FlightLog — Privacy Policy
In short
FlightLog keeps your flights on your phone. Where you are stays on your phone too: we never store your position, and we cannot read it. Whatever you keep in the cloud is encrypted on your phone before it leaves, with a key only you hold — we cannot read that either.
Signing in needs an email address and nothing else — no password, no name, no payment details. There is no advertising, no analytics and no tracking, and we do not sell data. FlightLog is built to meet the EU's General Data Protection Regulation (GDPR); the same applies under the UK GDPR and Switzerland's data protection act. This policy says what leaves your phone, when, and where it goes.
Who is responsible
FlightLog is published by KrimSoft, a trade name of Omnimation BV, the Netherlands, which is the controller for the data described here. KrimSoft runs FlightLog's data service on Cloudflare: it holds accounts and their licences, passes on airspace, reporting points, NOTAMs, weather, maps and live traffic, and keeps the encrypted cloud copies.
Your club's GlidingApp link runs through a service your club manages. For what happens there, and in the club's GlidingApp administration, your club is responsible.
Your position
• FlightLog uses your position on your phone: to show it on the map, to record a flight's track, and to notice a takeoff and a landing.
• By default it follows your position only while the app is open, or during a flight you set up with Go fly, until shortly after the landing. Automatic flight detection, which follows your position in the background to log a flight without Go fly, is off unless you switch it on — always, in Settings, or for one visit to an airfield when the app asks you there. A visit ends by itself once you leave the field.
• Your position is never stored by us and never sent to us as it is. Where a feature needs to know roughly where you are, only a coarse square of about 50 km goes to the data service — for live traffic and for the NOTAMs around you — or the map tiles of the area on screen. These requests are answered and forgotten: the data service keeps no logs of them, and nothing in it ties them to you.
• When you look up the places along a planned route, the route's points go to the data service, which answers and keeps nothing.
• You can withdraw location access at any time in the phone's settings. FlightLog then cannot show your position or detect flights.
What stays on your phone
• Your flights, routes, aircraft and their documents, pilot papers, the club's fleet and members, hour meter readings and your settings.
• Air pressure from the phone's barometer, for the altitude of a flight.
• Photos you take of an hour meter, a logbook page or a document.
• The club access code, your GlidingApp link and your recovery code, in the phone's secure storage.
What leaves your phone, and where it goes
• Signing in: your email address goes to the data service, which mails you a six-digit code through Resend. The address, the model name of the device you signed in on, your plan and when you last used the app are kept; the code never is, only what it hashes to. We can see these account details, to look after licences. They hold no location and no IP address.
• The cloud copy: flights, routes and backups are encrypted on your phone (AES-256-GCM) with a key made from your recovery code, and kept in the data service (Cloudflare R2). The key never leaves your phone; without it nobody — not us, not Cloudflare — can read them. They are filed under a one-way hash, not under your name. You can erase the whole copy from the app.
• Live traffic: the coarse square around you goes to the data service, which listens to the Open Glider Network and other receivers for the aircraft in it. ADS-B traffic is fetched by your phone from adsb.lol for the area around it. For an aircraft you tap, its call sign and the coarse square go to the data service, which asks adsb.im for its route.
• Reading photos and documents: a photo of an hour meter or a logbook page, or the pages of a document you choose to have read, go through the data service to Anthropic (Claude), which reads them and returns the result. The data service keeps none of it. Photos are sent without their location data.
• Feedback: your message, with your name and email address if you give them, the app's version and any files you choose to attach, are mailed through the data service and Resend to the app's maker. When you send a flight, its files carry no position, track or place unless you switch that on — the app shows you which files go.
• Weather, NOTAMs, airspace and maps: airfield codes to aviationweather.gov (NOAA); KNMI's observations, airspace, reporting points and NOTAMs through the data service, by country, airfield or coarse square; map, chart, terrain and satellite tiles of the area shown, from the data service and from the chart and image providers (Neway Data, EOX, PDOK, Digitaal Vlaanderen, SPW Wallonia, Geobasis NRW, Apple). Text you type into the map search goes to Apple (iPhone) or to the phone's search service (Android).
Every service contacted sees your phone's IP address, as with any internet connection. The data service does not store it; it is used only for an hour to limit abuse. Each provider's own privacy policy applies to what it receives.
Processors and transfers
We use Cloudflare (hosting and storage), Resend (email) and Anthropic (reading photos and documents) as processors. Some of them are in the United States; transfers are covered by the EU–US Data Privacy Framework or the EU's standard contractual clauses.
Files you share
Backup files, flight exports, aircraft profiles and daily cards go only where you save or send them. A backup file is not encrypted: keep it somewhere private.
How long
Data on your phone stays until you delete it or remove the app. The cloud copy stays until you erase it. Your account stays while you use it; an account unused for a long time is warned by email before it and anything belonging to it is cleared away. Feedback is kept as long as needed to deal with it.
Your rights
Under the GDPR you have the right to access, correct and erase personal data about you, to restrict or object to its processing, and to receive it in a usable form. Most of it is on your phone, where you control it yourself; the cloud copy you can erase from the app, and a backup file gives you all of it. To see or erase your account, or feedback you sent, contact us. For data held by your club's service or gliding.app, contact your club. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or with the authority where you live.
Young pilots
FlightLog is meant for pilots and student pilots. If you are under 16, ask a parent or guardian before you use the features that send information from your phone.
Changes and contact
When this policy changes, the app asks you to accept the new version. Questions about privacy can be sent to us from the app, under Settings → Help → Feedback & suggestions.