Workflow & Automation · usegander.comGander
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: Privacy and data use
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Provides specific contact information including an email address and physical address for privacy-related questions or requests, and introduces an appendix for app store privacy disclosures, establishing the procedure for contacting the platform regarding privacy matters.
Prohibits sale of personal information, sharing for cross-context behavioral advertising, use of third-party advertising SDKs in the mobile app, and requesting Apple's App Tracking Transparency permission — all user-favorable restrictions on commercial data use and tracking.
States that data may be transferred to countries with different privacy laws and that where required the platform relies on approved transfer mechanisms and implements additional safeguards, imposing an obligation to use appropriate legal bases for cross-border transfers.
How to read this page: Overall risk rates what Gander's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 52 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 52 citationspdf textLast captured 2026-08-21
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Permits sharing of personal data in the context of business transfers such as mergers or acquisitions, subject to safeguards and notice where required.
" Business transfers (e.g., merger, acquisition) with safeguards and notice where required."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Questions or requests? Email privacy@usegander.com or write to: Yannick Muller, 39 Wooster St Floor #3, 10014 New York, United States . Appendix A — App Store Connect “Privacy Nutrition Label” Worksheet (iOS) Use this section to complete App Store Connect. Disclose data collected by you and your SDK partners . If a data type is collected only for optional, infrequent features, evaluate Apple’s Optional Disclosure criteria; otherwise disclose it."
Provides specific contact information including an email address and physical address for privacy-related questions or requests, and introduces an appendix for app store privacy disclosures, establishing the procedure for contacting the platform regarding privacy matters.
AI-generated interpretation, not legal advice.
" No Third‑Party Ads / No Cross‑App Tracking. We do not sell personal information, do not share it for cross‑context behavioral advertising, and do not use third‑party advertising SDKs in the mobile app. We also do not request Apple’s App Tracking Transparency (IDFA) permission."
Prohibits sale of personal information, sharing for cross-context behavioral advertising, use of third-party advertising SDKs in the mobile app, and requesting Apple's App Tracking Transparency permission — all user-favorable restrictions on commercial data use and tracking.
AI-generated interpretation, not legal advice.
" We collect these only where necessary for aviation safety/compliance and at your or your operator’s direction."
Restricts collection of sensitive data (health indicators and weight) to cases where necessary for aviation safety and compliance and only at the direction of the user or their operator, limiting the permissible scope of such collection.
AI-generated interpretation, not legal advice.
" The Services are not directed to children and are intended for professional aviation operations. We do not knowingly collect personal data from children under 16 (or the relevant age of consent). If you believe a child has provided data, contact us and we will take appropriate steps."
Prohibits the platform from knowingly collecting personal data from children under 16 or the applicable age of consent, and commits to remedial steps upon discovery, which is protective of minors.
AI-generated interpretation, not legal advice.
" Not collected: Contacts (address book), Browsing History (outside of our app), Advertising Data, Environment Scanning, Body (hands/head). Tracking: We do not link data with third‑party data for targeted advertising or share with data brokers. We do not request ATT/IDFA."
Enumerates data categories that are not collected (contacts, browsing history, advertising data, environment scanning, body data) and explicitly states the platform does not link data with third-party data for targeted advertising, does not share with data brokers, and does not request advertising tracking authorization — all of which are protective restrictions prohibiting those data practices.
AI-generated interpretation, not legal advice.
" Optional forms (feedback, surveys) may be “optional disclosure” only if all Apple criteria are met."
Creates a conditional exception allowing optional forms to be classified as 'optional disclosure' only if all applicable platform criteria are met, limiting the scope of mandatory data collection disclosures.
AI-generated interpretation, not legal advice.
" SDK telemetry: vendors like Mapbox and Sentry may generate telemetry strictly to provide their services (see Section 7)."
Restricts SDK telemetry generated by named vendors strictly to providing their respective services, limiting the scope of permissible data use by those third-party providers — user-favorable restriction on vendor data use.
AI-generated interpretation, not legal advice.
" We may transfer data to countries with different privacy laws (e.g., to the United States). Where required, we rely on approved transfer mechanisms (e.g., EU Standard Contractual Clauses) and implement additional safeguards."
States that data may be transferred to countries with different privacy laws and that where required the platform relies on approved transfer mechanisms and implements additional safeguards, imposing an obligation to use appropriate legal bases for cross-border transfers.
AI-generated interpretation, not legal advice.
" Gander offers a Data Protection Addendum (DPA) incorporating SCCs for international transfers and sub‑processor commitments. Contact privacy@[your-domain].com to request the DPA."
Describes the procedure by which a Data Protection Addendum incorporating standard contractual clauses for international transfers and sub-processor commitments can be obtained, directing users to contact a specified email address to request the DPA.
AI-generated interpretation, not legal advice.
" Legal/compliance: audit logging, export control, tax/financial recordkeeping, regulatory and safety obligations."
Establishes an obligation to use personal data for legal and compliance purposes including audit logging, export control, tax and financial recordkeeping, and regulatory and safety obligations.
AI-generated interpretation, not legal advice.
" Controller: Gander Technologies Inc. (“Gander”, “we”, “us”)."
Defines the legal entity acting as data controller ('Gander Technologies Inc.') and establishes the party responsible for data processing decisions under this policy.
AI-generated interpretation, not legal advice.
" If your employer/aircraft operator configured your account, we may also process some data as a processor on their behalf. See Section 2 ."
Cross-references Section 2 to explain that where an employer or aircraft operator configured the account, Gander may also act as a processor on that operator's behalf, directing readers to the relevant section for further detail.
AI-generated interpretation, not legal advice.
" Health-related indicators in FRAT/fatigue risk assessments."
Identifies health-related indicators within FRAT and fatigue risk assessments as a specific type of sensitive data collected, defining the scope of this sensitive category.
AI-generated interpretation, not legal advice.
" Controller: We act as a controller for account data, app configuration, product analytics, support communications, and platform security."
Defines the scope of Gander's controller role, listing the categories of data (account data, app configuration, product analytics, support communications, platform security) for which Gander independently determines purposes and means of processing.
AI-generated interpretation, not legal advice.
" Processor: For data entered by an operator (e.g., crew, passenger, trip, flight, and billing records), we act as a processor and process that data only according to the operator’s instructions and applicable contracts. Operators remain responsible for providing any required notice to their crew/passengers."
Defines Gander's processor role for operator-entered data (crew, passenger, trip, flight, billing records), restricting Gander to processing only on operator instructions and placing responsibility on operators to provide required notices to crew and passengers.
AI-generated interpretation, not legal advice.
" Name (first/last), email address , phone number , physical address , emergency contacts (crew & passengers)."
Lists specific contact information data elements collected (name, email, phone, physical address, emergency contacts for crew and passengers), defining the scope of this data category.
AI-generated interpretation, not legal advice.
" Crash data , performance metrics , and debug/telemetry (e.g., from Sentry) to improve reliability."
Defines diagnostics data collected (crash data, performance metrics, debug and telemetry) and states the purpose of improving reliability, identifying a named vendor involved in this processing.
AI-generated interpretation, not legal advice.
" Precise location (foreground and, if enabled, background) to support features like flight tracking, duty logging, navigation, and map views (Mapbox/ForeFlight integrations). iOS permissions requested: When In Use and optionally Always ."
Defines the precise location data collected (foreground and optional background), states the purposes for which it is used (flight tracking, duty logging, navigation, map views), identifies integrated third-party services, and specifies the iOS permission levels requested.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Gander's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Gander's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Gander's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Gander requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Gander's published policies yet.
What the policies actually cover
0 topicsNone of Gander's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Cross-clause notes
Verified retention clauses point in different directions: the Privacy Policy, § 9 (Data retention) describes broad or open-ended retention, while the Privacy Policy, Privacy Policy › “24 months” describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause permits sale of personal data or information.
“No Third‑Party Ads / No Cross‑App Tracking. We do not sell personal information, do not share it for cross‑context behavioral advertising, and do not use third‑party advertising SDKs in the mobile app. We also do not request Apple’s App Tracking Transparency (IDFA) permission.”Open source citation
The clause permits sale of personal data or information.
“**No Third‑Party Ads / No Cross‑App Tracking.** We do **not** sell personal information, do **not** share it for cross‑context behavioral advertising, and do **not** use third‑party advertising SDKs in the mobile app. We also do **not** request Apple’s App Tracking Transparency (IDFA) permission.”Open source citation
The clause permits sale of personal data or information.
“We do **not** sell personal information.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We collect data that you provide, data generated by your use of the Services, and limited data from third parties (e.g., aviation data providers). The examples below are representative and may evolve with product features.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“Questions or requests? Email privacy@usegander.com or write to: Yannick Muller, 39 Wooster St Floor #3, 10014 New York, United States . Appendix A — App Store Connect “Privacy Nutrition Label” Worksheet (iOS) Use this section to complete App Store Connect. Disclose data collected by you and your SDK partners . If a data type is collected only for optional, infrequent features, evaluate Apple’s Optional Disclosure ...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | privacy data use | worsens | HIGH | 6 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on privacy data use
“We collect data that you provide, data generated by your use of the Services, and limited data from third parties (e.g., aviation data providers). The examples below are representative and may evolve with product features.”Open timeline citation
Latest stance: sale or sell on privacy data use
“**No Third‑Party Ads / No Cross‑App Tracking.** We do **not** sell personal information, do **not** share it for cross‑context behavioral advertising, and do **not** use third‑party advertising SDKs in the mobile app. We also do **not** request Apple’s App Tracking Transparency (IDFA) permission.”Open timeline citation
Latest stance: sale or sell on privacy data use
“We do **not** sell personal information.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“We collect data that you provide, data generated by your use of the Services, and limited data from third parties (e.g., aviation data providers). The examples below are representative and may evolve with product features.”Open timeline citation
Latest stance: sale or sell on privacy data use
“No Third‑Party Ads / No Cross‑App Tracking. We do not sell personal information, do not share it for cross‑context behavioral advertising, and do not use third‑party advertising SDKs in the mobile app. We also do not request Apple’s App Tracking Transparency (IDFA) permission.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Questions or requests? Email privacy@usegander.com or write to: Yannick Muller, 39 Wooster St Floor #3, 10014 New York, United States . Appendix A — App Store Connect “Privacy Nutrition Label” Worksheet (iOS) Use this section to complete App Store Connect. Disclose data collected by you and your SDK partners . If a data type is collected only for optional, infrequent features, evaluate Apple’s Optional Disclosure criteria; otherwise disclose it.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-21· verified 2026-08-21
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
88 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Gander's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Gander's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Gander's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.