Privacy Policy

• Account: your email address, how you sign in (email link, Apple or Google), and the time you signed up.
• Profile and settings: your name as you enter it, pilot modes, home airport, time format and similar choices.
• Your logbook: flights and other entries (dates, aircraft, routes, times, landings, approaches, remarks, crew and instructor names), aircraft, people, certificates, endorsements, photos and scans you attach, and the history needed to sync your devices.
• Instructor signatures: the signature image, the instructor's name, certificate number and expiry, and the email or phone number used to send the signing code.
• Plan and purchases: your plan, when it renews or ends, and minimal purchase events from the App Store, Google Play or Stripe. We never see or store card numbers.
• Support: tickets and emails you send us.
• AI usage records: which AI feature you used, when, and what it cost us. These records contain no question text and no logbook data. If you choose "Report this answer", that question and answer are stored for review.
• Abuse protection: a keyed one-way hash of your IP address (never the address itself) to stop abuse of free plans and signing codes.

Ask your logbook, Talk to log and paper scan use OpenAI, an outside AI company. Nothing is sent to OpenAI until you choose Allow on the AI consent screen, and you can switch AI off at any time in Settings › AI features. We record when you agreed and to which version of the explanation.

• Ask your logbook: your question, plus the logbook facts the answer needs (such as dates, routes, aircraft, times, crew names or remarks).
• Talk to log: the words you said, as text. Your device turns speech into text; no audio is sent to us or to OpenAI.
• Paper scan: a photo of each logbook page you scan.

OpenAI processes this only to answer your request, may not use it to train its models, and works under a zero data retention arrangement so it keeps none of it. Our servers keep AI switched off until that arrangement is confirmed. Every number Logasaurus shows you is calculated from your logbook by our own code, not by the AI, and any change the AI suggests is saved only when you approve it.

We share data only with companies that run parts of the service for us, under contracts that limit what they can do with it:

• Supabase (database, file storage, sign-in), hosted in the United States.
• Vercel (the website).
• OpenAI (AI features, only with your consent; see section 2).
• Apple, Google and Stripe (payments), and RevenueCat (keeps your plan the same across devices).
• Resend (email) and Twilio (text messages with instructor signing codes).
• Google Drive or Dropbox, only if you connect them for monthly backups. Files go to your own account.

We don't sell your data, share it for advertising, or let anyone else use it for their own purposes. Our support team can see your logbook only after you give time-limited permission in the app, and every such view is logged. We may disclose data if the law requires it.

• Your logbook and account: until you delete them. If your plan ends, the logbook stays viewable and exportable; we don't delete it for lapsing.
• AI usage records and reported answers: 400 days.
• Purchase events: 180 days (payment records the law requires us to keep, such as receipts, are kept longer).
• Unsigned instructor signing requests (with the instructor's contact): 90 days after they expire.
• IP hashes: 30 days. Rate-limit counters: 2 days. Account deletion links: 1 hour.
• Server backups made by our hosting provider roll off on their own schedule (currently within 30 days).

• Export: Settings › Your data downloads your whole logbook as JSON, CSV or a printable PDF, on any plan, at any time.
• Correct: edit anything in your logbook or profile.
• Delete: Settings › Delete account in the app or on the web, or logasaurus.app/delete-account without the app. Deletion removes your account, logbook, signatures, files and backups we hold right away. Support tickets are kept without your name or email address. Deleting your account doesn't cancel an App Store or Google Play subscription; cancel it in the store.
• AI: turn AI features off at any time; the rest of Logasaurus works without them.
• Depending on where you live, you may have further rights (for example to know, access, correct, delete or move your data, and to object). Email us to use them; we won't treat you differently for doing so.

Data is encrypted in transit and at rest. Every pilot's data is walled off from every other pilot's in the database itself. Instructor signatures are tamper-evident: any later change to a signed entry shows the signature as no longer valid. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Logasaurus is not meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, tell us and we'll delete the account.

If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect. Questions or requests: support@logasaurus.app.