Welcome to Flyte Log. We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains what information we collect, how we use it, and how we keep it secure.
Flyte Log is operated by Derek Hardiman Consulting Ltd, a company registered in Ireland ("we", "us" or "our"). Derek Hardiman Consulting Ltd is the data controller for the personal data described in this policy. You can contact us about your data at support@flytelog.io.
By using Flyte Log, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect only the information necessary to provide you with our digital logbook services.
- Personal Information: When you register, we collect identifiers such as your name and email address to create and manage your account.
- Sign in with Google or Apple: If you sign in with Google, we receive your name, email address, Google account ID and profile picture. If you sign in with Apple, we receive your Apple account ID, email address (which may be an Apple private relay address) and, the first time only, your name. We never receive your Google or Apple password.
- Flight Data: We collect the operational data you upload, such as flight times, aircraft details, routes, and crew information. This is the core data required for the Flyte Log service to function.
- Flights You Email to Us: If you send a GPX file to flights@flytelog.io, we receive the email, including your email address, the subject line and attachments, to import the flight into your logbook.
- Notification Settings: If you turn on notifications on a device, we store the delivery address your browser or device provides, so we can send you reminders.
- Subscription and Billing Information: We record your plan (free trial, monthly, annual, Lifetime or a free account), its status and key dates (such as when your trial ends or your subscription renews), and the reference IDs our payment provider gives your customer record and subscription. When you pay, our payment provider Stripe collects your payment details and billing address. We never receive or store your full card number.
- Technical Log Data: Like most web services, we collect data sent by your browser or device, including your IP address, browser type, device type, and access times, to help us monitor system performance and security.
2. How We Use Your Data
We use your data solely for legitimate business purposes related to providing the Flyte Log service:
- To provide and maintain your digital pilot logbook.
- To manage your free trial and subscription, process payments through our payment provider, and calculate VAT.
- To send you service messages about your account and subscription, such as reminders before your trial ends or an annual subscription renews, and notices if a payment fails. These are part of the Service and are not marketing. If you turn on notifications on a device, some of these reminders are also sent as push notifications.
- To communicate with you regarding your account, updates, or support requests.
- To improve our app's functionality and user experience.
Strict Privacy Commitment:
- We do NOT sell your personal data or flight records to third parties.
- We do not share your data with advertisers or marketing agencies.
- Your logbook data remains yours. We use it only to provide the Service to you.
3. Data Storage and Security
We take the security of your data seriously.
- EU Hosting: All user data we store, including your account, logbook, files and backups, is held on servers located within the European Union (EU).
- International Transfers: Some of the service providers listed in section 4 are companies based outside the EU, mainly in the United States. Where one of them can access personal data from outside the EU, the transfer is protected by appropriate safeguards, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
- Encryption: We use industry-standard encryption (SSL/TLS) to protect data in transit between your device and our servers. Data at rest is also encrypted to ensure maximum security.
4. Service Providers (Subprocessors)
We use the following companies to run the Service. Each one has access to personal data only to perform its specific task for us, and is contractually bound not to use it for any other purpose.
- Render (application hosting and database): hosts the FLYTELOG app and the database holding your account, logbook, certification and billing records. EU region.
- Cloudflare (file storage, Cloudflare R2): stores files you upload or create, such as flight photos, GPX tracks, signatures, share images and backups. EU jurisdiction.
- Resend (email): sends account and service emails such as welcome, password reset, expiry reminders and subscription notices, and receives flights you email to flights@flytelog.io. Processes your name, email address and the content of those emails.
- Stripe (payments): processes payments and manages subscriptions. You enter your payment details directly on Stripe's secure checkout pages, and you manage your subscription through Stripe's customer portal. We share your name, email address and account ID with Stripe so that payments are linked to your account. Stripe processes your payment details, billing address and transaction history to take payments, prevent fraud and meet its legal obligations, as described in Stripe's Privacy Policy.
- Google (Sign in with Google, and website analytics): verifies your identity if you choose to sign in with Google. Google Analytics measures visits to our marketing website (see section 6). Google Analytics is not used inside the FLYTELOG app.
- Apple (Sign in with Apple): verifies your identity if you choose to sign in with Apple in our iOS app.
- Pushover (internal alerts): sends us a notification when a new account is created, including the new user's name and email address.
- Browser and device push services (for example Apple, Google and Mozilla): deliver notifications to your devices if you turn them on. They receive the notification text, such as a reminder that a certificate is about to expire, but not your logbook.
If we add or replace a service provider that processes personal data, we will update this list.
Legal basis for billing data
We process subscription and billing information because it is needed to perform our contract with you (providing the Service you have signed up for), and we keep billing records because tax and accounting law requires us to.
5. Your Data Protection Rights
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
- The right to access: You can request copies of your personal data and flight logs.
- The right to rectification: You can request that we correct any information you believe is inaccurate.
- The right to erasure: You can delete your account at any time from the Settings menu, or ask us to delete it, along with all associated data ("Right to be Forgotten"). Billing records we are legally required to keep are excluded, as explained under Data Retention.
- The right to data portability: You can request a copy of your data in a structured, machine-readable format.
To exercise any of these rights, please contact us at support@flytelog.io.
6. Cookies
In the FLYTELOG app (app.flytelog.io and our mobile apps), we only use cookies that are essential for the Service to work: a session cookie that keeps you signed in, a "remember me" cookie so you stay signed in between visits, and a cookie that tells us when you are using our iOS app. Preferences such as dark mode are saved on your device. The app uses no analytics, advertising or tracking cookies.
On our marketing website (www.flytelog.io, including the blog), we use Google Analytics to understand how many people visit and which pages they read. Google Analytics sets cookies and collects information such as the pages you view, your approximate location, device and browser type, and how you arrived at the site. We use this only to improve our website, not for advertising, and we do not combine it with your FLYTELOG account.
You can block or delete cookies in your browser settings. Blocking the app's essential cookies will stop you from staying signed in.
7. Data Retention
We retain your personal data and flight logs only for as long as your account is active or as needed to provide you with our services.
- If you choose to delete your account, your data will be permanently removed from our active databases within 30 days.
- If your trial or subscription ends, your account becomes read-only and your data is kept, so you can still view and export it and pick up where you left off if you subscribe again. It is only deleted if you delete your account, or if we close the account under our Terms of Service.
- Deleting your account cancels any active subscription. Billing records (invoices, payment history and the related customer record with Stripe) are kept for as long as tax and accounting law requires, typically six years, and are used for no other purpose.
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and sending an email notification to registered users.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us: