Privacy policy (GDPR)
Last updated : 2026-11-10
Template to complete and have reviewed by your legal counsel before publication.
Controller
[Raison sociale], [Adresse du siège]. Contact: contact@geardown.app.
Data processed
Account data: e-mail address, name, sign-in method (e-mail, Apple, Google).
Logbook data: flights, aircraft, licences, medical certificate (validity dates), roster, layovers, signatures, attachments you add.
Technical data: sign-in and sync logs required for service security.
Purposes and legal bases
Provide the logbook and its sync (contract).
Send the expiry alerts you enabled (contract).
Bill subscriptions (legal obligation and contract).
Secure the service (legitimate interest).
Health data
Geardown only stores your medical certificate class and dates. Do not upload detailed medical documents: if you do, they are stored encrypted and accessible to you only.
Recipients and processors
Hosting and database (European Union), payment (Stripe, Apple, Google), transactional e-mail. No data is sold or used for advertising.
Retention
Data is kept while your account is active and deleted within 30 days of account deletion, except legal obligations (invoices: 10 years).
Your rights
Access, rectification, erasure, restriction, objection and portability. From Settings › My data you can download all your data (JSON) and delete your account. You can also contact us and lodge a complaint with your supervisory authority.
Security
Encryption in transit (TLS), per-account data isolation (Row Level Security), private document storage, automatic backups.