Terms of Use & Privacy Policy

SquawkIt is a maintenance logbook for anything worth maintaining: an aircraft, car, motorcycle, bike, boat, home, or something of your own. We call each of these a thing below. It is for owners, pilots, mechanics, and the people they share a thing with. This page has two parts. The Terms of Use (sections 1–8) set out the agreement between you and SquawkIt, including how the SquawkIt Pro subscription works. The Privacy Policy (sections 9–20) explains what data we hold, how it is stored and synced, what happens when you export your records, and how we use diagnostic logging to keep the app reliable.

Part 1 — Terms of Use

1. Agreement

By creating an account, installing the app, or using SquawkIt on any platform (Android, iOS, or the web at squawkit.fanfly.dev), you agree to these Terms of Use and to the Privacy Policy below. If you do not agree, do not use SquawkIt. SquawkIt is operated by fanfly.dev (“we”, “us”).

2. Using SquawkIt

We grant you a personal, non-exclusive, non-transferable, revocable licence to use the app and the service for keeping and managing maintenance records. You must be at least 13 years old (or the age of digital consent where you live). You are responsible for keeping your sign-in method secure and for all activity under your account.

3. Your content

You own the records, photos, files, and other content you put into SquawkIt. You grant us only the permission needed to store, sync, back up, export, and deliver that content to you and to the people you choose to share it with, as described in the Privacy Policy. You are responsible for having the right to upload and share what you add, including anything you share with other members of a shared thing.

4. Acceptable use

You agree not to:

• use SquawkIt for anything unlawful, or upload content you have no right to share;
• interfere with, overload, or attempt to gain unauthorised access to the service or other people’s accounts and data;
• copy, modify, reverse-engineer, or resell the app or service, or circumvent the subscription or any other access control.

5. Subscriptions (SquawkIt Pro)

SquawkIt offers an optional paid tier, SquawkIt Pro, sold as an auto-renewing subscription through the Apple App Store and Google Play. Price and billing period are shown in the app before you buy. Payment is charged to your app store account at confirmation of purchase. The subscription renews automatically at the end of each period unless you cancel at least 24 hours before the current period ends. You can manage or cancel it at any time in your app store account settings — on iOS under Settings → Apple Account → Subscriptions, on Android in the Google Play app under Payments & subscriptions. Cancelling stops future renewals; you keep Pro until the end of the period you have already paid for. Refunds are handled by the app store under its own policies.

For subscriptions purchased through the Apple App Store, your use of the app is also governed by Apple’s standard Licensed Application End User License Agreement: Apple Terms of Use (EULA).

How we handle subscription data is described in section 13.

6. Certified records and disclaimers

SquawkIt is a personal convenience tool. It does not replace any official records you are required to keep, such as the aircraft logbooks your aviation authority requires. Keep those records as you always have. Treat your exports as backups and snapshots, not as the legal source of truth. You remain responsible for every maintenance decision (for an aircraft, every airworthiness decision) and for complying with the regulations that apply to what you maintain.

SquawkIt is provided “as is” and “as available”. To the fullest extent permitted by law, we make no warranties, express or implied, including that the service will be uninterrupted, error-free, or that any due-date, urgency, or inspection calculation is correct.

7. Limitation of liability

To the fullest extent permitted by law, we are not liable for any indirect, incidental, consequential, or special damages, or for any loss of data, downtime of anything you maintain, or regulatory penalty arising from your use of SquawkIt. Our total liability for any claim is limited to the amount you paid us for SquawkIt Pro in the twelve months before the claim. Nothing in these terms limits rights you have under consumer law that cannot be excluded.

8. Ending the agreement

You can stop using SquawkIt at any time, and you can delete your account and data from the app (section 18). We may suspend or close accounts that break these terms. Sections 3, 6, and 7 survive termination.

Part 2 — Privacy Policy

9. Data we hold

The data associated with your account falls into four groups:

• Account data. When you sign in, we receive a basic identity profile — typically your name and/or email address and a unique account identifier — from whichever sign-in method you choose (section 10). We do not receive or store your Google/Apple password.
• Your content. The records you create in the app: the details of each thing you keep in SquawkIt, maintenance logs, inspections, tasks, squawks (reported issues), service bulletins and airworthiness directives, technician sign-offs, and any files, photos, or links you attach to them.
• Billing data. If you subscribe to SquawkIt Pro, subscription and purchase status from the app store and our subscription-management provider — described in section 13.
• Diagnostic data. Technical information generated as the app runs — described in section 14.
• AI task suggestion data. Only if you ask SquawkIt to suggest maintenance tasks: a description of that thing (an aircraft, car, home or other) sent to an AI model, and the suggestions it drafts — described in section 15.

10. Signing in

SquawkIt supports three sign-in methods, all via Firebase Authentication. You choose which one to use; we only receive data from the method you actually pick.

Google Sign-In

Google shares your name, email address, profile photo, and a unique Google account identifier with the app so we can create and authenticate your account. We request only the standard identity scopes needed to sign you in (basic profile and email) — SquawkIt does not request access to your Google Drive, Calendar, Contacts, Gmail, Photos, or any other Google service, and we never receive or store your Google password. Our access to, use of, and transfer of information received from Google APIs adheres to the Google API Services Terms of Service and the Google API Services User Data Policy, including the Limited Use requirements. You can revoke SquawkIt's access to your Google Account at any time from your Google Account permissions page.

Sign in with Apple

Apple shares your name and email address with the app on your first sign-in (you may choose to share a private relay address instead of your real one — we store whichever address Apple provides) and a unique Apple account identifier. We never receive or store your Apple password. You can review or revoke SquawkIt's access from your Apple ID account settings at any time.

Email link

You can also sign in passwordlessly with just an email address: we send a one-time sign-in link to the address you provide, and use that address as your account identifier. No password is ever set or stored.

We use whichever identity data you provide only to: authenticate you and keep your account secure; create and pre-fill your in-app profile — your name and avatar (where available) are used to populate the "self" technician on your records and account screen; and pre-fill the destination address when you choose to have an exported logbook report emailed to you (section 12) — you can change this address before sending. This data is stored in Firebase Authentication and in your local-first record store, synced to Cloud Firestore under your account, as described in section 3. We do not sell it, use it to serve ads, or share it with third parties, except: (a) with Google/Firebase, which processes it on our behalf to provide authentication and sync (section 16); and (b) your email address, if you request an emailed export, is passed to our transactional email provider solely to deliver that export to you (sections 12 and 16). You can request deletion of this data as described in section 18.

11. How your data is stored

SquawkIt is local-first. Your records are written to a database on your own device first, so the app works fully offline and your data is always available — even with no signal in the hangar, the garage, or the boatyard.

When you are signed in and connected, a background sync process copies your records to our cloud backend (Google Firebase — Cloud Firestore for record data and Firebase Storage for attachment files) so they are backed up and kept consistent across every device where you sign in. Data is encrypted in transit, and the backend stores it under your account identifier.

Your data is associated with your account and is not sold. We do not share your content with other users unless you deliberately share it — for example, by sending someone an exported report (section 12). We use the cloud backend solely to provide, back up, and sync the service.

If you sign out, the local copy of your data is removed from that device; your synced records remain in the backend and reappear when you sign back in. If you delete your account or ask us to delete your data, we remove your records and attachments from the backend; please allow a reasonable period for deletion to propagate through backups.

Urgency alerts stay on your device. When SquawkIt notifies you that an inspection has gone overdue, that a task is due soon, or that a squawk has been raised to its top priority (AOG, for an aircraft), that decision is made on your device from the records already stored there, and the notification is posted by your device. No server watches your records to produce these alerts, and nothing about the thing, task, or squawk is sent anywhere in order to show one. They work with no account, no cloud sync, and no network connection. The one exception is described next, and it applies only to things you share with someone else.

Shared-thing notifications use push services. If you share a thing, SquawkIt can tell you when another member changes something on it. Your device may be asleep when that happens, so unlike the alerts above these are produced by our backend and delivered through Apple Push Notification service and Firebase Cloud Messaging. Two consequences worth stating plainly:

• We register a push token for each device you sign in on, so we know where to send them. Tokens are deleted when you sign out of that device and when you delete your account.
• The message we hand to the push service carries the thing's name (its tail number, for an aircraft), the other member's display name, what kind of record changed and how (created, updated or deleted), and that record's own title: a squawk's or task's title, or a maintenance log's work description. When a squawk's priority is raised, it carries the old and new priority too. Apart from AI task suggestions, which you ask for (section 15), this is the only place SquawkIt passes your content to a service outside Firebase, which is why these messages are kept short and deliberately carry no attachments, certificate details, costs, or comments.

You control this in Settings → Notifications, by type (Priority & due updates and Collaboration) or with All notifications. Switching a type off stops the message being sent at all, not merely hidden on arrival. Things you have not shared with anyone generate no push notifications of this kind; the only push it can get is the one telling you that suggestions you asked for are ready (section 15).

12. Data exports

You can export your records on demand from Settings → Export logs, for a single thing or all of them, optionally filtered by date range. An export is a point-in-time snapshot bundled as an archive containing spreadsheet files (CSV / XLSX), a PDF report, and any attachment files referenced by the exported records.

The textual export is generated on your device from the local-first store. If you choose to have an export emailed, the archive is uploaded to our cloud storage and a time-limited download link is generated and sent to the address you specify; the app keeps an export history so you can re-download, re-send, or delete past exports.

Exports exist so you keep ownership of your records — for a sale or a pre-buy, an annual or a service visit, a handoff to a mechanic (an A&P or IA, for an aircraft), or simply a personal backup that survives any future migration.

13. Subscription data (SquawkIt Pro)

SquawkIt Pro (section 5) is sold through the Apple App Store and Google Play. We use RevenueCat, a subscription-management platform, to validate purchases and keep your subscription status in sync across your devices.

When you view subscription options or make a purchase, RevenueCat receives purchase and subscription information from the app store on our behalf — such as your purchase history, subscription status, renewal date, and a device/account identifier used to link the purchase to your SquawkIt account. RevenueCat does not receive your payment card details; those are handled entirely by Google Play / Apple. We store only the resulting entitlement — whether your account is on the free or Pro tier, and when it renews — in our backend, associated with your account. RevenueCat's handling of this data is also governed by its own privacy policy.

14. Diagnostic logging

To keep SquawkIt stable and to diagnose problems, the app records technical diagnostic information such as crash reports, error traces, performance metrics, app version, device and operating-system type, and basic event logs about how features are performing. This data is used only to monitor reliability, fix bugs, and improve the app.

We aim to keep diagnostic logs focused on technical detail rather than the contents of your records. Diagnostic data is retained only as long as it is useful for troubleshooting and quality monitoring, and is then discarded.

Diagnostics about urgency alerts (section 11) are counted only for signed-in accounts with cloud sync switched on, and record only which mechanism delivered the alert and whether the things you keep include a shared one — never the thing, the record, or the alert text. If you use SquawkIt without an account, or with cloud sync off, these alerts are not reported at all, so nothing about them leaves your device.

15. AI task suggestions

SquawkIt can suggest maintenance tasks for any thing you keep in it. Some suggestions come from a list we write and keep for each kind of thing. Others are drafted by an AI model, and only when you ask, by tapping Suggest tasks or Suggest more. Suggestions need a signed-in account and a connection; nothing is sent for a guest account or while offline.

What is sent. When you ask, the app sends our backend a description of that one thing: its kind; its specifications such as make, model and year, without identifiers such as a tail number, VIN, address or serial numbers; its components' make and model; its meter readings; the tasks it already has (title, schedule, type and reference number); and a summary of its maintenance log entries (date, readings, the work done and the component). It never includes technician names, certificate numbers, costs, attachments or comments, and nothing from your other things, your profile, or other members of a shared thing. SquawkIt does not currently send documents or attachments to the AI.

Opening the suggested task list also sends that description, without the log entries, to our backend so it can fit our own list to your thing. That request goes to no AI model.

Who processes it. Our backend passes that description to Google's Gemini model on Google Cloud Vertex AI, in our own Google Cloud project, to draft the suggestions. Under Google's terms for Vertex AI:

• Google does not use this data to train or fine-tune any AI model without our permission.
• Google may keep the request and its answer in memory, not on disk, for up to 24 hours to answer faster, isolated to our project.
• If Google's automated safety systems flag a request as possible abuse, Google may log it for up to 90 days so that authorized Google staff can review it. It is not used to train models.

What we keep. The request itself is deleted when the run finishes; if a run is interrupted, it expires after 24 hours. The suggestions are kept under your account so you can come back to them, until you add them, and expire after 24 hours. To answer faster and at lower cost, we keep the general maintenance schedule the model gives for a make and model; it is built from the model's own knowledge and holds nothing that identifies you or your thing. For each thing we also keep when its last suggestion run succeeded, to apply the daily limit, and for each model call a cost record with no content and no account identifier, kept for about 13 months.

The ready notification. AI suggestions can take a few minutes, so when a run you started ends, we send a notification to your devices through Firebase Cloud Messaging and Apple Push Notification service. It carries the thing's name (or tail number) and whether the suggestions are ready; nothing else about it.

Suggestions are drafts. Nothing is added to your thing until you choose it. Check every suggestion against the manufacturer's documents, which govern; section 6 applies to them as to everything else in SquawkIt.

16. Service providers

We rely on Google Firebase for authentication, cloud database, file storage, and diagnostics; on Google and Apple for sign-in; and on RevenueCat to manage and validate SquawkIt Pro subscriptions (section 13); and on Google Cloud Vertex AI to draft AI task suggestions when you ask for them (section 15). When you request an emailed export (section 12), the download link is delivered through a transactional email provider (Resend), which receives only the destination email address and the export delivery content needed to send that message. These providers process data on our behalf, under their own terms and security practices, solely to provide the service. We do not use your content, or your account data, to serve third-party advertising.

17. Your choices

• Use the app offline; sync only happens when you are signed in and connected.
• Export and download your records at any time.
• Sign out to remove the local copy of your data from a device.
• Request access to, correction of, or deletion of your account data.
• Revoke SquawkIt's access to your Google Account from your Google Account permissions page, or to your Apple ID from your Apple ID account settings, at any time.

18. Deleting your account

You can delete your account and the data associated with it directly in the app: go to Settings → Delete Account. This immediately requests deletion of your records and attachments from the backend; please allow a reasonable period for deletion to propagate through backups.

If you no longer have access to the app, you can instead submit a request using this form: Account Deletion Request.

19. Changes to these terms and this policy

We may update this page as the app evolves. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify you in the app. Continuing to use SquawkIt after a change means you accept the updated terms.

20. Contact

Questions about these terms, this policy, or your data? Email fanfly.dev@gmail.com.