Privacy Policy

At tachbook we respect your privacy. This policy describes, plainly, what data the app stores, why, who it is shared with and what control you have over it. It is written to match what the app does today.

1. Controller and contact

The data controller is Domingo Sandoval (Doppel), operator of tachbook, based in Chile. For any question or request about your data, write to [email protected].

2. What data we store

Account and identity

• Sign-in: you sign in with Google or with Sign in with Apple. From Google we receive your email and name; from Apple, your email (which may be a relay address if you choose to hide yours) and your name. We never receive or store passwords.
• Profile: first and last name, username (required), the profile photo and cover image you upload, avatar style, home airfield, club and app preferences.
• Session: a signed session cookie (30 days) and, in the native app, an equivalent access token.

Personal logbook

• Flights: date, aircraft, route, hours by category, role, landings, remarks, milestones and captions you write, plus the photos you attach.
• Tracks: the .igc files you upload (kept as-is) and the reduced track we compute from them.
• Data you enter voluntarily: licences and their numbers, ratings, medical (MAE) and standardisation checks with their expiry dates, previous hours, weight & balance profiles and —if you enable commercial mode— your duty periods (DAN 121).
• Weather: the locations, webcams, METAR stations and map layers you pick for your weather panel.

Shared aircraft

• Aircraft flights (tach readings, pilot, purpose), account movements, dues and expenses, bookings, hour transfers, maintenance and components, aircraft documents (PDF or images), a wall with messages and photos, and the member list with name, email and role.
• Audit log: each aircraft keeps a record of who did what (flight entries and edits, configuration changes, sign-in and sign-out), with a timestamp.

Social layer

• Pilot profile: identified by your username and only openable by other signed-in pilots; it is not exposed on the open web. Your detailed content is visible only to followers you approve.
• Followers: we store follow requests (pending and approved) and the blocks you apply.
• Feed: shows only the flights you mark as published. The rest of your logbook is private.
• Groups: memberships, invitations and the group wall with its posts, comments, reactions and photos.
• Messaging: private messages, which are only possible between pilots who follow each other. Your messaging contacts can see your presence (online or "last seen"), derived from your last activity.
• Reports: if you report content, a user or a problem, we store the message, the page you sent it from and basic device details.

Notifications

• In-app: the bell notifications (title, text, link and read state).
• Push: on iOS, the device token Apple issues for your device; we use it only to send you push notifications through APNs.
• Email: we send notices by email —invitations, follow requests, new messages and comments, medical or standardisation expiry reminders, report confirmations— through Resend. We record which expiry reminders we already sent you so they are not repeated.

Third-party emails

• When an aircraft administrator invites a member, we store the name and email they enter before that person accepts, so we can recognise them at sign-in. If they decline, the membership is marked as declined and inactive and is not used for anything else; they may ask us to remove it. The same applies to the email you send an app invite link to and to the email you leave on the waiting list.

AI credits and purchases

• Your credit balance and its movement history; for subscriptions and packs bought on the App Store, the product identifier, Apple's transaction identifiers (transactionId and originalTransactionId), the environment, the expiry date and an appAccountToken (a random identifier we generate to link the purchase to your account). We never see or store your card details: payment is processed by Apple.

Service usage

• Minimal internal analytics: which section of the app you visit and when, a visit counter and the date of your last activity. To limit abuse we keep a temporary per-IP counter that is purged periodically. We use no third-party analytics tools or trackers.

3. Artificial intelligence

Some features use Anthropic models (United States). When you trigger them, we send Anthropic only what that request needs: the logbook page photo you scan, the weighing report photo, the contents of the spreadsheet you import or —when asking your logbook— your question together with your flight records as text. Under Anthropic's commercial API terms, that content is not used to train their models. Each use deducts one credit and is counted in your history. No AI feature runs unless you ask for it.

4. Why we use the data and on what basis

• To provide the service you request when you create your account: keeping your logbook, computing hours, balances and expiry dates, managing shared aircraft and running the social layer. Basis: performance of the service you accept by using tachbook.
• Features you enable yourself (AI, publishing a flight, following a pilot, backing up to Drive, receiving push). Basis: your consent, which you can withdraw from the app.
• Billing and subscriptions: verifying your purchases with Apple and keeping the accounts. Basis: performance of the contract and legal obligations.
• Service notices and security: account notifications, usage limits, audit log. Basis: legitimate interest in running a secure and traceable service.

We do not sell your data and we do not share it with third parties for advertising.

5. Providers and international transfers

To run tachbook we rely on providers that process data on our behalf. All of them may process data outside Chile, mainly in the United States, under their own contractual data-protection commitments:

• Cloudflare — app hosting, database (D1) and file storage (R2): photos, documents and tracks.
• Anthropic — artificial-intelligence features (section 3).
• Apple — Sign in with Apple, push notifications (APNs) and App Store purchases.
• Google — Google sign-in and, only when you ask for it, the backup of your logbook to your own Google Drive. The Drive permission is used at backup time; we do not store the access token or any Google credentials.
• Resend — transactional email delivery.

In addition, to show maps, weather, air traffic and aircraft photos, the app queries or embeds content from public services: maps (OpenStreetMap, OpenTopoMap, CARTO, Esri, NASA GIBS, Zoom Earth), weather (Windy, Open-Meteo, METAR/TAF from NOAA and Chile's DGAC), traffic (OGN/glidernet and ADS-B Exchange), tracking (Garmin) and aircraft photos (Planespotters, with attribution). When that content loads in your browser, those services may log your IP address. The airfield directory comes from the open OurAirports dataset and is bundled with the app; it involves no data transfer.

6. How long we keep the data

We keep your data for as long as your account exists. You can delete it yourself under Settings → Delete my account; it is immediate and irreversible. Doing so erases your profile, flights, photos, tracks, declarations, weight & balance profiles, messages, followers and blocks, group memberships and posts, notifications, push tokens, duty periods, reports, usage analytics and credit balance.

What is kept, and why:

• Accounting entries for Apple purchases and subscriptions, anonymised (without your email), under the obligation to keep records of what was charged.
• Operational records of shared aircraft (aircraft flights, account, bookings, maintenance): they belong to the aircraft and are managed by its club; your email is unlinked from the member record.
• Audit log of shared aircraft: keeps the identity of the actor of each action, for traceability towards the other members.
• Groups you created continue to exist for their members, with the creator anonymised.

7. Your rights

Under Chile's Law 19.628 on the protection of private life and Law 21.719, in force from December 2026, you have the right to:

• Access: see what data we hold about you. Everything is visible in the app.
• Rectification: correct any record from the app.
• Erasure: delete your account from the app (section 6) or ask us by email.
• Objection: object to a specific processing, for example by turning off optional features or writing to us.
• Portability: export your logbook as CSV, Excel, PDF or JSON, or back it up to your own Google Drive, at any time and free of charge.

To exercise any of these rights write to [email protected] from your account email. We reply within the deadlines set by law and, in any case, within 30 business days. If you are not satisfied, you may turn to Chile's personal-data protection authority.

8. Minors

tachbook is aimed at pilots and not at anyone under 18. We do not knowingly collect data from minors; if we detect a minor's account, we will delete it.

9. Cookies and local storage

We use a single cookie, the session cookie, which is signed, httpOnly and required to keep you signed in. The browser also stores a few interface preferences locally (collapsed sections, map layers, filters) that never leave your device. We use no third-party cookies, trackers or advertising.

10. Changes

We may update this policy as the app changes. The current version will be published on this page with its date and, if the change is material, we will let you know in the app. This version is effective as of September 12, 2026.