PRIVACY POLICY FOR PILOT DASHBOARD
Effective Date: June 14, 2026
Last Updated: June 14, 2026
Version: 4.0.0
EXECUTIVE SUMMARY
Pilot Dashboard is a privacy-focused aviation logbook application designed for pilots to track flight hours, manage aircraft records, currencies, performance calculations, instructor endorsements, and live GPS flight tracks. This Privacy Policy explains our data practices.
Key Privacy Highlights:
- Local-First Storage - All data stored on your device by default
- Optional Cloud Backup - Google Drive sync available (your choice, your data)
- Google Sign-In - Required only if you enable cloud backup, strictly under your control
- Optional GPS Flight Tracking - Records your flight path only while you actively track a flight; stored on your device
- No Advertising or Analytics - No ad networks, analytics SDKs, third-party tracking, or user profiling
- No Data Selling - Your data is never sold or shared with advertisers
- Sandboxed Local Storage - Data kept in the app's private storage, protected at rest by your device's encryption; credentials secured in the Android Keystore
- Transparent Permissions - Only permissions needed for app functionality
1. INTRODUCTION
Pilot Dashboard respects your privacy and is committed to protecting your personal information. This Privacy Policy describes:
- What information we collect
- How we use that information
- Your rights regarding your data
- Security measures we implement
- Third-party services we utilize
By using Pilot Dashboard, you agree to the collection and use of information in accordance with this policy.
2. INFORMATION WE COLLECT
2.1 USER-PROVIDED INFORMATION (STORED LOCALLY)
Pilot Dashboard collects information you voluntarily enter into the app. This data is stored on your device in a local SQLite database and is NEVER transmitted to our servers. (See Section 2.2 for the optional Google Drive backup, which is the only path off your device, and which goes to YOUR own Drive account.)
FLIGHT LOG DATA:
- Date & Time: Flight dates and times
- Aircraft Information: Aircraft type/model (e.g., C172, PA28), tail number
- Crew Information: Pilot in command (PIC) name, co-pilot name
- Flight Hours: Day solo, day dual, night solo, night dual, instrument actual, instrument simulated
- Mission Details: Mission type (training, cross-country, etc.), special mission notes
- Instructional Hours: Instructor day/night hours, operational hours
- Remarks: Free-text notes about flights
PILOT PROFILE INFORMATION:
- Personal Details: Pilot name, certificate number
- Qualifications: Ratings, endorsements, medical class
- Medical Information: Medical expiration date (for reminder notifications only)
- IRT & Checkouts: Instrument proficiency check dates, aircraft checkout dates
- Currency Tracking: Currency requirements, expiration dates, renewal status
INSTRUCTOR ENDORSEMENTS & SIGNATURES:
- Endorsement Records: Endorsement text, regulatory citation, dates
- Instructor Identity: Instructor name and certificate number (entered by you)
- Drawn Signatures: A hand-drawn signature image captured on the device for the endorsement
- Amendment PIN: A one-way hashed PIN (PBKDF2) used to gate amendments — the PIN itself is never stored in plain text
AIRCRAFT MANAGEMENT:
- Aircraft Profiles: Aircraft type categories, model information, performance data, weight & balance and runway-performance inputs
- Currency Status: Aircraft-specific currency tracking and renewal reminders
- Aircraft Selection: Associated aircraft for each flight
GPS FLIGHT TRACK DATA (see Section 2.4):
- GPS position, altitude, ground speed, and heading recorded over time while you actively track a flight
AVIATION TOOLS:
- E6B Calculator & Performance Data: Temperature, pressure, altitude, weight & balance inputs - calculated in-memory only, never stored or transmitted
MANUALS & DOCUMENTS:
- File Uploads: PDF, DOC, DOCX, XLS, XLSX files you add to the Manuals section
- File Metadata: File names, file sizes, upload dates
- Size Limit: 300MB maximum per file
PREFERENCES & SETTINGS:
- Notification Preferences: Enabled/disabled status for reminders
- Theme Selection: Light mode or dark mode preference
- Unit Preferences: Altitude, temperature, speed, pressure units
- Cloud Sync Preference: Whether Google Drive backup is enabled
2.2 GOOGLE SIGN-IN AND CLOUD BACKUP (OPTIONAL)
The App includes an OPTIONAL cloud backup feature that uses your Google account to store a backup copy of your database on Google Drive. This feature is OFF by default.
When you enable Cloud Backup:
GOOGLE SIGN-IN:
- You will be prompted to sign in with your Google account
- Google provides us with your email address and basic profile information
- We store only your email address to display in the Settings screen
- Google Sign-In is handled entirely by Google's secure authentication service
- We never see or store your Google password
- Google's Privacy Policy: https://policies.google.com/privacy
GOOGLE DRIVE BACKUP:
- A backup file is uploaded to your personal Google Drive
- The backup is stored in a folder named "Pilot Dashboard Backups" in YOUR Google Drive account — not our servers
- We use the "drive.file" scope, which restricts our access to ONLY the files this app creates. We cannot access any of your other Google Drive content.
- The backup file contains your local database (flights, profile, aircraft, currencies, endorsements, GPS tracks, settings)
- Backups occur automatically after you make changes, on app launch, and when you manually trigger a sync
- You can disable cloud backup and delete the Google Drive backup at any time from Settings
WHEN CLOUD BACKUP IS DISABLED (DEFAULT):
- No Google Sign-In is required
- No data is uploaded anywhere
- All data remains exclusively on your device
2.3 AUTOMATICALLY COLLECTED INFORMATION
The following is collected locally ONLY and never transmitted to us:
- Device Information: Device model, operating system version
- App Performance: Errors and crashes (logged locally for debugging only)
- Device Motion: Live accelerometer data for on-screen attitude/orientation display - used in real time and never stored or transmitted
DATA NOT COLLECTED (REGARDLESS OF SETTINGS):
- Analytics or telemetry data
- Advertising identifiers
- Cross-device or cross-app tracking
- Payment card information (purchases handled entirely by Google Play)
- Contacts, calendar, microphone, or camera data
2.4 GPS FLIGHT TRACKING (OPTIONAL, USER-INITIATED)
The App can record a GPS track of your flight so you can review your route for a post-flight debrief and attach it to the flight you are logging.
- When it runs: Only after you start tracking a flight. It is not a background or always-on service - it never runs unless you initiate it, and it stops when you end the flight.
- What is collected: Precise GPS position (latitude/longitude), GPS altitude, ground speed, and heading, sampled over time to form a breadcrumb trail.
- Foreground service & notification: So a track is not lost when your screen turns off or you switch apps, tracking continues using an Android foreground service with an ongoing, visible notification. The App requests ACCESS_FINE_LOCATION (while-in-use) for this purpose. The App does NOT request the separate "all the time" / background-location permission.
- Storage & transmission: Recorded track points are stored on your device with the flight. They are not sent to any location/tracking service. They are included in your Google Drive backup only if you have enabled Cloud Backup.
- Weather location: Your location may also be used to fetch local aviation weather - see Section 8.
3. HOW WE USE YOUR INFORMATION
Your information is used solely to:
1. Enable Core Functionality: Store and manage your flight logs, aircraft records, endorsements, and pilot profile
2. Generate Reports: Create PDF logbook summaries and endorsement certificates when requested
3. Display Weather: Fetch current METAR/TAF data for aviation weather
4. Record Flight Tracks: Capture and display your GPS flight path when you start tracking
5. Send Notifications: Deliver reminders for medicals, IRT, checkouts, and currency expirations
6. Cloud Backup (if enabled): Sync your database to your personal Google Drive for safekeeping and device migration
7. Calculate Performance: Process flight data for E6B, weight & balance, and runway-performance tools
8. Track Currencies: Monitor and remind you of currency requirements
We do NOT use your information for advertising, profiling, or sale to third parties.
4. DATA STORAGE & SECURITY
LOCAL STORAGE:
- All flight, profile, aircraft, currency, endorsement, and GPS-track data is stored locally on your device in the app's private, sandboxed storage, which is not accessible to other apps.
- This data is protected at rest by Android's device-level (file-based) encryption when you have a device screen lock enabled. The App does not apply an additional encryption layer to the SQLite database file itself.
- Sensitive credentials - your Google OAuth token and endorsement signing keys - are stored separately in Android Keystore-backed secure storage (flutter_secure_storage), not in the database.
- Data persists until you delete it or uninstall the app.
CLOUD STORAGE (OPTIONAL):
- If enabled, a backup copy is stored in YOUR Google Drive account
- Stored in the "Pilot Dashboard Backups" folder under your Google account
- We use the "drive.file" scope - restricted to only files this app creates
- You retain full ownership and control of the Google Drive backup
- You can delete the backup file directly from Google Drive at any time
- Restoring from backup replaces your local database with the Drive copy
TRANSPORT SECURITY:
- All network requests (weather, map tiles, Google Drive, billing) use HTTPS/TLS. The App does not permit cleartext (unencrypted HTTP) traffic.
DATA PROTECTION RECOMMENDATIONS:
- Enable device screen lock and password/biometrics
- Keep Android updated to the latest security patch
- Regularly enable cloud sync to maintain an off-device backup
DATA DELETION:
- Delete individual flight entries directly in the app
- Clear all local app data through Android Settings > Apps > Pilot Dashboard
- Delete cloud backup from Settings > Cloud Backup > Delete Cloud Data
- Or delete the backup file directly from Google Drive
- Deleted data cannot be recovered
5. THIRD-PARTY SERVICES
5.1 GOOGLE SIGN-IN (only when cloud backup is enabled)
- Service: Google Identity Services
- Purpose: Authenticate your Google account to access Google Drive
- Data Shared: Email address and basic Google profile
- Data We Store: Email address only (displayed in Settings)
- Google Privacy Policy: https://policies.google.com/privacy
- You can revoke app access at: https://myaccount.google.com/permissions
5.2 GOOGLE DRIVE API (only when cloud backup is enabled)
- Service: Google Drive (googleapis/drive/v3)
- Purpose: Store and retrieve your database backup
- Scope Used: drive.file (access limited ONLY to files created by this app)
- Data Sent: Copy of local SQLite database
- Data NOT Sent: Your Google password, other Drive files, or any metadata beyond what is needed to store/retrieve the backup
- Google Privacy Policy: https://policies.google.com/privacy
5.3 AVIATION WEATHER SERVICE (when viewing weather)
- Service: aviationweather.gov (NOAA)
- Purpose: Fetch METAR and TAF weather data
- Data Shared: Geographic coordinates / station identifiers for the requested weather location
- NOAA Privacy Policy: https://www.weather.gov/privacy
5.4 MAP TILES (when using the live flight map)
- Service: OpenFreeMap (https://openfreemap.org), with OpenStreetMap as a fallback
- Purpose: Display map tiles for the live flight-tracking map
- Data Shared: Only the map tile coordinates and your device's IP address (inherent to any internet request). No flight data, account data, or personal identifiers are sent.
- Privacy Policies: https://openfreemap.org/privacy/ and https://wiki.osmfoundation.org/wiki/Privacy_Policy
5.5 GOOGLE PLAY BILLING
- Service: Google Play In-App Purchases
- Purpose: Process a one-time app purchase and verify license
- Data Stored by Us: Purchase token (to verify license validity only)
- Data NOT Shared: Payment card details (handled entirely by Google Play)
- Google Play Privacy Policy: https://policies.google.com/privacy
5.6 GOOGLE PLAY AGE SIGNALS (see Section 13)
- Service: Google Play Age Signals API
- Purpose: Receive the user's age range / parental-approval status to comply with U.S. state app-store accountability laws
- Data Handling: Age signals are queried at runtime and used to make a real-time access decision; they are not retained in long-term storage
6. PERMISSIONS
The App requests the following Android permissions:
INTERNET
Purpose: Fetch weather and map tiles; upload/download Google Drive backup; billing
ACCESS_NETWORK_STATE
Purpose: Check connectivity before making API or sync calls
com.android.vending.BILLING
Purpose: Process the one-time Google Play in-app purchase
ACCESS_FINE_LOCATION
Purpose: GPS flight tracking and local weather (while-in-use)
FOREGROUND_SERVICE / FOREGROUND_SERVICE_LOCATION
Purpose: Keep GPS flight tracking alive with a visible notification while you fly
POST_NOTIFICATIONS
Purpose: Send reminder notifications for currency and medical expiration
VIBRATE
Purpose: Haptic feedback for notifications
WAKE_LOCK
Purpose: Keep device active while displaying notifications
RECEIVE_BOOT_COMPLETED
Purpose: Reschedule reminders after device restart
READ_EXTERNAL_STORAGE (Android 12 and below)
Purpose: Read files for import on older devices
WRITE_EXTERNAL_STORAGE (Android 12 and below)
Purpose: Save exported logbooks and reports on older devices
Permissions intentionally NOT requested: background location ("all the time"), exact-alarm permissions (SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM — the App uses inexact reminders), persistent media/photo-gallery access (READ_MEDIA_IMAGES — image selection uses the Android Photo Picker, which needs no permission), camera, microphone, contacts, calendar, phone/SMS, Bluetooth, or body sensors.
Each permission is requested when first needed and can be revoked at any time through Android Settings > Apps > Pilot Dashboard > Permissions.
7. CURRENCY & CERTIFICATION MANAGEMENT
The App includes features to help you track aviation certifications and aircraft currencies:
- Medical Certificate Tracking: Monitor medical certificate expiration dates
- Instrument Rating Currency: Track required instrument proficiency
- Aircraft Checkout Requirements: Maintain checkout records per aircraft type
- Currency Compliance: Track currency requirements by aircraft category
- Automated Reminders: Receive notifications before dates expire
All currency data is stored locally and, if cloud sync is enabled, in YOUR Google Drive account. It is never sent to our servers.
8. WEATHER & LOCATION DATA PRIVACY
Weather data is requested from NOAA's Aviation Weather Center (aviationweather.gov) to provide real-time METAR and TAF information. When you request weather for your current location, your geographic coordinates are sent to the NOAA API:
- Location Data: Geographic coordinates sent to the NOAA API
- Retention: NOAA does not correlate your query with a user identity
- Third-Party Privacy Policy: https://www.weather.gov/privacy
No flight data or personal profile information is shared during weather requests. GPS flight tracks (Section 2.4) are never shared with NOAA or any other third party.
9. GOOGLE DRIVE DATA — YOUR RIGHTS AND CONTROL
If you use the optional Cloud Backup feature, you have full control over your data on Google Drive:
VIEWING YOUR BACKUP:
Open Google Drive > "Pilot Dashboard Backups" folder
DELETING CLOUD BACKUP:
Option 1: Settings > Cloud Backup > Delete Cloud Data (removes Drive backup only)
Option 2: Delete the backup file directly in Google Drive
REVOKING APP PERMISSIONS:
Visit https://myaccount.google.com/permissions, find "Pilot Dashboard", and click "Remove Access". This stops the app from accessing your Google Drive.
DISABLING CLOUD SYNC:
Settings > Cloud Backup > toggle OFF. Your local data is unaffected.
10. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy occasionally. When changes are material (such as adding new data collection), we will notify you within the app. Changes become effective upon posting. Your continued use of the App following changes means you accept the new policy.
Version history:
- v1.0.0: Initial release — local only
- v2.0.0: January 29, 2026 — Currency tracking, notifications added
- v3.0.0: April 4, 2026 — Optional Google Drive cloud backup added
- v4.0.0: June 14, 2026 — Optional GPS flight tracking (precise location, foreground service), instructor endorsements & signatures, live map; permission list corrected; storage-security description clarified
11. CONTACT & SUPPORT
For questions or concerns about this Privacy Policy:
Email: mikealpha19@gmail.com
In-App: Settings > Privacy Policy
12. USER RIGHTS
YOUR RIGHTS:
- Access: View all your data in the app
- Correction: Edit any flight entry or profile information
- Deletion: Delete any or all data locally and from Google Drive
- Portability: Export logs as PDF; download database backup from Google Drive
- Withdrawal: Disable cloud sync and revoke Google account access at any time
CALIFORNIA RESIDENTS (CCPA):
California residents have additional rights under the California Consumer Privacy Act including the right to know what personal information is collected and the right to opt out of sale (we do not sell data). Contact us for details.
EU RESIDENTS (GDPR):
EU residents have rights under GDPR including data access, correction, deletion, restriction of processing, and data portability. The legal basis for processing is consent (you enable cloud sync / start tracking) and contract performance (app functionality). Contact us for assistance.
13. CHILDREN'S PRIVACY & AGE-APPROPRIATE ACCESS
The App is intended for pilots and aviation professionals (typically 16 or older due to FAA student pilot certificate requirements). We do not knowingly collect information from children under 13. If we become aware of such collection, we will delete the information immediately.
To support U.S. state app-store accountability laws (such as Texas SB 2420), the App uses the platform-provided Play Age Signals API to receive a user's age range and parental-approval status where applicable, and may restrict access for supervised accounts whose approval has been denied. Age-signal data is used for a real-time access decision and is not retained in long-term storage.
14. DATA RETENTION
- Flight Data, Endorsements, GPS Tracks: Retained on device until you delete them
- Cloud Backup: Retained in your Google Drive until you delete it
- Temporary Cache / In-Memory Calculations: Cleared when the app closes
- Notification Logs: Deleted after notification is displayed
- Google Account Token: Retained in device secure storage until you sign out
- Age Signals: Not retained beyond the real-time access decision
15. SECURITY LIMITATIONS
While we implement industry-standard practices, no system is 100% secure. We recommend:
- Using a device passcode or biometric lock
- Keeping Android updated to the latest security patch
- Reviewing app permissions regularly
- Using Google's 2-Step Verification on your Google account (if using cloud sync)
- Monitoring https://myaccount.google.com/permissions for connected apps
If your device is lost or stolen, you can revoke app access at https://myaccount.google.com/permissions to prevent unauthorized access to your Google Drive backup.
16. LEGAL BASIS FOR PROCESSING (GDPR)
The App processes data based on:
1. Consent: You explicitly provide flight data; you opt in to cloud sync; you start GPS tracking
2. Contract: To deliver core app functionality you have purchased
3. Legitimate Interest: Crash logging to improve app stability (local only)
17. DATA PROCESSING SUMMARY
Data Type | Storage | Transmission | Retention
-------------------------------- | --------------- | ------------------------- | ---------------------------
Flight Logs | Local SQLite | Cloud Drive (optional) | Until deleted
Pilot Profile | Local SQLite | Cloud Drive (optional) | Until deleted
Aircraft Data | Local SQLite | Cloud Drive (optional) | Until deleted
Currencies | Local SQLite | Cloud Drive (optional) | Until deleted
Endorsements & Signatures | Local SQLite | Cloud Drive (optional) | Until deleted
GPS Flight Tracks | Local SQLite | Cloud Drive (optional) | Until deleted
E6B / Performance Calculations | Memory only | Never | Cleared on app close
Device Motion (accelerometer) | Memory only | Never | Real-time only
Weather Queries | Not stored | NOAA (coordinates) | Not stored with identity
Map Tiles | Cached locally | OpenFreeMap / OSM (IP) | Standard cache
Notifications | Device only | Never | Standard Android retention
Preferences | Local | Cloud Drive (optional) | Until deleted
Google Email | Local prefs | Never (to us) | Until sign-out
Purchase Token | Local prefs | Never | Until app uninstall
Age Signals | Not stored | Never (to us) | Real-time decision only
18. COMPLIANCE STANDARDS
This Privacy Policy is designed to align with:
- Google Play Store Developer Program Policies
- Google Play Data Safety section requirements
- U.S. state app-store accountability laws (e.g., Texas SB 2420) via Play Age Signals
- GDPR (for EU residents)
- CCPA (for California residents)
- California Online Privacy Protection Act (CalOPPA)
19. PURCHASE INFORMATION
- This app uses Google Play Billing for a one-time purchase
- Purchase information is processed and secured entirely by Google Play
- We store your purchase token locally to verify your license status
- Purchase data is not shared with third parties
- We do not collect payment card information or billing addresses
- Refunds are handled by Google Play
By using Pilot Dashboard, you agree to this Privacy Policy.
Last Updated: June 14, 2026
Version: 4.0.0
For questions: mikealpha19@gmail.com