Privacy Policy

1. Data Controller

AeroLog Pro Track is the data controller of your personal data. You can contact us at support@aerolog.app for any matter related to the protection of your personal data.

2. Data We Collect

We process the following categories of personal data:

• Account data: name, email and password (managed by the authentication platform).
• Professional data: full name, EASA license number, license categories, type ratings, employee number, phone and license expiry date.
• Experience data: date, registration, location, aircraft and engine type, ATA chapter, task description, license category, activity type and time spent.
• Documents: copies of training certificates (HF, EWIS, FTS), licenses and type courses uploaded by the user.
• Payment data: handled exclusively by Stripe; we do not store card details.
• Usage data: anonymous analytics events to improve the application.

3. Legal Basis for Processing

We process your personal data under the following GDPR (Regulation (EU) 2016/679) legal bases:

• Performance of a contract (Art. 6.1.b): data necessary to provide the experience logbook service and generate reports.
• Consent (Art. 6.1.a): documents and photos attached voluntarily, and LinkedIn publications.
• Legitimate interest (Art. 6.1.f): anonymous analytics events to improve application security and usability.

4. Purpose of Processing

Your data is used to: record and manage your professional maintenance experience, calculate EASA recency per aircraft type, track FAA Part 65 compliance, generate audit-ready PDF and Excel reports, manage training certificates and documents, process subscriptions via Stripe, and allow sharing your profile with authorized companies.

5. Data Recipients

Your data is not sold or transferred to third parties. The following recipients may access your data depending on the features you use:

• Stripe: payment processing (name, email, subscription data).
• Authorized companies: only if you actively share your profile using the sharing feature.
• Base44 platform: hosting infrastructure, authentication and database.

6. International Transfers

Data is processed on servers located in the European Union. Stripe may process data in the USA under standard contractual clauses approved by the European Commission.

7. Data Retention

We retain your data while your account remains active. You can request deletion at any time from the "Delete my data" section in your profile. Stripe billing data is retained according to applicable legal periods.

8. Your Rights

As a data subject, you have the right to:

• Access (Art. 15): know what data we hold about you.
• Rectification (Art. 16): correct inaccurate data.
• Erasure (Art. 17): delete your data ("right to be forgotten").
• Portability (Art. 20): receive your data in a structured format.
• Objection (Art. 21): object to processing based on legitimate interest.
• Restriction (Art. 18): temporarily restrict processing.
• Withdraw consent (Art. 7.3): at any time, without affecting the lawfulness of prior processing.

You can exercise these rights directly from the application (data export and deletion in your profile) or by writing to support@aerolog.app. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Security Measures

We apply appropriate technical and organizational measures: encryption in transit (TLS), per-user data isolation (RLS), restricted access and auditing. Uploaded documents are stored in private storage with signed-URL access.

10. Minors

AeroLog Pro Track is not directed at individuals under 16 and does not knowingly collect data from minors.

11. Changes to This Policy

We may update this privacy policy. We will notify significant changes through the application or by email.