Privacy Policy

1. Controller

The controller responsible for data processing within the meaning of the EU General Data Protection Regulation (GDPR) is:

2. Use without an account

You can use the app without creating an account. In this case, all logbook entries, aircraft, crew members, rosters, settings and attachments are stored exclusively in a local database on your device. We have no access to this data. It is deleted when you uninstall the app.

3. Optional cloud sync

If you activate the sync function, you need to create an account. The following data is then processed on our servers:

• Account data: email address and password (stored only in hashed form).
• Logbook data: the content of your logbook, e.g. flights, times, airports, aircraft types and registrations, licences, roster entries and settings.
• Names of other persons you enter, e.g. crew members (PIC, SIC, cabin crew).
• Attachments such as photos or documents you upload.
• Technical data required for operation, e.g. IP address and timestamps in server logs.

Purpose: providing the sync between your devices and a backup of your data. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

The data is hosted by Supabase Inc. (970 Toa Payoh North #07-04, Singapore 318992) on servers of Amazon Web Services located in Paris, France (EU). Supabase acts as our processor under a data processing agreement.

If you enter names of other persons, please make sure you are allowed to do so. These names are used solely for your personal logbook.

4. Roster import

When you import a duty roster as a PDF file, the file is sent to a cloud function operated on Google Cloud (Firebase, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to convert it into calendar entries. The file is processed only for this purpose and is not stored permanently. Rosters imported as ICS files are processed locally on your device.

5. Maps

The app displays flight routes and airports on maps provided by Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). To load the map, your device connects to Google servers, which transmits your IP address and the displayed map area. We do not transmit your logbook data to Google. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in providing map functionality). Further information: Google Privacy Policy.

6. Purchases and subscriptions

Purchases are processed exclusively by Apple (App Store) or Google (Google Play). We do not receive any payment data. We only receive the information whether a purchase or subscription is active.

7. No analytics or tracking

We do not use analytics tools, tracking or profiling, and we do not sell or share your data for marketing purposes.

8. Data retention and deletion

Local data remains on your device until you delete it or uninstall the app. Data stored for sync is kept as long as your account exists. You can delete your account and all associated data at any time directly in the app under "Settings › Critival actions › Delete account or by email to stevedexter58@gmail.com. Your data is then deleted from our servers within 30 days.

9. Data transfers outside the EU

Some of the service providers mentioned above are part of groups based in the USA or Singapore. Where personal data may be transferred to third countries, this is done on the basis of an adequacy decision of the European Commission (e.g. EU-U.S. Data Privacy Framework) or the EU Standard Contractual Clauses.

10. Your rights

Under the GDPR you have the right to:

• access your personal data (Art. 15),
• rectification (Art. 16) and erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw consent at any time with effect for the future (Art. 7(3)),
• lodge a complaint with a data protection supervisory authority (Art. 77).

To exercise your rights, contact us at stevedexter58@gmail.com.

11. Children

The app is intended for pilots and aviation professionals and is not directed at children under 16. We do not knowingly collect data from children.

12. Changes to this policy

We may update this privacy policy when the app or legal requirements change. The current version is always available at this address.