Off Chocks
Get the app

Privacy Policy

Last updated 4 November 2026

Effective date: 4 November 2026

This Privacy Policy explains how Off Chocks ("Off Chocks", "we", "us", "our") collects, uses, stores, and discloses your personal information when you use the Off Chocks app for iPhone and iPad, the web app at app.offchocks.com, and the website offchocks.com (together, the "Service").

Off Chocks is operated by a sole trader registered in Australia. Contact: support@offchocks.com.

This policy is written to comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA).

1. What information we collect

We collect the minimum information necessary to provide a digital pilot logbook service.

Information you provide to us:

  • Email address (required for account creation)
  • Password (stored as a salted hash; we never see or store the plaintext)
  • Flight log entries you create (dates, times, aircraft, crew, routes, hour types, remarks)
  • Aircraft registrations and types you add
  • Crew members you record on flights
  • Licences, ratings, and credentials you record
  • Profile details you choose to add for your printed logbook, such as your name, date of birth, and licence number
  • Aviation authority preference (CASA, FAA, EASA, or others)
  • Theme and display preferences
  • Your plan (free or Pro) and its renewal status

Information collected automatically:

  • Anonymous usage events via Plausible Analytics. We track aggregate events such as "signup completed" or "checkout started" to understand how the Service is being used. Plausible does not use cookies, does not store IP addresses, and does not track individual users across sessions. No personal information is included in these events.
  • How you found us. On your first visit the app keeps, on your device, any campaign tag in the link you followed (such as ref or utm), the address of the page that sent you without its query string, the page you landed on, and when. When you create an account, we save these with it, along with whether you signed up on the web or in the iPhone and iPad app. If you installed the app after seeing or tapping one of our ads on the App Store, Apple tells the app which of our campaigns, ad groups and keywords the ad belonged to, and we save those numbers with your account too. Apple's answer does not identify you or your device. We use all of this only to count sign-ups per source.
  • Error reports via Sentry. When the app encounters an error, a report is sent to Sentry to help us fix bugs. It includes a random account identifier (your user ID), the app version, your device and browser type, and technical details of the error, such as the screen and the steps that led to it. We remove email addresses and the contents of network requests before a report is sent.
  • App update checks via Capgo. The iPhone and iPad app checks for updates by sending Capgo the app version, a random device identifier, and your device's operating system version.
  • Device information when you contact us about an issue, including app version, operating system version, and device model. This is collected only if you opt to send a support report.

We do not collect:

  • Your address or phone number
  • Your location (we do not access device GPS)
  • Your contacts, calendar, or photo library. When you scan an ACARS printout or import a roster PDF, the app reads it on your device and does not upload it.
  • Advertising identifiers (IDFA / GAID)
  • Biometric data
  • Health or medical data. The health estimates (cosmic radiation, noise, UV-A, and body-clock load) are worked out on your device from your flight records, and your health settings, such as headset type, stay on your device.

2. How we use your information

We use the information we collect to:

  • Provide and maintain the Service
  • Authenticate you and protect your account
  • Sync your data across your devices
  • Generate the reports, exports, and statistics you request
  • Process and manage your subscription
  • Diagnose and fix bugs (via error reports)
  • Understand aggregate product usage (via privacy-friendly analytics)
  • Respond to your support requests
  • Comply with legal obligations

We do not use your data for advertising. We do not profile you. We do not sell your data.

3. Where your data is stored

Your account and flight data are stored on Supabase infrastructure (managed Postgres hosted on AWS, Mumbai region). Supabase provides encryption at rest, encryption in transit, automated backups, and SOC 2 compliance. The website and the web app are delivered by Cloudflare.

Your data may be transferred internationally as part of the Service. By using the Service, you consent to this transfer. We rely on Standard Contractual Clauses or equivalent mechanisms where required by your local data protection laws.

4. Who we share your data with

We do not sell your personal information.

We share your data only with the following service providers, which are bound by contract to handle your data securely and only on our instructions:

  • Supabase (database, authentication, and sync infrastructure)
  • Stripe (payments made on our website): Stripe handles your card details, and we never see your full card number
  • Apple (App Store distribution and in-app purchase processing): for users who install via the App Store
  • RevenueCat (subscription status for App Store purchases): receives your user ID and your purchase records
  • Sentry (error reporting): receives the error reports described in section 1
  • Plausible Analytics (anonymous usage analytics): no personal data collected
  • Capgo (app updates): receives the update checks described in section 1
  • Cloudflare (delivery of the website and the web app): processes your IP address to deliver pages
  • CARTO (map images on the flight map): receives your IP address and the map area you view

We do not share your flight data, account details, or any personal information with airlines, recruiters, third-party logbook services, advertisers, data brokers, or any other party.

If we are subject to a lawful legal process (such as a subpoena) that requires us to disclose your data, we will notify you to the extent permitted by law before doing so.

5. Your rights

You have the following rights regarding your data. To exercise any of them, email support@offchocks.com.

  • Access: Request a copy of the personal data we hold about you.
  • Export: Download your full flight log at any time as a backup file, CSV, or PDF, directly from within the app. This is available on every plan, without contacting us.
  • Correction: Edit or correct your data directly within the app at any time, or request correction via email.
  • Deletion: Delete your account permanently via Settings → Danger Zone → Delete account. This removes all your flight data, crew records, aircraft records, credentials, and account information from our systems. Deleting your account also cancels a subscription bought on our website; an App Store subscription must be cancelled in your Apple account settings. Deletion is irreversible, so we recommend exporting a backup first.
  • Restrict processing / Object: Email us if you want us to stop processing your data in a specific way.
  • Data portability: Use the export function to obtain a machine-readable copy of your data.
  • Withdraw consent: Stop using the Service and delete your account at any time.

If you believe we have not handled your data correctly, you can complain to:

  • Australia: Office of the Australian Information Commissioner (OAIC): oaic.gov.au
  • EU: Your local data protection authority
  • UK: Information Commissioner's Office (ICO): ico.org.uk
  • California: California Attorney General: oag.ca.gov

6. How long we keep your data

We retain your data for as long as your account is active. Flights you delete move to Recently Deleted, where you can restore them for 30 days. If you delete your account, your data is permanently removed from our active database within 30 days, and from backups within 90 days.

You are responsible for retaining your own logbook records as required by your aviation authority. Our export functions are provided to help you meet your record-keeping obligations.

7. Security

We protect your data using:

  • Encryption in transit (TLS 1.2 or higher for all network communication)
  • Encryption at rest (database-level encryption on Supabase infrastructure)
  • Salted password hashing (bcrypt)
  • Row-level security policies that ensure you can only access your own data

No system is completely secure. If we become aware of a data breach affecting your information, we will notify you and the relevant authorities in accordance with applicable law.

8. Children

The Service is not intended for users under 13 years of age. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top of the policy will reflect the latest version. For material changes, we will notify users via in-app message or email.

10. Contact

For any questions about this policy or your data, email support@offchocks.com. The operator is a sole trader registered in Australia.