Legal

Privacy Policy — Aeronite KML

Last updated: April 24, 2026 · Version 1.0

1. Data Controller

The data controller for personal data collected through the Aeronite KML application is:

Keepfly Sp. z o.o.
ul. Tomasza Zana 11A, 20-601 Lublin, Poland
VAT: PL7123422185
e-mail: contact@aeronite.com

2. Data We Collect

Registration data: email address, password (hashed), full name (optional), license / student number (optional).

Logbook entry data: task dates, aircraft types and registrations, ATA chapters, task descriptions, organization data, supervisor names.

Part-66 exam data: exam modules, attempt dates, results, locations.

Payment data: Aeronite KML does not store card details. Stripe provides only the customer ID, transaction status and date.

Analytics data: we use Plausible Analytics — a privacy-first tool with no cookies, no personal data, EU servers.

3. Legal Basis for Processing

  • Contract performance (Art. 6(1)(b) GDPR) — account and logbook data necessary to provide the Service.
  • Legitimate interests (Art. 6(1)(f) GDPR) — system security, abuse detection.
  • Legal obligation (Art. 6(1)(c) GDPR) — transaction data for tax compliance.

4. Data Processors

Supabase Inc. — database and authentication. Data region: EU (eu-west-1, Dublin, Ireland) — data stored exclusively within the EEA. Privacy policy.

Stripe Payments Europe, Ltd. — payment processing. HQ: Dublin, Ireland. Card data is not passed to Aeronite. Privacy policy.

Vercel Inc. — application hosting. USA. Data transfers based on SCCs. Privacy policy.

Resend Inc. — transactional email delivery. USA. Data transfers based on SCCs. Privacy policy.

5. Data Retention

  • Account data — for the duration of the account and 30 days after deletion.
  • Logbook entries — for the duration of the account; permanently deleted upon account deletion.
  • Transaction data — 5 years, in compliance with tax regulations.
  • Security logs — up to 90 days.

6. Your Rights

Every User has the right to:

  • Access their data (Art. 15 GDPR),
  • Rectification of inaccurate data (Art. 16 GDPR),
  • Erasure of data (Art. 17 GDPR),
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR),
  • Lodge a complaint with the Polish supervisory authority (UODO), ul. Stawki 2, 00-193 Warsaw.

Submit requests to: contact@aeronite.com. We respond within 30 days.

7. Cookies

The Application uses only technical cookies necessary for session management. No marketing or tracking cookies are used. Plausible Analytics operates without cookies — no cookie banner is required.

8. Security

  • Passwords stored in hashed form (Supabase Auth).
  • Data transmission encrypted via TLS/HTTPS.
  • Row Level Security (RLS) — each User can only access their own data.
  • API keys stored in environment variables, not in source code.

9. Changes to This Policy

We will notify Users of significant changes by email at least 14 days before they take effect. The current version is always available at kml.aeronite.com/privacy.

10. Contact

contact@aeronite.com
Keepfly Sp. z o.o., ul. Tomasza Zana 11A, 20-601 Lublin, Poland