Privacy Notice

SquawkIt is an aircraft maintenance logbook and fleet-management app for pilots, owners, and mechanics. This notice explains what data we hold, how it is stored and synced, what happens when you export your records, and how we use diagnostic logging to keep the app reliable.

1. Data we hold

The data associated with your account falls into three groups:

• Account data. When you sign in with Google or Apple, we receive a basic identity profile — typically your name, email address, and a unique account identifier provided by that sign-in service. We do not receive or store your Google/Apple password.
• Your content. The records you create in the app: aircraft and fleet details, maintenance logs, inspections, service bulletins, airworthiness directives, squawks, tasks, technician sign-offs, and any files, photos, or links you attach to them.
• Diagnostic data. Technical information generated as the app runs — described in section 5.

2. Google Sign-In and your Google Account data

If you choose to sign in with Google, SquawkIt authenticates you through Google Sign-In via Firebase Authentication. When you sign in this way, Google shares your name, email address, profile photo, and a unique Google account identifier with the app so we can create and authenticate your account. We request only the standard identity scopes needed to sign you in (basic profile and email) — SquawkIt does not request access to your Google Drive, Calendar, Contacts, Gmail, Photos, or any other Google service, and we never receive or store your Google password.

We use this Google Account data only to:

• authenticate you and keep your account secure;
• create and pre-fill your in-app profile — your name and avatar are used to populate the "self" technician on your records and account screen; and
• pre-fill the destination address when you choose to have an exported logbook report emailed to you (section 4) — you can change this address before sending.

Your Google Account name, email, and photo are stored in Firebase Authentication and in your local-first record store, synced to Cloud Firestore under your account, as described in section 3. We do not sell your Google Account data, use it to serve ads, or share it with third parties, except: (a) with Google/Firebase, which processes it on our behalf to provide authentication and sync (section 6); and (b) your email address, if you request an emailed export, is passed to our transactional email provider solely to deliver that export to you (sections 4 and 6). Our access to, use of, and transfer of information received from Google APIs adheres to the Google API Services Terms of Service and the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke SquawkIt's access to your Google Account at any time from your Google Account permissions page, and you can request deletion of the Google-derived data we hold as described in section 8.

3. How your data is stored

SquawkIt is local-first. Your records are written to a database on your own device first, so the app works fully offline and your data is always available — even with no signal in the hangar.

When you are signed in and connected, a background sync process copies your records to our cloud backend (Google Firebase — Cloud Firestore for record data and Firebase Storage for attachment files) so they are backed up and kept consistent across every device where you sign in. Data is encrypted in transit, and the backend stores it under your account identifier.

Your data is associated with your account and is not sold. We do not share your content with other users unless you deliberately share it — for example, by sending someone an exported report (section 4). We use the cloud backend solely to provide, back up, and sync the service.

If you sign out, the local copy of your data is removed from that device; your synced records remain in the backend and reappear when you sign back in. If you delete your account or ask us to delete your data, we remove your records and attachments from the backend; please allow a reasonable period for deletion to propagate through backups.

4. Data exports

You can export your records on demand from Settings → Export logs, for a single aircraft or your whole fleet, optionally filtered by date range. An export is a point-in-time snapshot bundled as an archive containing spreadsheet files (CSV / XLSX), a PDF report, and any attachment files referenced by the exported records.

The textual export is generated on your device from the local-first store. If you choose to have an export emailed, the archive is uploaded to our cloud storage and a time-limited download link is generated and sent to the address you specify; the app keeps an export history so you can re-download, re-send, or delete past exports.

Exports exist so you keep ownership of your records — for a pre-buy, an annual, a handoff to an A&P/IA, or simply a personal backup that survives any future migration.

5. Diagnostic logging

To keep SquawkIt stable and to diagnose problems, the app records technical diagnostic information such as crash reports, error traces, performance metrics, app version, device and operating-system type, and basic event logs about how features are performing. This data is used only to monitor reliability, fix bugs, and improve the app.

We aim to keep diagnostic logs focused on technical detail rather than the contents of your records. Diagnostic data is retained only as long as it is useful for troubleshooting and quality monitoring, and is then discarded.

6. Service providers

We rely on Google Firebase for authentication, cloud database, file storage, and diagnostics, and on Google and Apple for sign-in. When you request an emailed export (section 4), the download link is delivered through a transactional email provider (Resend), which receives only the destination email address and the export delivery content needed to send that message. These providers process data on our behalf, under their own terms and security practices, solely to provide the service. We do not use your content, or your Google Account data, to serve third-party advertising.

7. Your choices

• Use the app offline; sync only happens when you are signed in and connected.
• Export and download your records at any time.
• Sign out to remove the local copy of your data from a device.
• Request access to, correction of, or deletion of your account data.
• Revoke SquawkIt's access to your Google Account from your Google Account permissions page at any time.

8. Deleting your account

If you'd like your account and the data associated with it deleted, submit a request using this form: Account Deletion Request. Once we receive your request, we remove your records and attachments from the backend; please allow a reasonable period for deletion to propagate through backups.

9. A note on certified records

SquawkIt is a personal convenience tool. It does not replace the official aircraft logbooks required by your aviation authority — keep your certified records as you always have. Treat your exports as backups and snapshots, not as the legal source of truth.

10. Changes to this notice

We may update this notice as the app evolves. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify you in the app.

11. Contact

Questions about this notice or your data? Email fanfly.dev@gmail.com.