Privacy policy

This explains what personal data Aerolo keeps and why. The controller is Oleksandr Puriha, Wintrova 782/1, 762 00 Brno, Czech Republic. Questions and requests: hello@aerolo.date.

What we keep

• Account: your email, name, home airfield and a password stored only as a hash.
• Logbook: the flights and simulator sessions you enter, your opening balance and, when you use signing links, the name and licence number an instructor types to sign, with the time, IP address and browser of the signer.
• Currency: the documents you add (for example medical, licence and rating titles, classes and dates). We keep the dates and labels you type, not copies of the documents.
• Aircraft: the aircraft, maintenance items, work orders and fuel entries you add, with the costs and prices you type.
• Study cards and the airfields you follow in Weather and NOTAM.
• Plan: whether you have a paid plan, its status and dates. Card details are handled by Lemon Squeezy and never reach us.
• Technical data: standard server logs (such as IP address and time) kept by our providers for security and fixing faults.

Why, and on what basis

• To provide the service you asked for (contract).
• To take and manage payments, and keep accounting records (contract and legal duty).
• To keep the service secure and working (legitimate interest).

We do not sell your data and do not use it for advertising.

Who else handles it

• Supabase: database and sign-in. Our project is hosted in the EU (Frankfurt).
• Resend: sends the emails of your account (confirmation and password reset) to your email address. Cloudflare Email Routing receives the messages you send to our contact address.
• Lemon Squeezy: payments, invoices and VAT, as the seller of record and an independent controller of payment data.
• Weather requests go to aviationweather.gov, and NOTAM requests to the FAA NOTAM Management System, through our server. They contain an airport code, not your personal data.
• Cloudflare hosts the website and delivers it to your browser, and handles the domain.

Some providers may process data outside the EU. Where they do, they rely on safeguards such as the EU Standard Contractual Clauses.

How long

Your data stays while your account exists. When you delete your account we delete your logbook and other content. Payment and accounting records are kept as long as the law requires.

Your rights

You can ask to see, correct, export or delete your data, to restrict or object to its use, and you can download all of your data yourself at any time (Settings, Your data). Write to us and we will answer within one month. You can also complain to the Czech data protection authority (Úřad pro ochranu osobních údajů, uoou.gov.cz) or the authority in your country.

Cookies

We use what is needed to keep you signed in. If you accept, we also use Google Analytics to count visits and see which pages are useful; it is not loaded until you accept, and you can decline. We do not use advertising cookies.