Privacy Policy

Direct Logbook ("we", "us") provides a digital pilot logbook for Australian pilots. This policy explains what information we collect when you use the service, how we use it, and the choices you have. By creating an account or using Direct Logbook you agree to the collection and use of information as described here.

Information we collect

Account information. When you register we collect your email address and a password. Your password is stored only as a secure one-way hash, and we never store or see it in plain text. During onboarding you may also provide your name, company or airline, and position. You can optionally add a profile picture.

Logbook data you enter. The core of the service is data you choose to record, including flights and flight times, aircraft types and registrations, sectors and routes, ratings and endorsements, tags, starting balances, and flight tracks you upload (such as KML or GPX files). This may include the names of other crew members you choose to record against your flights. You are responsible for entering this information appropriately.

EFL images. If you use the EFL scanning tool, we collect the images you upload. These are stored privately against your account and are processed by Google Cloud Vision (see "Third-party services" below) to extract flight details on your behalf.

Imported data. If you import an existing logbook via CSV, we collect and store the contents of that file to build your logbook records.

Photos. If you add photos to a flight or upload a profile picture, we store them privately against your account. Uploaded pictures are re-processed before they are stored, which removes embedded information such as the location and device a photo was taken with.

Social activity. If you turn on the optional Social features, we store who you have chosen to share your flights with, the comments and reactions you post, and any comments you report.

Email addresses you invite. When you invite someone to see your flights, we store the email address you enter and send that person an invitation on your behalf. Please only invite people you know. The address is used for that invitation only and is removed when you cancel the invite or stop sharing with that person.

Technical information. Like most web applications, we use session data to keep you logged in, which includes your IP address and browser user agent. Your IP address is also used to rate-limit login attempts as a security measure.

How we use your information

• To provide the service: storing your logbook, generating statistics and charts, producing PDF and CSV exports, and scanning EFL images you upload.
• To run the Social features you choose to use: showing your shared flights to the people you have invited, sending invitation emails on your behalf, displaying comments and reactions, and, if you turn them on, emailing you about new reactions, comments and accepted invites. When you comment, your name and comment may be included in those emails to the flight's owner and to others who commented on that flight.
• To keep Social safe: reviewing comments that users report, removing content, and restricting or removing sharing where the service is being misused.
• To secure your account: verifying your email address, resetting passwords, and protecting against unauthorised login attempts.
• To communicate with you about the service, such as email verification and password reset messages.
• To maintain and improve the application.

We do not sell your personal information, and we do not use your data for advertising.

Social features and who can see your data

Social is optional and switched off until you turn it on. Your logbook is private by default, and nothing is shared with another user unless you invite them by email and they accept.

What people you share with can see. For each flight you have not hidden: the date, aircraft type and registration, route, the flight's details line (which will include flight numbers if you record them there), hours (including the day, night and instrument breakdown), distance and flight track. They also see your name and your profile picture if you have one.

Photos. Photos you add to your flights are not shown to anyone automatically. In your sharing settings you choose, person by person, who can see your flight photos; that choice applies to all of your flights and you can change it at any time.

What is never shared. Your flight log (the notes you write about a flight, and any images in it), crew names, EFL images, tags, custom fields, and ratings and endorsements are not shown to other users.

Comments and reactions. A comment or reaction you leave on someone's flight can be seen, together with your name and profile picture, by that flight's owner and by everyone else that pilot shares their flights with.

Your controls. You can hide individual flights, remove a person you share with, remove yourself from someone else's sharing, delete your comments, or turn Social off entirely at any time. These changes take effect immediately. Please keep in mind that people who could already see something may have viewed or saved it before you removed it.

Reports and moderation. If a comment is reported, our administrators can see the reported comment, who wrote it, who reported it, and the reason given, and a copy of the comment is kept with the report even if the comment is later deleted. Administrators can also see which users share with which (but not the flights themselves) so that they can remove a connection or restrict Social for an account that is misusing it.

API access

At your request, an administrator can create an API key for your account so that a website you choose can display your recent flying. Whoever holds the key can read your flights from the last 14 days (date, route, aircraft, hours, landings and flight tracks) and your totals. Flights you have hidden from Social are left out of the flight list, and crew names, flight numbers, your flight log and photos are never included. No account has API access unless a key has been created for it, and you can turn it off at any time from your settings.

Third-party services

• Google Cloud Vision: EFL images you upload are sent to Google's Cloud Vision API for text extraction. Google processes these images as a data processor on our behalf.
• Hosting and email providers: your data is stored with our hosting provider, and transactional emails (verification, password resets, sharing invitations you send, and Social activity emails you turn on) are sent through our email delivery provider.
• Bunny Fonts: fonts are served from fonts.bunny.net, a privacy-focused CDN that does not track visitors.

Cookies

We use cookies that are necessary for the service to work: a session cookie to keep you signed in, a "remember me" cookie if you choose that option at login, and a CSRF token cookie for security. We do not use advertising or cross-site tracking cookies.

Data retention and deletion

We keep your information for as long as your account is active. You can export your logbook as a PDF or CSV at any time. If you would like your account and all associated data deleted, contact us using the details below and we will remove it. Deleting your account also removes your photos, profile picture, comments, reactions, and sharing connections. Reports about comments are kept for as long as needed to deal with them and to protect other users.

Security

Passwords are hashed, EFL images are stored privately and only accessible by your account, and access to your data requires authentication. Flight photos and profile pictures are stored privately and are only delivered to signed-in users who are permitted to see them. No online service can guarantee absolute security, but we take reasonable steps to protect your information from misuse, loss, and unauthorised access.

Your rights

We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You may request access to, correction of, or deletion of your personal information at any time.

Changes to this policy

We may update this policy from time to time. If we make material changes we will update the date at the top of this page. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

Contact

For privacy questions, data access requests, or account deletion, contact us at [email protected].