← Back to FlightFlow

Privacy Policy

Last updated: 2026-08-25 · Effective for the FlightFlow iOS application and the FlightFlow marketing website (flightflow.dongcp.com).

This Privacy Policy explains what data FlightFlow collects, how it is used, how it is stored, and how you can delete it. We aim to keep FlightFlow as local-first as possible — your flight data lives on your device by default.

1. Data FlightFlow collects

FlightFlow collects the following categories of data only when you use the corresponding feature:

1.1 Account information (optional, sign-in only)

• Email address, phone number, or Apple ID used to sign in.
• Encrypted password hash (for email sign-in).
• Display name and profile preferences.
• Platform admin flag (only for the platform operator).

FlightFlow is fully usable without an account — all flight data can be created and stored locally without signing in.

1.2 Aircraft data

• Aircraft registration, model, empty-weight override, arm override and operating status.
• Stored on device by default; synced to the cloud only if you sign in and enable Cloud Sync.

1.3 Flight task data

• Task number, date, mission type, summary, weather, IMSAFE self-check, weight & balance inputs, performance inputs.
• Per-leg records: sequence, engine-on / engine-off timestamps, duration, cycles, origin / destination, role, remarks.

1.4 Flight records

• PDF dispatch exports (rendered server-side from your flight data and stored under your account).
• PIC signatures captured on device for the PDF release.

1.5 Cloud sync data

• If you sign in and enable Cloud Sync, the above aircraft / task / record / settings data is replicated to the FlightFlow backend over HTTPS so it can be restored on a fresh device.
• Sync traffic is end-to-end TLS-protected; authentication uses a short-lived bearer JWT (15 minutes) plus a refresh token.

1.6 Diagnostics

• The server logs request trace IDs and HTTP status codes for operational diagnostics. Logs are not tied to your account.
• iOS crash logs, if enabled by you via iOS Settings, are managed by Apple.

2. Why FlightFlow uses this data

• Provide the app's features — task workflow, weight & balance, performance, PDF release.
• Cloud sync & multi-device restore — when you sign in, your data is replicated so a new device can pick up where you left off.
• Account management — authentication, password reset, account deletion.
• Service quality — diagnostic logs help us diagnose crashes and outages.

3. What FlightFlow does NOT do

• FlightFlow does not sell your data to third parties.
• FlightFlow does not use your flight data for advertising or profiling.
• FlightFlow does not share your data with law enforcement except as strictly required by applicable law.

4. Where your data is stored

• On device — by default in iOS Keychain (encrypted) and the app's secure container.
• Cloud — if you sign in and enable Cloud Sync, on servers operated by Rotorcare, located in China (Alibaba Cloud). Access is restricted to authorised operators.

5. Retention & deletion

6. Your rights

• Access — export your data as a PDF release or backup bundle from within the app.
• Rectification — edit any aircraft, task or record from within the app.
• Deletion — see above.
• Withdraw consent — sign out and uninstall the app to stop all processing.

7. Children's privacy

FlightFlow is a professional cockpit tool and is not directed at children under 16. We do not knowingly collect personal data from children.

8. International transfers

FlightFlow is operated from China. By using the cloud sync feature, you understand that your data is transferred to and processed in China. We rely on standard contractual safeguards for any cross-border transfers.

9. Changes to this policy

We may update this policy. Material changes will be announced in-app and on this page. The "Last updated" date above will be revised.

10. Contact

Questions about privacy? Contact: Koncege@163.com · Project Lead, FlightFlow.