Privacy Policy

Last updated: August 15, 2026

Note before publishing: this text describes what the app and server actually process today. It does not replace legal advice — fill in the data-controller placeholders and have it reviewed before the App Store submission.

1. Data Controller

The data controller under the GDPR for data processed in connection with the "CrewCaddy" app and this website is:

[Name / Company]
[Street address]
[Postal code, city, country]
Email: developer@smahoma.com

2. The short version

Your logbook — flights, duties, signatures, aircraft — lives in a local database on your device. It is not uploaded.
No account is needed for logging, FTL calculation, imports, exports or backups. An account exists for one purpose: fetching your roster.
This website sets no cookies and runs no analytics, trackers or ads. Neither does the app.

3. What the app processes on your device

Flights, duty periods, home-base history, currency dates, signatures and photos you attach, weather stations you follow, and rule packs. All of it stays in the app's local database and in backups you create yourself. Backups are encrypted on the device with a recovery code that only you hold; we cannot open them.

4. What the server processes — only if you create an account

If you connect a roster account, our server (hosted in the EU) processes:

Account data: your email address, an Argon2 hash of your app password, and short-lived session tokens.
Crew portal credentials: your crew ID, and your portal password encrypted with a public key whose private counterpart is not available to the API server. It is used solely to fetch your roster from your airline's crew portal.
Roster data: duties, flights and crew assignments of your roster, so the app can sync them. Sync responses are scoped to your own crew ID.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) — this processing exists only to provide the roster sync you requested.

5. What we do not do

No analytics, tracking or advertising SDKs, in the app or on this site.
No sale or sharing of data with third parties.
No processing outside the EU for the roster service.

6. Retention and deletion

Unlinking your crew portal in the app deletes your encrypted portal credentials from the server immediately. To delete your account and its synced roster data entirely, email developer@smahoma.com — deletion is confirmed within 30 days. Local data you delete yourself by deleting the app or its entries.

7. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection under Art. 15–21 GDPR, and the right to lodge a complaint with a supervisory authority. The fastest way to exercise them: developer@smahoma.com.

8. This website

Serving this site produces standard server logs (IP address, time, requested page) kept briefly for operation and security (Art. 6(1)(f) GDPR). No cookies, no embedded third-party content.