Privacy Policy

FN Aviation GmbH, Nöbauerstraße 18, 4040 Pöstlingberg, Austria — operator of Aeroboard Log and controller within the meaning of Art. 4(7) GDPR. Reach us at info@flynoble.at.

We deliberately collect as little as possible. These are the categories we process. Only your email address is required — everything else you decide to enter, and the app works without it.

• Account email, login, flight log entries and pilot profile — performance of our contract with you (Art. 6(1)(b)): without them the logbook cannot function.
• Medical validity dates — performance of our contract with you (Art. 6(1)(b)): a logbook that warns you before your medical lapses is what you came for. Two dates are not health data in the sense of Art. 9, which is exactly why we reduced the medical to them. Clear either field in the app or on the web to remove it.
• AI-assisted features (document scanning, Copilot chat, cover letters) — performance of our contract with you (Art. 6(1)(b)). The app asks for your explicit permission before the first transfer to our AI provider and you can withdraw it at any time under Profile, so nothing is sent unless you allow it.
• Crew names and other people you record in a flight — our and your legitimate interest in keeping a complete pilot logbook as required by Part-FCL (Art. 6(1)(f)). See “People you record” below for what we hold and why we cannot notify each of them individually.
• Web performance and error reports — our legitimate interest in a web app that loads and does not break (Art. 6(1)(f)). Cookie-free, no IP storage.
• Subscription handling — performance of our contract with you (Art. 6(1)(b)) and compliance with our bookkeeping duties (Art. 6(1)(c)).
• iPhone Contacts and iOS Calendar (opt-in) — your consent, given by enabling the toggle (Art. 6(1)(a)). Processed on-device only.

• Your real-time location.
• Your contacts list (unless you turn on the opt-in toggle, and even then only on-device).
• Your camera roll (we only see photos you explicitly pick).
• Microphone audio.
• Third-party advertising or tracking identifiers (IDFA, fingerprinting, etc.).

We rely on the following service providers to operate Aeroboard Log:

• Supabase (EU region) — database, authentication, storage. GDPR DPA in place.
• Vercel Inc. (United States) — hosting for the web app at log.aeroboard.ai, including its server functions and Speed Insights. Our functions currently run in the United States; transfers are covered by the EU Standard Contractual Clauses.
• RevenueCat (United States) — processes your subscription purchases. Receives your account identifier and purchase status, never your logbook content. Covered by RevenueCat's Data Processing Addendum and the EU Standard Contractual Clauses.
• Anthropic (United States) — AI inference for the Copilot chat, cover-letter generator, and document extraction. Headquartered in San Francisco; transfers are governed by the EU Standard Contractual Clauses. A Data Processing Agreement between FN Aviation GmbH and Anthropic is in place: it is automatically incorporated into Anthropic's commercial API terms, which include those Standard Contractual Clauses. What is sent:
  • Cover-letter generator: the prompt you type, the airline you name, plus your name, licence and hours summary.
  • Document extraction: the logbook page, roster, or licence/rating document you choose to scan, as a whole image — including anything else printed on it, such as the names, licence numbers or signatures of other crew. Sent to Anthropic (US) only when you start the scan. Medical certificates are never scanned: our scanner refuses them, medical details are entered manually and stay on your device, so no health data is sent to Anthropic.
  • Copilot chat: the question you type, up to 12 earlier messages of that conversation, your name, licence type, your aggregated logbook summary (totals, currency status, FTL counters), your 30 most recent flights, and up to 30 days of upcoming duties — including duties imported from the iOS calendars you selected. Crew names, free-text remarks and personal notes are not sent.
  Under Anthropic's commercial terms your inputs are not used to train their models, and request logs are retained only briefly for abuse-detection (currently up to 30 days) before deletion.
• Functional Software, Inc. (Sentry) — error reports from the web app, stored in Sentry's German data region.

Each of these providers is bound by a data-processing agreement that holds them to the same level of protection we owe you, and transfers outside the EEA run on the EU Standard Contractual Clauses. Ask us at info@flynoble.at for a copy of those safeguards.

Two further parties are not our processors but decide on their own account what they do with the data you hand them: Apple (Sign in with Apple, and the App Store purchase itself — Apple, not we, is the seller of your subscription) and Google (only if you choose “Continue with Google”). Aircraft photos shown in the app are fetched from Planespotters, which therefore sees that a request came from your device.

We do not sell, rent, or trade your data to any third party.

If you do not want any of your logbook data to be processed by Anthropic, do not use the Copilot chat or AI-assisted features — the rest of the app (logbook entries, exports, milestones, currency) runs without ever contacting an AI provider.

A pilot logbook is a record of who you flew with, so your entries contain other people: the crew on a flight, an examiner who signs a check, and anyone you save to your crew list. For them we may hold a name, a crew code, employer and position, and — only if you enter it — an email address, phone number, note or photo. An examiner endorsement holds their name, certificate number and signature. These entries are kept because Part-FCL requires a complete logbook (Art. 6(1)(f)), stay inside your private logbook, and are deleted when you delete them or your account.

If you scan a document, whatever is printed on it goes to our AI provider with it, which can include other crew members' names and signatures.

We cannot write to these people individually: we do not know which of them you recorded, we never use their data for our own purposes, and contacting them would mean reading your logbook to find them — disproportionate effort within the meaning of Art. 14(5)(b). This section is the information they are owed. Anyone who believes we hold data about them can write to info@flynoble.at.

Your iPhone contacts are the exception that never leaves: matching happens on your device and we never receive them.

If you are in the EU/EEA, you have the right to:

• Request a copy of your personal data (Article 15).
• Correct inaccurate data (Article 16) — you can do this yourself in the app.
• Delete your account and all associated data (Article 17). You can do this yourself in the iOS app under Profile, then Account, then “Delete account” — or by email.
• Restrict processing (Article 18).
• Object to processing based on our legitimate interest (Article 21) — see below.
• Receive your data in a portable format (Article 20) — use the Export hub.
• Lodge a complaint with a data-protection authority. Ours is the Austrian Datenschutzbehörde, dsb.gv.at.

Email info@flynoble.at to exercise any of these rights. We respond within one month.

We do not make any decision about you by automated means alone, and we do not profile you (Art. 22).

Where we rely on our legitimate interest — the crew and examiner entries in your logbook, and the web performance and error reports — you can object at any time, for reasons arising from your particular situation. Write to info@flynoble.at and we stop that processing unless we can show compelling legitimate grounds that override your interests.

Where we asked for your consent, you can take it back without giving a reason:

• AI features — Profile, then “AI features”. Switch it off and nothing more is sent to our AI provider.
• iPhone contacts — the toggle on the Crew screen, or iOS Settings.
• iOS calendars — disconnect the calendar under Import, or iOS Settings.
• Medical dates — clear the fields under Medical, in the app or on the web.

Withdrawing does not affect what was processed while the consent was valid. Deleting your account withdraws all of it at once.

We keep your logbook data as long as your account exists. When you delete your account, all account-bound database rows are removed immediately, and any associated files are deleted; routine encrypted backups that still contain your data are rotated out within 30 days, after which no copy remains.

Aggregated, non-identifying usage counts (e.g. “number of flights imported per day”) may be retained for product analytics.

All traffic to Supabase and Vercel runs over TLS. Database access uses Row-Level Security so a row tied to user A cannot be queried by user B. Magic-link tokens expire in 1 hour. Apple Sign-In tokens are verified against Apple's JWKS.

Aeroboard Log is intended for licensed pilots and student pilots aged 16+. We do not knowingly collect data from anyone under that age.

When we change this policy meaningfully — e.g. add a new sub-processor or a new data category — we update the “Last updated” date and notify active accounts via email. Where a change needs your consent, we ask you again; we never treat your continued use as consent.