SkyLedgr Privacy Policy
Summary
SkyLedgr is an offline-first pilot logbook and paper-logbook scanner. Your logbook lives on your device and works without a network connection.
You do not need an account to use the app. A cloud account and cloud AI processing are optional and off until you turn them on.
SkyLedgr has no advertising, no analytics and no tracking SDKs. We do not sell your data and we do not track you across other apps or websites.
Data stored on your device
The app stores your flights and their revision history, people and crew records, aircraft profiles, scan sessions with page images and recognized text (OCR evidence), learned scanner vocabulary, and settings.
This data stays on your device unless you choose to send it somewhere described below.
You can create encrypted backups. They use AES-256-GCM with a key derived from your password. The password is never stored or sent anywhere. If you lose it, the backup cannot be recovered.
Optional cloud account
If you sign in on the Cloud Sync screen, the app sends your email address, your user ID, and your synced records with their revision history, plus audit events about changes to those records. The synced records are flights, aircraft, people, endorsements and signature strokes, credential cases and pairings. This lets you keep your logbook on more than one device.
When you invite someone to pair with you or to join a school, the invited person's email address is sent to SkyLedgr's cloud and to that person.
These records are stored in a managed PostgreSQL database operated by Supabase, in the region configured for the SkyLedgr project. Your login session is kept in the iOS Keychain through Expo SecureStore.
To delete your cloud data, use Delete cloud account on the Cloud Sync screen. It deletes your account and your cloud records. Your local logbook is not affected. Instructor signatures you gave to other pilots remain as their evidence.
Instructor signatures and schools
When you ask an instructor to sign a flight, they can see only the exact flight revision you sent. They cannot see the rest of your logbook.
Schools can see their roster and fleet. They cannot see your personal flights.
If you send an endorsement to an instructor by email, the instructor's email address and the endorsement content are sent to SkyLedgr's server to deliver the signature request. The signed record and the instructor's email address are kept so the record can be verified, and are deleted with your account.
If you allow notifications, your device's push token is stored to notify you about signing requests. It is deleted when you sign out or delete your account. Notifications are delivered through Expo's push service and Apple.
Instructor credential review
When an instructor asks for a credential review, the app sends the name on the certificate, the certificate number, the authority (FAA or Transport Canada) and the consent version to SkyLedgr's cloud.
For the FAA, the name is matched against the FAA Releasable Airmen file. Only the match result is stored.
If you photograph your certificate card, it is read on the phone. Only the comparison result is sent: name match, number match, instructor wording and confidence. The image is never sent.
A SkyLedgr reviewer checks the case and may contact the instructor. The case and its review events are deleted with the account.
Optional cloud AI processing
Cloud AI is off by default. Nothing is sent unless you enable it and tap the analyze action on a scanned page.
When you do, the page image and its recognized text are sent to a SkyLedgr relay, which forwards them to OpenAI. Requests are sent with storage disabled (store set to false). OpenAI may still retain API inputs for up to 30 days for abuse monitoring under its API data policy. The relay holds the provider key so it is never in the app.
AI results are proposals only. Nothing is added to your logbook until you review it and accept it yourself.
Purchases are handled by Apple. SkyLedgr stores only the subscription status and the Apple-signed receipt on your phone, and sends the receipt to the SkyLedgr AI service only with an AI scanning request. When you are signed in, SkyLedgr also stores the subscription's product, expiry date, environment and Apple's transaction identifier with your account so Pro follows your account on other devices.
Weather (SkyLedgr Pro)
With SkyLedgr Pro, the app sends the airport codes from your logbook to the US National Weather Service (aviationweather.gov) to fetch weather, and caches the result on your phone.
Camera and photos
The camera and your photo library are used only to scan logbook pages and certificate cards.
Images stay on your device unless you enable cloud AI processing.
Service providers
SkyLedgr uses these providers to operate the service: Supabase (account and cloud records), Render (SkyLedgr services), OpenAI (cloud AI, opt-in), Resend (endorsement email), and Apple and Google (sign-in and purchases).
Data retention and your choices
Local data stays on your device until you delete it or delete the app. Deleting the app removes the local logbook, so export or back up first if you want to keep it.
Cloud data is kept until you delete your cloud account.
You can export your logbook as CSV or PDF, or as an encrypted backup, at any time.
For questions or requests about your data, contact us at the email address on this page.
Children
SkyLedgr is not directed at children under 13, and we do not knowingly collect data from them.
Changes to this policy
The date this policy was last updated is shown at the top. We will announce material changes in the app.