Little Airline Privacy Policy
Last updated: 7 November 2026
This policy explains what Now On Company Limited, 112/246 Srinakarin, Samut Prakan 10540, Thailand (Thai company registration number 0115564023284) ("we", "us") collects when you play Little Airline ("the Game"), why, and what you can do about it. We are the controller of that data under Thailand's Personal Data Protection Act (PDPA) and the EU and UK GDPR. Contact: contact@littleairline.com.
The short version
- You can play the whole Game without an account and without a network. Your airline and your saves live on your device.
- We do not show ads, do not track you across other apps or websites, and do not sell or share your personal information. There is no advertising SDK in the Game.
- Signing in with Apple or Google is optional. It backs up your saves and opens the leaderboard and friends leagues.
- Crash reports and gameplay statistics are sent only if you say yes, and you can change your mind in Settings.
- Other players only ever see a generated name like "Silver Heron 41", never your real name, email or anything you typed.
What we collect, and why
| What | When | Why | Legal basis (EU/UK) | Kept for |
|---|---|---|---|---|
| Your game and saves (airline, routes, money, settings) | Always | To run the Game | Contract | On your device until you delete it. Not sent to us unless you sign in (save backup row below) |
| iCloud save sync | If iCloud is on for the Game | To move saves between your own devices | Contract | In your iCloud account, under Apple's privacy policy. We cannot read it |
| A random guest ID | When the Game first goes online | To fetch events and settings, and to keep your progress if you later sign in | Legitimate interests | Until you delete the Game's data or your account, or 12 months unused |
| Account details: a user ID from Apple or Google, and the email address they give us (Apple lets you hide yours behind a relay address) | Only if you sign in | To run your account and back up your saves | Contract | Until you delete your account |
| Save backups: your save file, its slot, save version, days played and airline name | Only if you are signed in, when online | So you can get your airline back on a new device | Contract | Until you replace it or delete your account |
| Purchase records: product, transaction ID, date, and refund or reversal notices from Apple | When you buy something | To unlock what you bought and honour refunds | Contract; legal obligation | As long as needed to provide what you bought and as the law requires |
| Leaderboard entries: generated name, difficulty, region, report-card grade and its parts, run ID | Only if you are signed in and post a score | To rank results. Shown publicly | Contract | Until you delete the entry or your account |
| Friends leagues: league membership, settings, standings and your airline's route map | Only if you host or join one | To run the league. Shown to that league's members | Contract | Until the league ends or you leave or delete your account |
| Crash reports: device model, iOS version, app version, what the app was doing when it crashed | Only with your consent | To find and fix crashes | Consent | 90 days |
| Gameplay statistics (Google Analytics 4): screens viewed, buttons and actions used, session length, progress milestones, a random app-instance ID, device model, iOS version, app version, country (from IP; the IP itself is not stored) | Only with your consent | To improve and balance the Game | Consent | 14 months, then deleted |
| Server logs: IP address, time, request | Whenever the Game talks to our servers | Security and keeping the service running | Legitimate interests | 30 days |
| Support messages | If you contact us | To answer you | Legitimate interests | 24 months after the conversation ends |
Notifications are scheduled on your phone itself; nothing about them is sent to us and we store no notification token.
We do not collect your precise location, contacts, photos, microphone, camera, payment details, or any advertising identifier. We do not ask for your real name.
We use your data only for the purposes above. We do not make decisions about you by automated means that have legal or similarly significant effects.
Who we share it with
We use service providers who process data only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Supabase | Accounts, save backups, leaderboard, leagues, events | European Union |
| Sentry | Crash reports (only with consent) | European Union |
| Apple | Sign in with Apple, in-app purchases, iCloud | Under Apple's privacy policy |
| Sign in with Google, if you choose it | Under Google's privacy policy | |
| Google Analytics 4 | Gameplay statistics (only with consent), as our processor, with advertising features, Google Signals and Google's data-sharing settings off | United States and other countries |
We also disclose data if the law requires it, to protect players or the service from fraud or abuse, or as part of a sale or merger of the business (in which case this policy keeps applying to your data).
Our servers are in the European Union; gameplay statistics go to Google in the United States under the EU-US Data Privacy Framework. Where data leaves the EU, the UK or Switzerland, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses (with the UK addendum), and you can ask us for a copy.
Our website
Our website uses the same Google Analytics property to count visits, only after you accept analytics cookies in the cookie banner (in the EU and UK, nothing is set before you choose). You can change your choice at any time from the link in the site's footer. The site sets no advertising cookies.
Your choices and rights
In the Game: play without an account; turn crash reports and statistics on or off in Settings; turn notifications off in the Game or in iOS Settings; reroll your leaderboard name; delete your account in Settings, which removes your account, save backups, leaderboard entries and league membership from our servers. Saves on your device and in your iCloud stay where they are until you delete them there.
If you live in Thailand, the EU, EEA, UK or Switzerland, you can ask to access, correct, delete, restrict or move your data, object to processing based on legitimate interests, and withdraw consent at any time (this does not affect processing before you withdrew). You can complain to your data protection authority (in Thailand, the Personal Data Protection Committee).
If you live in California or another US state with a privacy law, you can ask to know what personal information we hold, to correct it and to delete it, and you will not be treated differently for asking. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information. In the last 12 months we collected the categories in the table above (identifiers, commercial information about purchases, internet activity about your use of the Game) for the purposes listed there.
To use any of these rights, email contact@littleairline.com. We answer within one month (GDPR) or 45 days (CCPA), and may need to confirm the request comes from you.
Children
The Game is meant for players aged 12 and over. It has no ads, no tracking and no free-text chat, and other players see only a generated name.
The Game asks for your age once, before sign-in. If you are under 13, or under the age your country sets for agreeing to online services yourself (between 13 and 16 in the EU), the Game turns off sign-in, the leaderboard, friends leagues, crash reports and statistics, and collects no personal information from you beyond what the device needs to run the Game offline.
We do not knowingly collect personal information from children under 13 (or the local age above) without verified parental consent. If you are a parent and believe your child has given us personal information, contact contact@littleairline.com and we will delete it.
Security
Data travels encrypted, every database table only lets a player read their own rows (except the public leaderboard and a league's own standings), and only a few people at Now On Company Limited can reach the servers. No system is perfectly secure; we will tell you and the authorities about a breach where the law requires.
Changes
If we change this policy in a way that matters, we will tell you in the Game before the change takes effect, and ask again for consent where the law requires.
Contact
Now On Company Limited, 112/246 Srinakarin, Samut Prakan 10540, Thailand. Thai company registration number 0115564023284. Email: contact@littleairline.com.