Privacy Policy

AeroLog ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under applicable law, including the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is the operator of AeroLog. For questions or requests, please contact us at support@aerolog.live.

2. Data We Collect

When you use AeroLog, we collect the following data:

• Account data: email address, display name, and a unique pilot ID created at registration.
• Profile data: role (commercial pilot or student), airline or flight school, base airport, type rating, and profile photo (optional).
• Flight data: flight entries you create, including departure/arrival airports, dates, block times, and aircraft type.
• Location data: your current location is stored in Firestore only if you actively log a flight with a departure airport. No background location tracking occurs.
• Usage data: Firebase Analytics may collect anonymized usage statistics (e.g., screen views, session duration).

3. How We Use Your Data

• To provide and operate the AeroLog service.
• To display your profile and flight information to crew members you connect with.
• To show live flight positions on the Crew Map (only for flights you actively log).
• To send transactional emails (e.g., email verification, password reset) via our email service provider.
• To improve the app through anonymized analytics.

4. Legal Basis (GDPR)

We process your data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR): account data and flight data are necessary to deliver the service.
• Legitimate interests (Art. 6(1)(f) GDPR): anonymized analytics to improve the app.
• Consent (Art. 6(1)(a) GDPR): optional profile photo upload.

5. Data Sharing

We do not sell your personal data. Data may be shared with the following service providers under data processing agreements:

• Google Firebase (Firestore, Auth, Storage, Analytics) – hosted in the EU/EEA where possible.
• Email provider – for transactional emails only.

6. Data Retention

Your data is retained for as long as your account is active. You may delete your account at any time by contacting us at support@aerolog.live. Upon deletion, all personal data is removed within 30 days.

7. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at support@aerolog.live.

8. Cookies

The AeroLog mobile app does not use cookies. The website (aerolog.live) may use essential cookies for Firebase Hosting functionality only. No tracking or advertising cookies are used.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of AeroLog after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions: support@aerolog.live