Privacy Policy

This Privacy Policy explains how Zulu Aviation ("we", "our", or "us") collects, uses, and protects your personal data when you use our iOS application and website.

1. Data We Collect

Account Data

• Email address (for authentication and account recovery)
• Password (encrypted, we never see your plaintext password)
• Profile information you provide (name, home airfield, license type, license number, medical class, medical expiry date)

Logbook Data

• Flight entries (dates, airports, aircraft, times, landings, remarks)
• Aircraft you add to your fleet
• Currency items you create
• Training progress records

Technical Data

• Device type and iOS version (for app compatibility)
• App version (for support purposes)

2. Data We Do NOT Collect

• Location data: We never track your GPS location
• Photos or files: No media storage
• Analytics: No usage tracking or analytics tools
• Crash reports: No automatic crash reporting
• Device identifiers: No advertising IDs or device fingerprinting

3. How We Use Your Data

We use your personal data to:

• Provide the Zulu Aviation app functionality (logbook, currency tracking, statistics)
• Authenticate your account and keep your data secure
• Send essential service emails (account verification, password resets)
• Send currency expiry notifications (if you enable them in-app)
• Provide customer support when you contact us

We will never:

• Sell your personal data
• Use your data for advertising
• Share your data with third parties for their marketing
• Track you across other websites or apps

4. Legal Basis (UK GDPR)

We process your personal data under the following legal bases:

• Contract: To provide the app services you've signed up for
• Legitimate interests: To prevent fraud, ensure security, and improve the app
• Consent: For optional features like push notifications (you can withdraw consent anytime in app settings)

5. Data Storage & Security

Your data is stored securely using:

• Encrypted database storage (Supabase, EU region)
• Industry-standard encryption (TLS 1.3 for data in transit)
• Secure authentication (bcrypt password hashing)
• Regular security audits

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

6. Data Sharing

We only share your data with:

• Supabase: Database hosting (EU servers, GDPR compliant)
• Apple: App distribution via the App Store (subject to Apple’s App Store terms and privacy policy)
• Email service: For sending transactional emails (account verification, password resets)

We have Data Processing Agreements with all service providers to ensure they handle your data securely and in compliance with UK GDPR.

7. International Transfers

Your data is stored on servers located in the European Union. We do not transfer your data outside the EU/UK.

8. Data Retention

• Active accounts: We retain your data while your account is active
• Deleted accounts: Data is deleted within 30 days of account deletion
• Backups: Backup copies are retained for 90 days for disaster recovery

9. Your Rights (UK GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your account and data
• Restriction: Request we limit processing of your data
• Portability: Export your logbook data (CSV/PDF available in-app)
• Object: Object to processing based on legitimate interests
• Withdraw consent: Disable notifications or delete your account

To exercise these rights, email support@zuluaviation.co.uk. We'll respond within 30 days.

10. Children's Privacy

Zulu Aviation is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Effective Date" and notify you via email or in-app message.

Continued use of the app after changes means you accept the updated policy.

12. Contact & Complaints

Contact us:
Email: support@zuluaviation.co.uk
Address: 3 Beecham Court, Wigan, WN3 6PR, United Kingdom

Supervisory Authority:
If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
ico.org.uk