Privacy Policy
Last updated: 2026-09-25 · Effective for the FlightFlow iOS application and the FlightFlow marketing website (www.rotorkeep.com/flightflow).
This Privacy Policy explains what data FlightFlow collects, how it is used, how it is stored, and how you can delete it. We aim to keep FlightFlow as local-first as possible — your flight data lives on your device by default.
1. Data FlightFlow collects
FlightFlow collects the following categories of data only when you use the corresponding feature:
1.1 Account information (optional, sign-in only)
- Account name, email address, or phone number used to sign in.
- Password hash for credential sign-in.
- Preferences.
- The minimum information needed to send and verify SMS codes.
Personal flight tools can be used locally without an account. Company access and cloud sync require sign-in.
1.2 Aircraft data
- Aircraft registration, model, empty-weight override, arm override and operating status.
- Stored on device by default; synced to the cloud only if you sign in and enable Cloud Sync.
1.3 Flight task data
- Task number, date, mission type, summary, weather, IMSAFE self-check, weight & balance inputs, performance inputs.
- Per-leg records: sequence, engine-on / engine-off timestamps, duration, cycles, origin / destination, role, remarks.
1.4 Flight records
- PDF task reports generated locally on your device.
- PIC signatures captured on the device.
1.5 Cloud sync data
- If you sign in and enable Cloud Sync, the above aircraft / task / record / settings data is replicated to the FlightFlow backend over HTTPS so it can be restored on a fresh device.
- Sync uses HTTPS transport encryption; authentication uses a short-lived access token and refresh token.
1.6 Diagnostics
- Server request logs may include a trace ID, client IP address, request path and query string, HTTP method and status, and duration. Account or business changes may also create audit entries linked to an account identifier. These records support security, troubleshooting, and abuse prevention.
- FlightFlow does not use third-party advertising or analytics SDKs.
1.7 Current location (optional)
Only when you tap “Use current location” does iOS use your precise location once and ask Apple’s reverse-geocoding service for a region name such as province, city, or district. FlightFlow does not send raw coordinates to its own server. The resulting text is saved in the task and syncs if you enable Cloud Sync.
2. Why FlightFlow uses this data
- Provide the app's features — task workflow, weight & balance, performance, and PDF task reports.
- Cloud sync & multi-device restore — when you sign in, your data is replicated so a new device can pick up where you left off.
- Account management — authentication, password reset, account deletion.
- Service quality — diagnostic logs help us diagnose crashes and outages.
3. Sharing and service providers
- FlightFlow does not sell your data to third parties.
- FlightFlow does not use your flight data for advertising or profiling.
- FlightFlow does not share your data with law enforcement except as strictly required by applicable law.
- Alibaba Cloud hosts the service and sends requested verification messages. These providers process only the data needed for the service under our instructions and must protect it to the same standard described here.
4. Where your data is stored
- On device — task data is stored in the app's protected container; sign-in tokens are stored in iOS Keychain.
- Cloud — if you enable Cloud Sync, data is stored in China on Alibaba Cloud infrastructure operated by 济南航维科技有限公司, with access limited to authorised operators.
5. Retention & deletion
You can initiate account deletion in the app at any time.
In the app: Settings → Account → Delete Account. Deletion is completed immediately after confirmation, and personal-workspace data is deleted immediately. Company flight records and minimum required audit records may be retained where required by law.
See Account Deletion for data deleted immediately and records retained where required by law.
6. Your rights
- Access — export available task reports as PDF in the app, or contact us for a copy of your personal data.
- Rectification — edit any aircraft, task or record from within the app.
- Deletion — see above.
- Stop sync — signing out stops account sync on that device; uninstalling removes local data but does not delete server-side data.
- Withdraw location access — change FlightFlow's location permission in iOS Settings. You can also contact us about data already stored in a task.
7. Children's privacy
FlightFlow is a professional cockpit tool and is not directed at children under 16. We do not knowingly collect personal data from children.
8. International transfers
When Cloud Sync is enabled, synced data is processed and stored on infrastructure in China. If you use the app outside China, the data you choose to sync may be transferred to China.
9. Changes to this policy
We may update this policy. Material changes will be announced in-app and on this page. The "Last updated" date above will be revised.
10. Contact
Operator: 济南航维科技有限公司. Registered address: 山东省济南市历城区郭店街道相公吉祥苑小区2号商业楼3号二层227. For privacy questions or complaints, contact Koncege@163.com.