Legal

Privacy Policy

Last updated April 19, 2026

Your flight data is yours. This policy describes what AeroLog collects, why, and what we do — and don't do — with it.

1. What we collect

Account data

  • Email address, display name, profile photo (if provided).
  • Certificate level and endorsements you enter during onboarding.
  • Authentication identifier (Firebase UID).

Logbook data

  • Flights, aircraft, currency settings, files you upload, scheduled events, messages you send within AeroLog.

Device data

  • Browser type, coarse location (country-level from IP), and referrer — used only to keep the service running and debug issues.

Payment data

  • We do not store card numbers. PayPal processes payments and returns only a subscription reference.

2. What we do with it

  • Operate the Service — sync your logbook, render your dashboard, send verification emails.
  • Enforce plan limits and process subscription events.
  • Respond to support requests.
  • Detect abuse (e.g. impossibly rapid account creation).

3. What we don't do

  • We don't sell your data to anyone.
  • We don't train third-party AI models on your logbook.
  • We don't share your flights with advertisers or data brokers.
  • We don't read your messages or file contents except when you specifically ask support to.

4. Third-party services

We use these providers to run AeroLog. Each receives only the data needed for its function. A current list lives on our subprocessors page.

  • Google Firebase (Google LLC, US) — authentication, database, file storage.
  • Vercel (Vercel Inc., US) — web hosting.
  • PayPal (PayPal Inc., US) — subscription billing. PayPal is the PCI-DSS processor; we never see your card number.
  • Plausible Analytics (Plausible Insights OÜ, EU) — cookie-less, privacy-friendly page-view analytics. No personal identifiers are collected.
  • aviationweather.gov (US NOAA/NWS) — METAR, TAF, and NOTAM lookups. Only airport identifiers are sent.
  • adsb.lol (community ADS-B aggregator) — live flight positions near your location. Only coordinates are sent.
  • Pollinations.ai — backs the optional FAR/AIM study chat. Only the question text and prior turns are sent; your account identity is not.

5. Data retention

  • Active accounts — we keep your data as long as your account exists.
  • Canceled accounts — your logbook remains exportable for 30 days, then is deleted from production systems. Backup snapshots roll off within 90 days.
  • Support emails — retained for 2 years.

6. Your rights

You can, at any time:

  • Export your logbook as CSV or PDF from the Logbook page.
  • Edit or delete entries directly in the app.
  • Request full account deletion by emailing team@aerolog.us — we'll confirm within 7 days.

Residents of the EU, UK, and California: you have additional rights under GDPR and CCPA/CPRA, including access, rectification, erasure, portability, and objection. Contact us to exercise them — no fee, no account restriction for doing so.

California "Do Not Sell or Share" notice: AeroLog does not sell your personal information, and we do not share it for cross-context behavioral advertising. There is nothing to opt out of because we don't do it in the first place. See our Your Privacy Choices page for details.

7. Children

AeroLog is not directed to children under 13. If you believe a child has created an account, contact us and we'll remove it.

8. International transfers

AeroLog is operated from the United States. By using the Service, you consent to the transfer of your data to the US and its processing there.

9. Changes

Material changes to this policy will be announced in-app at least 14 days before they take effect.

10. Contact

Privacy questions: team@aerolog.us.