Privacy Policy

Airmates is a flying club management platform. We provide a web app at airmates.club and a companion iOS app (“Airmates” on the App Store) that let club members schedule aircraft, log flights, manage dues, and communicate with other members.

This policy explains what information Airmates collects, how we use it, who we share it with, and the choices you have. We wrote it in plain language because legalese helps no one.

We collect only what we need to run your flying club.

Account information

• Your name and email address, provided when you accept an invitation from a club administrator or sign up.
• A hashed version of your password (we never store the plain text).
• Optional profile details you choose to add: phone number, FAA certificates, medical expiration dates, flight reviews, etc. These support currency tracking and instructor compliance.

Flight and booking data

• Bookings, flight logs, squawks, maintenance entries, and other records you create inside the app.
• Visibility of these records is controlled by your club’s settings — typically, club members see their own data plus shared club records.

Payment information

• When you add a payment method or pay club dues, payment details (card number, expiration, billing ZIP) are collected directly by Stripe, our payment processor. Airmates does not see, store, or transmit your card number. We only receive a token and the last four digits.
• If your club uses Stripe Connect, dues and aircraft rental payments are routed by Stripe directly to your club’s account.

Device data (iOS app)

• Push notification token. If you allow push notifications, iOS gives us a token Apple uses to deliver notifications. We send the token to our servers so we can notify you about booking changes, squawk responses, and similar events. The token does not identify your device or person.
• Apple Calendar. If you grant the iOS app calendar access, the app writes your bookings into your Apple Calendar so you can see them alongside your other events. The app only writes entries for bookings you create; we do not read your other calendar events.
• Face ID / Touch ID. If you enable biometric sign-in, your fingerprint or face data never leaves your device. iOS just tells us whether the biometric check passed.
• Camera. If you tap “Scan card” while adding a payment method, Stripe’s SDK opens the camera to read your card number. The image is processed on-device by Stripe and is not uploaded to Airmates.

Server and security logs

• IP address, browser/device user agent, and timestamps of sign-in attempts. We keep these for security (detecting brute-force attempts) and routine operations. Logs are retained for up to 90 days.

• We don’t track you across other apps or websites. There’s no advertising SDK and no third-party tracker in the iOS app.
• We don’t collect your location. The iOS app does not request the location permission.
• We don’t access your photos, contacts, microphone, health data, motion, or HomeKit.

• To provide the service you signed up for — scheduling, communication, billing, and record-keeping for your flying club.
• To send you operational notifications (booking confirmations, schedule changes, squawk updates). Push notifications are optional and can be turned off in iOS Settings.
• To send transactional emails (password resets, dues receipts). We do not send marketing email.
• To detect and respond to abuse, fraud, or security incidents.
• To comply with legal obligations.

We share only what we have to, with vetted third parties:

• Stripe — payments and stored payment methods. See stripe.com/privacy.
• Supabase / Vercel / Cloudflare — application hosting, database, and edge delivery. They process data on our behalf under data-processing agreements.
• Apple Push Notification Service — delivery of push notifications to your iOS device.
• Email providers (Resend, SES) — transactional emails like password resets.

We never sell your information. We do not share it with advertisers. If we are ever required to disclose information by law (subpoena, court order), we will notify you unless legally prohibited.

• Access and correction. You can view and edit your profile at any time inside the app. Email us if you want a copy of all data we hold about you.
• Deletion. Email darren@airdev.us to request account deletion. We’ll delete or anonymize your personal data within 30 days, except for records we must retain by law (e.g. billing records for tax purposes).
• Push notifications. Turn them off any time in iOS Settings → Notifications → Airmates.
• Calendar access. Revoke any time in iOS Settings → Airmates → Calendars.

We keep your account information while your account is active. If you delete your account, we delete or anonymize personal data within 30 days. We retain billing records as required by tax law (typically 7 years in the US). Aggregated, anonymized statistics (e.g. “the average club books 12 flights per week”) may be retained indefinitely.

• All traffic between your device and our servers is encrypted with TLS 1.2+.
• Passwords are stored as bcrypt hashes, never in plain text.
• Database access is restricted to least-privilege application credentials.
• We log all administrative access and security-relevant events.

No system is perfectly secure. If you suspect your account has been compromised, change your password and email us immediately.

Airmates is not intended for children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, email us and we’ll delete it.

Airmates operates from the United States. If you use the service from outside the US, your information will be transferred to and processed in the US, which may have different data protection laws than your country.

If we materially change what we collect or how we use it, we’ll update the “Last updated” date at the top and, for significant changes, notify active users by email or in-app message. Continued use of the service after the effective date constitutes acceptance of the change.

Questions, requests, or complaints? Email darren@airdev.us.