Airspace — Privacy Policy

Version 1.1 · Effective August 27, 2026

Data controller: Alhambra Data Solutions FZCO (Trade License No. 59833, Dubai Integrated Economic Zones Authority), a free zone company registered in the United Arab Emirates. Registered address: Premises 59833-001, IFZA Business Park, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. Contact: support@joinairspace.com

This policy explains what personal data Airspace collects, why, who can see it, where it’s stored, and the choices and rights you have. It covers the Airspace iOS and Android apps, the web app at app.joinairspace.com, and the waitlist and pages at joinairspace.com.

1. What we collect

Account data. Email address and password (passwords are hashed by our authentication provider; we never see or store them in plain text), your confirmation that you are 18 or older, and your acceptance of the Terms of Service (with timestamp and version).

Profile data you choose to add. Name and nickname, profile photo, bio, role (jumper, coach, or both), disciplines, home dropzone and/or tunnel, experience details, self-reported licenses and ratings, current goals, skill cards you fill out, Instagram handle, and phone number. You can mark your phone as reachable on WhatsApp. Coaches can additionally choose to make their phone number publicly visible (off by default) and can add payment instructions and a standing deposit note that are shown to jumpers in booking contexts. Your phone number is private by default; Section 3 sets out exactly when other users can see it.

Booking and event data. Booking requests, dates and slots, statuses, cancellations, event registrations, and — when a coach requires a deposit — the deposit amount, deadline, status, and the timestamp and version of the deposit cancellation policy you accepted.

Deposit proof images. If a coach requires a deposit, you upload an image proving you paid the coach directly (for example, a transfer receipt). These images may contain financial details from your receipt. Crop or redact anything you don’t want the coach to see — account numbers are not needed as proof. Proof images are stored in a private storage area and are visible only to the two parties to that booking.

Trips and presence (“Who’s Around”). If you announce a trip, the venue(s) and dates you enter are shown to other users so people in your airspace can find you. You control this: announcing is optional, and a visibility toggle in Settings governs whether you appear in discovery. Coaches’ published trips and tunnel windows are visible to users by design — that is how jumpers find them.

Skill card snapshots. When you book a coach, a snapshot of your skill card at that moment is shared with that coach so they can prepare. Snapshots are immutable records tied to the booking.

Favorites and preferences. Coaches, venues, events, and teams you favorite or save, and your notification preferences (per-coach and per-venue notification toggles, discovery visibility).

Blocking records. If you block someone (or they block you), we store that relationship to enforce it: you are hidden from each other and new bookings between you are refused. We do not notify the other person.

Device and technical data. Push notification tokens, device model and OS version, app version, and crash and error diagnostics so we can fix bugs. Standard server logs. We do not use third-party advertising or behavioral-analytics trackers; our only monitoring tool is error reporting (Sentry), enabled in production builds only.

Location. We do not track your location in the background, and we do not collect precise location as part of your profile. Venue locations shown on maps come from our venue database, and your “location” in the product is what you tell us — your home dropzone or tunnel and any trips you announce. If you grant location permission while using the map, your device’s location is used only to center the map around you; you can revoke this at any time in your device settings. Maps in the app are rendered by Google Maps Platform, so your map interactions (such as tiles loaded and place searches) are processed by Google as our service provider.

Waitlist. If you join the waitlist on our website, we collect your email address (and name, if you provide it) to contact you about access and launch.

Support communications. If you email us, we keep the correspondence.

What we do NOT collect: payment card numbers or bank credentials (all activity payments happen directly between users, outside Airspace), government ID, precise background location, or advertising identifiers.

2. How we use your data

• To run the marketplace: show profiles and availability to other users, process booking requests and event registrations, track deposit status, send booking-related notifications, and enforce blocks.
• To communicate with you: push notifications and transactional emails (for example, booking confirmed or cancelled, deposit reminders, password reset). Notification preferences are adjustable in the app; transactional messages about your own bookings and account are part of the service.
• To keep the service working and safe: debugging and crash analysis, preventing abuse and fraud, enforcing our Terms, and securing accounts.
• To improve the product: understanding aggregate usage of features through our own database records and error reports.
• To meet legal obligations and respond to lawful requests.
• Marketing: we may email waitlist members and users about Airspace launches and major updates. You can unsubscribe at any time. We do not do third-party advertising and we do not sell or rent personal data to anyone.

Legal bases (where laws such as the UAE Personal Data Protection Law or the EU GDPR require one): performance of our contract with you (running the marketplace you signed up for), your consent (optional profile fields, trip announcements, marketing, device permissions), our legitimate interests (security, abuse prevention, product improvement) balanced against your rights, and compliance with legal obligations.

3. Who can see your data

Other users — by design. Airspace is a marketplace; core profile information (name, photo, disciplines, experience, home venue) is visible to other users. Context-specific sharing includes: a coach you book sees your booking details, skill card snapshot, and contact details; participants and organizers of an event you register for see registration information appropriate to their role; and users may see your trip announcements per your visibility settings.

Your phone number. Your phone number is private by default and is never shown on public web pages. It is visible to other Airspace users in only two situations. First, if you are a coach and you turn on public phone visibility in your profile, any Airspace user who views your profile in the app can see it; you can turn this off at any time. Second, as part of a booking: once a booking exists between a jumper and a coach, each of you can see the other’s contact details (including phone number, if you added one, and whether you marked it as reachable on WhatsApp) so you can coordinate directly. Contact details exchanged this way are shown only to the other party to that booking. Beyond those two situations, your phone number is not shown to other users.

Public web pages. Coaches may have a limited public profile page on the web (name, photo, disciplines, and upcoming venue and dates) so they can be found and shared outside the app. Shareable cards (for example, a coach or event story card) contain only the information shown on the card and are shared only when a user chooses to generate and share one.

Service providers (processors) working for us:

These providers process data only on our instructions and under their data-processing terms.

Legal and safety disclosures. We may disclose data if required by law, to enforce our Terms, or to protect the rights, property, or safety of users, the public, or Airspace.

Business transfers. If Airspace is involved in a merger, acquisition, or asset sale, data may transfer as part of that transaction; this policy would continue to apply until updated with notice.

We never sell your personal data, and we don’t share it with data brokers or advertisers.

4. International transfers

Airspace is operated from the United Arab Emirates, our primary database is hosted in the United States, and our users are worldwide. This means your data is transferred across borders as a normal part of the service. Where the law of your country requires safeguards for such transfers (for example, the UAE PDPL or the EU GDPR), we rely on appropriate safeguards, including the contractual data-protection commitments in our providers’ data-processing terms and, where applicable, your consent.

5. Retention and deletion

We keep your data while your account is active.

Deleting your account. You can permanently delete your account in the app (Settings → Delete account), on the web at https://app.joinairspace.com/delete-account, or by emailing support@joinairspace.com. If you have upcoming confirmed bookings or published events, deletion is blocked until they are cancelled or completed — commitments to other users must be resolved first. Deletion immediately removes your account and profile from the service. After deletion:

• Your profile, photos, skill cards, favorites, trips, and preferences are removed from the live service.
• Booking, deposit, and event-registration records that involve another user may be retained in minimal form for up to 12 months, for the other party’s records and for dispute-resolution, fraud-prevention, and legal purposes.
• Reports filed about an account may be retained in anonymized form after the account is deleted, for safety and enforcement purposes.
• Deposit proof images are kept only as long as the related booking record is kept, then deleted.
• Uploaded files and residual copies are purged from storage systems and backups on a rolling basis, within 90 days at the latest.
• Crash and server logs age out automatically within 90 days. Database backups roll off within 30 days.
• We may retain specific records longer where the law requires it or where needed to establish or defend legal claims.

Waitlist emails are kept until launch outreach is complete or you unsubscribe, whichever comes first.

6. Your rights and choices

Depending on where you live (including under the UAE PDPL and the EU GDPR), you may have the right to access, correct, delete, or receive a copy of your personal data; to object to or restrict certain processing; and to withdraw consent at any time without affecting prior processing.

Built into the app: edit your profile anytime; toggle discovery visibility; control per-coach and per-venue notifications; manage push permissions in device settings; block users; and delete your account, which removes your data as described in Section 5.

By request: email support@joinairspace.com for anything else — access or export requests, correction of data you can’t edit yourself, or questions. We respond within the timeframe required by applicable law (generally within one month).

Complaints: you may lodge a complaint with the UAE Data Office or, if you are in the EU/EEA/UK, with your local supervisory authority. We’d appreciate the chance to resolve concerns directly first.

7. Security

We take reasonable technical and organizational measures to protect your data: encrypted connections (TLS) everywhere, row-level access controls in the database so users can only read what they’re entitled to see, private storage for sensitive files like deposit proofs (accessible only to the parties involved, via expiring links), least-privilege access for the team, and production-only error monitoring. No system is 100% secure; if a breach affecting your personal data occurs, we will notify you and the relevant authorities as required by applicable law.

8. Children

Airspace is for adults. You must be 18 or older to create an account, and we do not knowingly collect personal data from anyone under 18. If an adult registers a minor as a participant in an event (for example, a tunnel camp), the adult provides only the information needed for that registration and is responsible for having the authority to share it. If you believe a child has created an account, contact us at support@joinairspace.com and we will delete it.

9. Cookies and similar technologies

The web app at app.joinairspace.com uses only what’s needed to keep you signed in and remember your session (local storage and essential cookies). We do not use advertising cookies or cross-site trackers. The marketing site at joinairspace.com is hosted on Squarespace, which may set its own functional and analytics cookies as described in Squarespace’s cookie policy.

10. Changes to this policy

We may update this policy as the product evolves (for example, when in-app payments launch, this policy will be updated first). For material changes we’ll notify you in the app or by email before they take effect. The current version and effective date always appear at the top.

11. Contact

Alhambra Data Solutions FZCO Premises 59833-001, IFZA Business Park, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates support@joinairspace.com

© 2026 Alhambra Data Solutions FZCO. All rights reserved.