Privacy Policy — Aeronite Pilot's Logbook (KP)

1. Data Controller

The data controller for personal data collected through the Aeronite KP application is:

Keepfly Sp. z o.o.
ul. Tomasza Zana 11A, 20-601 Lublin, Poland
VAT: PL7123422185
e-mail: contact@aeronite.com

2. Data We Collect

Registration data: email address, password (hashed), full name, licence number, home base (aerodrome), organisation / operator, place shown on printouts (all fields other than the email address are optional).

Google sign-in data: if the User signs in with a Google account, we receive the email address and account identifier from Google. We use them solely to create and authenticate the Account; we do not access any other Google account data.

Flight logbook data: flight dates, departure and arrival aerodromes, departure and arrival times (UTC), aircraft types and registrations, pilot function, type of operation, flight conditions, flight times (total, night, IFR), number of landings, FSTD session marker, experience tags, remarks, and the name of the pilot-in-command (PIC) if entered by the User.

Privileges data: category, name and expiry date of licences, ratings, medical certificates, language proficiency and operator competences. We do not store medical results or any other health information — only the document's expiry date.

Payment data: Aeronite KP does not store card details. Stripe provides only the customer ID, payment ID, transaction status and date.

Analytics data: we do not use analytics or tracking tools.

3. Legal Basis for Processing

• Contract performance (Art. 6(1)(b) GDPR) — account, logbook and privileges data necessary to provide the Service, including account-related emails (payment confirmation, access expiry reminders, account deletion).
• Legitimate interests (Art. 6(1)(f) GDPR) — system security, abuse detection.
• Legal obligation (Art. 6(1)(c) GDPR) — transaction data for tax compliance.

4. Data Processors

Supabase Inc. — database and authentication. Data region: EU (eu-central-1, Frankfurt, Germany) — data stored exclusively within the EEA. Privacy policy: supabase.com/privacy

Stripe Payments Europe, Ltd. — payment processing. HQ: Dublin, Ireland. Card data is not passed to Aeronite. Privacy policy: stripe.com/privacy

Vercel Inc. — application hosting. USA. Data transfers based on SCCs. Privacy policy: vercel.com/legal/privacy-policy

Resend Inc. — transactional email delivery. USA. Data transfers based on SCCs. Privacy policy: resend.com/legal/privacy-policy

Google LLC — sign-in provider (only for Users who sign in with a Google account). Privacy policy: policies.google.com/privacy

5. Data Retention

• Account data — for the duration of the account and 30 days after deletion.
• Logbook and privileges data — for the duration of the account; permanently deleted upon account deletion.
• Transaction data — 5 years, in compliance with tax regulations.
• Security logs — up to 90 days.

6. Your Rights

Every User has the right to:

• Access their data (Art. 15 GDPR),
• Rectification of inaccurate data (Art. 16 GDPR),
• Erasure of data (Art. 17 GDPR) — also self-service, in the profile settings,
• Restriction of processing (Art. 18 GDPR),
• Data portability (Art. 20 GDPR) — CSV export is available in the Application,
• Lodge a complaint with the Polish supervisory authority (UODO), ul. Stawki 2, 00-193 Warsaw.

Submit requests to: contact@aeronite.com. We respond within 30 days.

7. Cookies

The Application uses only technical cookies and browser storage necessary for session management and for remembering preferences (language, dark mode). No marketing or tracking cookies are used — no cookie banner is required.

8. Security

• Passwords stored in hashed form (Supabase Auth).
• Data transmission encrypted via TLS/HTTPS.
• Row Level Security (RLS) — each User can only access their own data.
• API keys stored in environment variables, not in source code.

9. Changes to This Policy

We will notify Users of significant changes by email at least 14 days before they take effect. The current version is always available at aeronite.com and in the Application.

10. Contact

contact@aeronite.com
Keepfly Sp. z o.o., ul. Tomasza Zana 11A, 20-601 Lublin, Poland