Privacy Policy

1. Introduction

PlanePal ("we," "our," or "us") provides a web application for managing aircraft ownership and partnerships. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile photo from your Google account. We store this information to create and manage your PlanePal account.

Google Calendar Data

If you choose to connect your Google Calendar, we access your calendar events to enable scheduling features. We only read and write events related to aircraft reservations. We store calendar sync tokens to efficiently synchronize changes. You can disconnect your calendar at any time from Settings.

Aircraft & Flight Data

You may provide aircraft details (registration number, make, model, engine/propeller information), flight records (tach times, routes, dates), maintenance logs, squawk reports, inspection records, and logbook entries. This data is stored to provide the core functionality of the service.

Financial Data

You may enter expense records, payment information between partners, and upload receipts or invoices. This data is used for cost-sharing calculations and is only visible to members of your aircraft partnership.

Uploaded Documents

You may upload photos, PDFs, and other documents (receipts, logbook pages, maintenance records). These files are stored securely and are only accessible to members of your aircraft.

3. How We Use Your Information

• To provide, operate, and maintain the PlanePal service
• To manage aircraft scheduling and Google Calendar synchronization
• To track flights, maintenance, inspections, and AD compliance
• To calculate and manage cost sharing between aircraft partners
• To process uploaded documents using AI (Google Gemini) for data extraction — such as logbook entries, receipts, and maintenance records
• To provide AI-powered analysis of squawk reports and maintenance questions
• To send you notifications related to your aircraft (e.g., upcoming inspections)
• To improve and develop the service

4. Third-Party Services

We use the following third-party services to operate PlanePal:

• Google Firebase — Authentication (Google OAuth sign-in), Firestore database, and Cloud Storage for file uploads
• Google Calendar API — Bidirectional calendar synchronization for aircraft reservations (only when you explicitly connect your calendar)
• Google Gemini AI — Processing uploaded documents (logbooks, receipts, maintenance records) to extract structured data, and analyzing squawk reports. Document content is sent to Google's API for processing and is subject to Google's API terms.
• Anthropic Claude AI — Used as a fallback AI service for chat-based maintenance advisory features
• FlightAware — Optional flight history import using your aircraft's registration number

We do not sell your data to any third party. Data shared with the services above is limited to what is necessary to provide the described functionality.

5. Data Sharing

Your aircraft data is shared only with other members of your aircraft partnership. Each aircraft operates as an isolated tenant — members of one aircraft cannot see data belonging to another.

We do not share your personal information with third parties for marketing purposes. We may disclose information if required by law or to protect our legal rights.

6. Data Security

We use industry-standard security measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS)
• Firebase Authentication with Google OAuth 2.0
• Firestore security rules enforcing role-based access control and tenant isolation
• Secrets stored in Google Cloud Secret Manager (never in code)
• Point-in-time recovery (PITR) enabled for database disaster recovery

7. Data Retention & Deletion

We retain your data for as long as your account is active. You may request deletion of your account and associated data by contacting us at the email below. Upon account deletion, we will remove your personal information and disassociate your data from your identity. Shared aircraft records (flights, maintenance) may be retained in anonymized form for the benefit of remaining partnership members.

8. Google API Disclosure

PlanePal's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data (profile information and calendar data) for the purposes described in this policy — providing and improving the PlanePal service. We do not use Google user data for advertising.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Disconnect your Google Calendar at any time
• Revoke PlanePal's access to your Google account via your Google Account settings

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the effective date at the top of this page. Your continued use of PlanePal after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: support@planepal.ai