Your privacy

On your device

Your flights and your About you details (name, airline, base, aircraft, licence) are saved in the browser on your device. So are the pilots in Crew (the ones you add, and one for each captain name in your airline files: their names, nicknames and staff numbers) and your notes about them. PilotOS cannot see any of it until you sign up or log in, which backs it up to the cloud (below). When you sign out, it stays on this device, hidden, until you log in here again.

Your photos (on a pilot's page in Crew, on a flight, and on the Photos page) are kept in your PilotOS account like your flights, so your other devices show them too, and a copy stays on each device. Only you can open them: no admin can. Reset my data can delete them, and they can come back for 14 days.

Your signature, drawn with a finger on Export Setting (under Cruise), is kept as its strokes in your logbook; each company stamp is a picture in your PilotOS account, with the company's name and dates in your logbook. They print only when you choose Signed on Export. Reset my data leaves them; Remove this stamp deletes its picture at once.

Your notes about other pilots are for you alone. They never go into the spreadsheet, the hour letter or any download.

Cloud backup Once you sign up or log in

A copy of your logbook, with the pilots in Crew and your notes about them, is kept on SV Cloud, the service that runs PilotOS, so all your devices show the same logbook.

A small cookie keeps each device logged in: for 30 days when you tick “Remember me for 30 days” or log in with Google. When you do not tick it, PilotOS logs you out once it has been closed for 2 minutes. Then you log in again.

Your account Only if you sign up

PilotOS keeps your name, your email (it is your user name), your PilotOS number and the day you signed up, and your backup email if you add one in Settings. Your password is kept only as a scrambled copy, which cannot be turned back into your password.

PilotOS emails you a 6-digit code to confirm your email, and when you forget your password. A code works for 10 minutes. A backup email gets a 6-digit code to verify it, and after that a code only when you ask for one; your main email is told when a backup email is saved. When you change your log-in email, the new one gets a code first and the old one is told. These emails go out through Resend, an email service, and carry nothing from your logbook.

To stop password guessing, PilotOS counts wrong tries for 15 minutes, by your email and by a scrambled copy of your internet address.

PilotOS admins Once you sign up or log in

PilotOS admins can open your account and your logbook to help you, to import flights for you, and to fix problems. They cannot see your password or your private notes about other pilots. PilotOS keeps a record each time an admin opens or changes something.

When an import or a save goes wrong, PilotOS notes that it went wrong and when, so an admin can help. Nothing from your file is kept.

When something breaks in the app itself, your browser sends PilotOS one short error report: what went wrong, which page, the app version, your browser and screen size, and your PilotOS number when you are logged in. No flights, names, photos or email go with it. Reports are kept for 14 days.

Log in with Google Only if you use it

PilotOS keeps a scrambled fingerprint of your Google account number, so it can find your account next time, and your Google email as your user name. It does not keep your name or your photo from Google.

Flight look-up

Look Up sends only the airline, the flight number and the date to Flightradar24, whose receivers heard the plane. It sends them from PilotOS’s server, not from your device. PilotOS keeps nothing of the answer; what you save is your own logbook entry.

Scan ACARS shows your camera and, when you tap the round button or choose a photo you took earlier, sends that one picture of the MCDU’s page (a photo you choose goes as it is, so keep the page alone in it), from PilotOS’s server, by way of PilotOS’s own relay server in one fixed place (or straight from PilotOS’s server when the relay cannot be reached), to Claude (Anthropic) for the reading only. Neither PilotOS nor its relay keeps anything of the picture or the words; what you save is your own logbook entry. PilotOS counts the pictures read, for the daily cap, not what was on them.

PilotOS counts your look-ups (for the 100 free ones) but does not keep which flights you looked up. If you use Look Up without logging in, PilotOS makes a look-up-only account for your device. It holds no logbook, only the count.

How PilotOS is used PostHog

The PilotOS web app and this website use PostHog, a product analytics service, so problems can be found and fixed. PostHog sees which pages you open, what you do there (a flight saved, a logbook exported, a picture read, a setting changed; not every tap), errors in the app and on PilotOS’s server, and a replay of your visit: your screens as you saw them.

Your crew names and your notes never reach PostHog. Before anything leaves your device, the app turns every crew name and every note into stars (∗∗∗∗), so PostHog never receives them. Your password, your PIN, email codes, your logbook files and the pictures you scan never reach PostHog either. Photos on your screen can show in a replay.

When you are logged in, PostHog knows you by your PilotOS number, your name and your email, so a problem can be traced to your account. When you log out, the app stops telling PostHog who you are. What PostHog keeps is never sold nor shared.

The only person who has access to PostHog is the app developer, Garin. I will strictly use this for debugging purposes only. I will only use this service on the web app version. I will not monitor your iOS or Android version. If you are running into an issue with the app, try using the web app version and let me know.

Fonts

The app and this website load their fonts from Google Fonts, so Google sees your device’s internet address.

This website

This website asks you for nothing. The flight demo on it runs only in your browser.

Your choices

• Export your whole logbook anytime, free.
• Sign out anytime.
• To have your account and your cloud copy deleted, write to support@pilot-os.app.