Privacy Policy

FlightLedger is a digital pilot logbook application for Australian pilots, built to track CASR Part 61 flight currency. It is operated by Anton Bulzomi (privacy@flightledger.bulzomi.com).

When you use FlightLedger we collect and store:

• Account data — your email address and password (hashed, never stored in plain text)
• Profile data — your name, Aviation Reference Number (ARN), and medical certificate class
• Flight log data — dates, aircraft, routes, flight times, and any other entries you add
• Currency dates — medical expiry, flight review dates, and proficiency check dates you enter in Settings
• Documents — medical certificate PDFs you choose to upload
• Passkeys — public key credentials for passwordless sign-in (we never have access to your private key)
• Usage data — standard server logs (IP address, browser type, pages visited) retained for up to 30 days

Your data is used solely to provide the FlightLedger service:

• Displaying your logbook, currency status, and analytics
• Generating PDF and CSV exports
• Sending currency expiry reminder emails (if configured)
• Authenticating you when you sign in

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We use the following sub-processors to operate the service:

• Supabase (supabase.com) — database, authentication, and file storage. Data is hosted in AWS ap-southeast-2 (Sydney, Australia).
• Vercel (vercel.com) — application hosting and edge network.
• Resend (resend.com) — transactional email delivery (currency reminders only).

Your data is retained for as long as your account is active. You may delete your account at any time from Settings → Account, which permanently removes all your data from our systems within 24 hours.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data via the Settings pages
• Delete your account and all associated data
• Export your data (Settings → Data & Backup)
• Withdraw consent at any time by deleting your account

To exercise any of these rights, contact privacy@flightledger.bulzomi.com.

We implement industry-standard security measures including TLS encryption in transit, hashed passwords, row-level security on all database tables (your data is only accessible to you), and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

FlightLedger uses only essential cookies required for authentication (session tokens). We do not use tracking, advertising, or analytics cookies.

FlightLedger is not intended for users under 16 years of age. We do not knowingly collect data from children.

We may update this policy from time to time. We will notify you of significant changes by email or by displaying a notice in the app. Continued use of FlightLedger after changes constitutes acceptance.

For privacy questions or requests: privacy@flightledger.bulzomi.com