1. Introduction

ENY Pilot Tools ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our flight logbook and pay audit application (the "Service") available at enycrewtools.com and related domains.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account or use our Service, we may collect:

• Account Information: Email address, password, first name, last name, display name
• Profile Information: Phone number, home airport (ICAO code), default airline, default role (PIC/SIC)
• Flight Data: Flight numbers, dates, airports, aircraft information, flight times, notes
• Communications: Messages you send to us, feedback, and support requests

2.2 Automatically Collected Information

We automatically collect certain information when you use our Service:

• Usage Data: How you interact with our Service, features accessed, time spent
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Server logs, error reports, system activity
• Authentication Data: Firebase authentication tokens and session information

2.3 Third-Party Data Sources

We may collect flight information from external aviation data providers:

• FlightAware AeroAPI: Aircraft registration, scheduled/actual flight times, airport data

3. How We Use Your Information

3.1 Service Provision

• Create and manage your flight data for the purpose of export to use with your preferred logbook program
• Process and import flight data from various sources
• Provide flight data lookups and verification
• Generate reports and analytics
• Enable data export functionality

3.2 Service Improvement

• Optimize performance and user experience

3.3 Communication

• Send service-related notifications
• Respond to your inquiries and provide support
• Notify you of updates, changes, or important information

3.4 Legal and Security

• Comply with applicable laws and regulations
• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service
• Maintain audit logs for security purposes

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

4.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Service:

• Firebase/Google Cloud: Database hosting, authentication, and app hosting
• FlightAware: Flight data lookup services (only flight identifiers and dates)
• Domain and SSL Providers: Website hosting and security services

These providers are contractually obligated to protect your information and use it only for specified purposes.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal process (subpoenas, court orders)
• Government investigations
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction. You will be notified of any such change.

5. Data Security

5.1 Security Measures

We implement robust security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest
• Access Control: User-specific data isolation using unique identifiers
• API Security: Server-side proxies protect external API keys
• Session Management: Secure authentication with automatic token renewal
• Regular Monitoring: Continuous monitoring for security threats and vulnerabilities

5.2 Database Security

Our primary data storage provides:

• Enterprise-grade security infrastructure
• Automatic security updates
• Compliance with major security standards
• Data residency in the United States

5.3 Limitations

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but maintain industry-standard practices.

6. Data Retention

6.1 Account Data

We retain your account information and logbook data for as long as your account is active or as needed to provide services.

6.2 Automatic Deletion

• Authentication logs: 90 days
• Error logs: 1 year
• Usage analytics: 2 years (anonymized after 6 months)

6.3 User-Controlled Deletion

You can delete your account and all associated data at any time through the application settings or by contacting us.

7. Your Privacy Rights

7.1 Access and Portability

• View all personal information we have about you
• Export your complete logbook data in standard formats (CSV, JSON)
• Receive a copy of your data for transfer to other services

7.2 Correction and Updates

• Modify your personal information through account settings
• Correct inaccuracies in your flight data
• Update preferences and default settings

7.3 Deletion Rights

• Delete individual flight entries
• Remove your entire account and all associated data
• Request permanent deletion of backup data

7.4 Control Over Data Collection

• Choose whether to use automatic flight data enrichment
• Control which data sources are used for imports
• Opt out of usage analytics (core functionality may be affected)

8. International Users

8.1 Data Processing Location

Our services are hosted in the United States. By using our Service, you acknowledge that your information may be processed in the United States.

8.2 GDPR Compliance (EU Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on contract performance, legitimate interests, and consent
• Data Protection Officer: Contact privacy@enycrewtools.com for GDPR-related inquiries
• Right to Portability: Export your data in machine-readable formats
• Right to be Forgotten: Request complete data deletion
• Supervisory Authority: You may lodge complaints with your local data protection authority

9. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to remove such information.

10. Third-Party Services

10.1 External APIs

Our Service integrates with third-party aviation data providers. These services have their own privacy policies:

• FlightAware: https://flightaware.com/about/privacy

10.2 Your Responsibility

When importing data from external sources (Rainmaker, HSS, Pilot Debrief), ensure you have the right to share that information with our Service.

11. Cookies and Tracking

11.1 Essential Cookies

We use essential cookies and similar technologies for:

• User authentication and session management
• Maintaining user preferences and settings
• Ensuring security and preventing fraud

11.2 Analytics

We may use analytics tools to understand how our Service is used. This helps us improve functionality and user experience. Analytics data is anonymized and aggregated.

11.3 Your Choices

You can control cookies through your browser settings, though disabling essential cookies may affect Service functionality.

12. Changes to This Privacy Policy

12.1 Policy Updates

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to your registered email address
• Displaying a prominent notice in the application

12.2 Continued Use

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Information

13.1 Privacy Questions

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@enycrewtools.com
• Support: https://enycrewtools.com/support
• Website: https://enycrewtools.com

13.2 Data Protection Requests

For requests related to your personal data (access, correction, deletion), please contact:

• Email: privacy@enycrewtools.com
• Subject Line: "Data Privacy Request"

We will respond to your request within 30 days of receipt.

14. California Privacy Rights (CCPA)

14.1 California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell data)
• Non-Discrimination: We will not discriminate against you for exercising your rights

14.2 How to Exercise Your Rights

California residents can exercise these rights by contacting us at privacy@enycrewtools.com with "CCPA Request" in the subject line.