data for the following purposes:
- Account management: To create and maintain your user account and authenticate your sessions.
- Crowdsourcing platform: To record your contributions (confirmations and corrections), calculate points, and display the leaderboard.
- Training data: Your corrections are used to build a training dataset for an aviation-specific speech recognition model. This data is anonymised — corrections are not publicly linked to your identity.
- Service improvement: To monitor platform performance, fix bugs, and improve the user experience.
- Communication: To send you transactional emails (password reset, email verification) if applicable.
4. Legal Basis
We process your personal data based on:
- Consent: You consent to data processing when you create an account and submit contributions.
- Legitimate interest: Server logs and usage analytics are processed to maintain security and platform stability.
- Contract performance: Account and contribution data is necessary to provide the service (points, leaderboard, prizes).
5. Data Retention
- Account data: Retained until you request account deletion.
- Contribution data: Retained indefinitely as part of the training dataset (anonymised).
- Audio recordings: ATC audio clips are public radio transmissions, not personal data. They are archived after 30 days and retained for research purposes.
- Server logs: Automatically deleted after 90 days.
6. Cookies
SkyHeinz uses the following cookies:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| next-auth.session-token | User authentication session | 7 days | Essential |
| next-auth.csrf-token | Cross-site request forgery protection | Session | Essential |
| next-auth.callback-url | Redirect after login | Session | Essential |
| skyheinz-cookies | Stores cookie consent preference | 365 days | Essential |
We only use essential cookies required for the website to function. We do not use analytics, advertising, or third-party tracking cookies. Because all cookies are strictly necessary, consent is not legally required — however, we inform you via a cookie banner as a matter of transparency.
7. Data Sharing
We do not sell your personal data. Your data may be shared with:
- Hosting provider: Hetzner Online GmbH (Singapore data centre) — processes data on our behalf as a data processor.
- Email provider: For transactional emails (password reset, verification).
Anonymised training data (corrections paired with audio) may be published as an open-source dataset for aviation AI research. This data will not contain any personally identifiable information.
8. Your Rights
Under the Singapore Personal Data Protection Act (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:
- Access: Request a copy of your personal data.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your account and personal data.
- Portability: Request your data in a machine-readable format.
- Withdraw consent: Withdraw your consent at any time by deleting your account.
To exercise any of these rights, contact us at contact@skyheinz.com. We will respond within 30 days.
9. Security
We implement appropriate technical and organisational measures to protect your data, including: encrypted connections (HTTPS), hashed passwords (bcrypt), parameterised database queries, firewall protection, and access controls. However, no system is 100% secure, and we cannot guarantee absolute security of your data.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of SkyHeinz after changes constitutes acceptance of the revised policy.
11. Contact
For any questions about this Privacy Policy or our data practices, contact:
Kalukan Pte Ltd
Email: contact@skyheinz.com