Privacy Policy

Beta draft · Last updated 8 July 2026 · Effective date: to set at public launch

1. Who we are

CrewStory (“CrewStory”, “we”, “us”) is a private aviation career journal and logbook for pilots and cabin crew. CrewStory is currently operated by Sammie Haegeman, trading as CrewStory. CrewStory may later be operated by SHCF LLC or another legal entity; if this changes, this page will be updated. We are the controller of your personal data; the providers listed in §6 process data on our behalf and on our instructions.

Privacy contact: privacy@getcrewstory.com

2. What we collect

Account details. Your email address and an encrypted password, managed by our authentication provider (Supabase Auth). If sign-in with Apple or Google becomes available, we receive only the sign-in token, never your password with those providers.

Crew profile (optional, private by default). Display name, first/last name, airline(s), rank, home base(s), staff number, nationality, date of birth, phone, home address, licence number and countries, medical expiry, type ratings, instructor/examiner qualifications, profile photo, bio, languages, social handles and joining hours. You choose what to fill in; sensitive fields are shared with nobody unless you explicitly enable a share toggle for your crew card.

Flight and logbook data. Flights and simulator sessions you enter or import: dates, routes, scheduled and actual times, aircraft type and registration, function times, take-offs/landings, approaches, PF/PM, duty inputs, fuel, pax, notes and milestones — plus a tamper-evident edit history of your hours (“Verified Hours”) so your own record can demonstrate integrity.

CSV imports. If you import a logbook (e.g. from another app), CrewStory reads the file on your device to create flight entries and, optionally, private crew contacts. The raw file is not stored on our servers; only the resulting entries you choose to import are saved.

Roster / calendar import. If you use roster import, CrewStory reads only the single device calendar you select, on your device, to recognise flight events. The raw calendar is not uploaded; only the resulting flight entries are.

Crew / colleague data you enter. Names, airline, position, staff number, phone, photo and notes about colleagues you fly with. This is private to you and is never shown to those colleagues or made public.

Layover memories. Photos, captions, titles, notes, tags, companions, dates and airports for layovers you choose to record. Photo metadata (EXIF): before a photo is uploaded, CrewStory strips embedded location (GPS) and camera metadata on your device, so precise capture coordinates are not sent to our storage.

Hotel and layover details you save (hotel names, facilities, Wi-Fi notes, locations).

Document Vault. Documents you choose to upload (licences, medicals, certificates) and expiry items you track. These are private to your account and access-controlled per user.

Wrapped / recap data. Monthly and yearly statistics computed from your flights, plus your presentation choices (chosen photos, hidden slides, edited text) for your Wrapped recaps. Recaps are generated for you and are not shared unless you choose to share them.

Subscription / entitlement data. If paid features are offered, we (and the app store / payments processor) process the fact of your entitlement (e.g. active/expired) to unlock features. We do not receive or store your full card number.

Diagnostics. Limited crash and error diagnostics (via Sentry) to keep the app stable. These are engineered to avoid your personal content; they carry technical context (error type, screen, operation), not your logbook, notes, photos or crew data.

3. How we use it

To provide the app’s features (logbook, roster/CSV import, currency and duty tracking, memories, map, Wrapped, Document Vault), to keep your account secure, to fix bugs and prevent abuse, and to respond to your support and privacy requests. We do not sell your data and we do not show advertising.

4. Sharing

Nothing is public by default. We share your personal data only with the processors in §6 (to run the service), when you explicitly choose to share something (e.g. a crew card field or a Wrapped recap), or where required by law. We never sell your data.

5. Your data export & deletion

You can export a full copy of your data from inside the app, and you can permanently delete your entire account and its data from inside the app (see Deleting your account).

6. Processors we use

• Supabase — authentication, database and file storage (your app data is stored in the EU).
• Sentry — crash/error diagnostics (privacy-scrubbed).
• Apple / Google — app distribution and, if paid features are offered, payment processing and subscription entitlement.

Some providers may process limited data outside the EU; where they do, appropriate safeguards apply.

7. Retention & deletion

Account and content data (profile, flights, memories, photos, hotels, documents, summaries) is kept while your account is active and deleted when you delete your account. Support emails are kept for a limited period after your issue is resolved. Security and error logs are kept for a limited period for abuse prevention and debugging, then expire. Encrypted backups expire on a fixed rolling schedule and are never used to restore deleted accounts.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your data, and to object to or restrict certain processing. Use the in-app export/delete tools, or contact privacy@getcrewstory.com.

9. Age

You must be at least 16 years old to use CrewStory. If you are under 18, you may use CrewStory only with permission from a parent or legal guardian, and you should not upload licence, medical, passport, identity or other sensitive documents unless your parent or legal guardian has approved it. CrewStory is not intended for children under 16.

10. Changes

We will announce material changes in the app before they take effect. The current version is always available at getcrewstory.com/privacy.

11. Contact

Sammie Haegeman, trading as CrewStory — privacy@getcrewstory.com.