Privacy Notice

1. Who we are

AeroNote ("AeroNote", "we", "us", or "our") is the data controller responsible for the personal data described in this Privacy Notice. This notice explains what personal data we collect, how we use it, and the rights you have in relation to it.

2. Categories of personal data we collect

• Name
• Email address
• Login credentials (including hashed passwords and authentication tokens)
• Flight logs and job entries you create in the app
• Gear and equipment serial numbers stored in your Equipment Vault
• Location and address data associated with logged jobs

3. Purposes of processing

We process your personal data to: provide and maintain the AeroNote service, authenticate your account, generate and export your flight logs, provide customer support, process payments and subscriptions, improve our product, and comply with legal obligations such as record-keeping requirements for Part 107 pilots.

4. Legal basis for processing

We rely on the following legal bases: performance of a contract (to provide the service you signed up for), legitimate interests (to improve and secure our product), consent (for optional communications and non-essential cookies), and compliance with legal obligations (such as tax and accounting requirements).

5. Sharing your data

We share limited personal data with a small number of service providers who help us operate AeroNote, and only to the extent they need it to perform that service. For payments and subscription management we use Paddle.com Market Limited, which acts as the Merchant of Record for all purchases made through AeroNote; Paddle processes your payment details, billing information, and related data to complete transactions, handle taxes, and answer billing inquiries. Card numbers never reach AeroNote's systems. We also use a cloud database and hosting provider to store and serve your data, and an AI provider to interpret your chat messages (see section 6).

We do not sell your personal data, we do not share it with advertisers or data brokers, and we do not disclose your flight logs, client records, or equipment details to anyone other than the providers described above — except where we are legally required to do so, or where you ask us to.

6. Artificial intelligence

When you describe a flight in the chat, the text of that conversation — along with the profile, equipment, and client details needed to complete the entry — is sent to our AI provider so it can produce the log. If you use voice input or spoken replies, the relevant audio is processed the same way.

This processing happens under commercial API terms that prohibit the provider from using your content to train or improve their models. We do not use your logs, chats, or client information to train any AI model of our own, and we do not use them to build datasets or benchmarks.

7. Data retention

We retain your personal data for as long as your account is active or as needed to provide you the service. We may retain certain data for longer periods where required by law (for example, tax and accounting records) or to resolve disputes. You may delete your account and its associated data at any time from the Settings page, subject to legal retention requirements.

8. Your rights and control

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You can exercise most of these rights yourself inside the app: view and edit every log you've created, export your full logbook to PDF or CSV at any time, and permanently delete your account and its data from Settings.

For anything else, contact us at aero-note@outlook.com. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We implement technical and organizational measures designed to protect your personal data against unauthorized access, loss, misuse, or alteration:

• All traffic between your device and AeroNote is encrypted in transit with HTTPS/TLS, and data is encrypted at rest by our cloud database provider.
• Every record — logs, clients, equipment, messages, subscriptions — carries a row-level security policy tied to your account, so the database itself refuses to return another pilot's data, even if application code were to ask for it.
• Passwords are never stored in readable form; they are hashed by our authentication provider. Sign-in with Google or Apple never exposes your password to us.
• Privileged operations run on the server behind an authenticated session check, and payment webhooks are signature-verified before anything is written.

A fuller breakdown is on our Security page. No system can be guaranteed perfectly secure, but if we ever become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.

10. Cookies

AeroNote uses essential cookies and local browser storage to keep you signed in and to operate core functionality. We do not use advertising cookies or third-party tracking pixels. You can control cookies through your browser settings, though signing in will not work without the essential ones.

11. Contact

If you have questions about this Privacy Notice or how we handle your data, email us at aero-note@outlook.com.