Privacy policy (GDPR)

Last updated : 2026-11-10

Template to complete and have reviewed by your legal counsel before publication.

Controller

[Raison sociale], [Adresse du siège]. Contact: contact@geardown.app.

Data processed

Account data: e-mail address, name, sign-in method (e-mail, Apple, Google).

Logbook data: flights, aircraft, licences, medical certificate (validity dates), roster, layovers, signatures, attachments you add.

Technical data: sign-in and sync logs required for service security.

Purposes and legal bases

Provide the logbook and its sync (contract).

Send the expiry alerts you enabled (contract).

Bill subscriptions (legal obligation and contract).

Secure the service (legitimate interest).

Health data

Geardown only stores your medical certificate class and dates. Do not upload detailed medical documents: if you do, they are stored encrypted and accessible to you only.

Recipients and processors

Hosting and database (European Union), payment (Stripe, Apple, Google), transactional e-mail. No data is sold or used for advertising.

Retention

Data is kept while your account is active and deleted within 30 days of account deletion, except legal obligations (invoices: 10 years).

Your rights

Access, rectification, erasure, restriction, objection and portability. From Settings › My data you can download all your data (JSON) and delete your account. You can also contact us and lodge a complaint with your supervisory authority.

Security

Encryption in transit (TLS), per-account data isolation (Row Level Security), private document storage, automatic backups.