Privacy Policy

OOOIPilot (“we”, “us”), a product of AnchorfulVentures by Anchorful LLC, is built so that your logbook stays yours. This policy explains what we collect, how it’s used, and the controls you have.

What we collect

• Account information - your email address (and, if you sign in with Google, your basic Google profile) used to authenticate you and sync your data.
• Logbook data - the flights, times, routes, aircraft, crew, and notes you create.
• Photos you scan - OOOI page images are read by OCR on your device. Two things can send a scan to us: the optional cloud-OCR rescue for a difficult page, and the scan-contribution setting described below.
• Limited technical data - basic, privacy-respecting diagnostics and error reports to keep the app working.

How your data is stored

Your logbook is stored on your device first (so the app works offline). When you sign in, it also syncs to your private account in our cloud database, protected by row-level security so it is visible only to you. We never sell your logbook data, and your flights are never used for advertising.

Helping OOOIPilot read your fleet (scan contributions)

OOOIPilot gets better at reading OOOI pages by studying real ones. This setting is on by default, and you can turn it off in two places: the checkbox on the review card every time you scan, and Settings. It only ever runs when you are signed in.

While it is on, confirming a scan uploads:

• the page image you photographed, and
• the parsed flight fields from that page - OUT, OFF, ON, IN, block time, departure and arrival airports, tail, and flight number - both as the OCR read them and as you corrected them, so we can see what it got wrong.

Crew names and notes are never included. Your crew never agreed to anything here, so their names stay on your device, and so does anything you typed into notes. Your loyalty numbers, documents, and trusted-traveler IDs are never part of a contribution either.

Contributed scans go to private storage only we can read, are used solely to improve OCR accuracy for every pilot, and are never sold, shared for advertising, or attached to your public profile. Once a scan has been used for that training, the image is deleted - within 30 days at the outside. We keep only the anonymous record of what the OCR read versus what it should have read.

Turn it off and your scans simply never leave your device.

Personal and loyalty data

Your loyalty numbers, hotel and rental-car memberships, and trusted-traveler IDs (Known Traveler Number, Global Entry, TSA PreCheck, and Known Crewmember) are stored in your own account, protected by row-level security so that only you can access them. They are encrypted at rest by our database provider. We never share, sell, or use them to train any model. When you sign out or turn off sync for this data, it stays only on your device. They are deleted when you erase your data or delete your account.

Analytics & advertising

We use Google Analytics (GA4) to understand how the site is used (pages visited, general device and country), and Microsoft Advertising to measure the performance of ads that bring pilots to OOOIPilot. These set cookies and collect standard web analytics, but they neversee your logbook, flights, or scanned photos. You can opt out with a browser extension or your device’s privacy controls.

Service providers

We use a small set of trusted processors strictly to operate the service:

• Supabase - authentication and your private cloud database.
• Vercel - application hosting.
• Stripe - subscription payments (we never see or store your full card details).
• Resend - transactional email such as sign-in links.
• Sentry - error diagnostics.
• OpenAI - only if you opt into cloud-OCR for a specific image.
• Google Analytics - aggregate site-usage measurement.
• Microsoft Advertising - ad-campaign measurement.

Your controls

• Export your entire logbook to CSV/PDF at any time.
• Delete your data from Settings; to remove your account entirely, follow Delete your account.
• Restore an erased flight log within 30 days from Settings, before it is permanently purged.
• Turn off scan contributions at any time, from the review card when you scan or from Settings.
• Access & correction - your data is editable directly in the app.

Data retention

We keep your data while your account is active. When you delete your account, we delete your associated cloud data, except where we must retain limited records (e.g., payment records) to meet legal obligations.

When you erase your flight log, it is not removed immediately: we hold it in a recoverable state for 30 days so an accidental erase can be undone (from Settings or by contacting us), and we email you to confirm the erase and explain how to restore it. After 30 days the erased flights are permanently purged and can no longer be recovered.

Security

Data is encrypted in transit. Access to your cloud data is restricted to your authenticated account. No system is perfectly secure, but we work to protect your information and limit what we collect in the first place.

Children

OOOIPilot is intended for professional pilots and is not directed to children under 16.

Changes

We may update this policy; we’ll revise the “last updated” date and, for material changes, notify you in-app or by email.

Contact

Questions about privacy? Email support@oooipilot.com.