Legal
Privacy Policy
Last updated: August 2026
1. Who We Are
Cranewings is the data controller for personal data collected through our Services. For questions about this policy, contact us at info@cranewings.io.
2. Data We Collect
We collect: (a) Account data - name, email address, and password hash when you register; (b) Profile data - pilot licence type, home airport, aircraft category, and licence number (optional); (c) Flight data - logbook entries, flight times, airports, aircraft, and notes you enter into the app; (d) Usage data - app usage patterns, device type, OS version, and crash reports via analytics tools; (e) Payment data - billing details processed securely by Apple App Store or Stripe (we do not store raw card numbers).
3. How We Use Your Data
We use your data to: provide and improve the Services; process payments and manage subscriptions; send transactional emails (account creation, password reset, subscription receipts); send optional product updates if you opt in; comply with legal obligations; and prevent fraud and ensure security.
4. Legal Basis for Processing
We process your data on the following grounds: (a) Contract - processing necessary to provide the Services you signed up for; (b) Legitimate interest - improving our products and preventing fraud; (c) Consent - for marketing communications, which you may withdraw at any time; (d) Legal obligation - where required by law.
5. Data Sharing
We do not sell your personal data. We share data only with: (a) Service providers - including cloud infrastructure (AWS), payment processors (Stripe, Apple), analytics tools, and email providers, all bound by data processing agreements; (b) Legal authorities - where required by applicable law or court order.
6. Data Retention
We retain your account and flight data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law (e.g., payment records for tax purposes, retained for 7 years).
7. Your Rights
Depending on your location, you have rights under applicable data protection laws including UK GDPR (UK/EEA users), CCPA (California residents), and similar regulations. These rights include: access to your personal data; rectification of inaccurate data; erasure (right to be forgotten); restriction or objection to processing; data portability; and the right to lodge a complaint with your local data protection authority (e.g., ICO in the UK). To exercise any right, contact info@cranewings.io.
8. Cookies
Our website uses cookies. Please see our Cookie Policy for details. You can manage your cookie preferences at any time via your browser settings or our cookie consent tool.
9. International Transfers
Some of our service providers may process data across different regions. Where data transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses and data processing agreements that comply with UK GDPR, GDPR (EU), CCPA, and other applicable international data protection laws.
10. Security
We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
11. Children
The Services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The updated policy will be effective from the date published.
13. Contact Us
For privacy-related enquiries, contact our Data Protection contact at info@cranewings.io.