Privacy Policy

Direct Logbook ("we", "us") provides a digital pilot logbook for Australian pilots. This policy explains what information we collect when you use the service, how we use it, and the choices you have. By creating an account or using Direct Logbook you agree to the collection and use of information as described here.

Information we collect

Account information. When you register we collect your email address and a password. Your password is stored only as a secure one-way hash — we never store or see it in plain text. During onboarding you may also provide your name, company or airline, and position.

Logbook data you enter. The core of the service is data you choose to record, including flights and flight times, aircraft types and registrations, sectors and routes, ratings and endorsements, tags, starting balances, and flight tracks you upload (such as KML or GPX files). This may include the names of other crew members you choose to record against your flights — you are responsible for entering this information appropriately.

EFL images. If you use the EFL scanning tool, we collect the images you upload. These are stored privately against your account and are processed by Google Cloud Vision (see "Third-party services" below) to extract flight details on your behalf.

Imported data. If you import an existing logbook via CSV, we collect and store the contents of that file to build your logbook records.

Technical information. Like most web applications, we use session data to keep you logged in, which includes your IP address and browser user agent. Your IP address is also used to rate-limit login attempts as a security measure.

How we use your information

• To provide the service: storing your logbook, generating statistics and charts, producing PDF and CSV exports, and scanning EFL images you upload.
• To secure your account: verifying your email address, resetting passwords, and protecting against unauthorised login attempts.
• To communicate with you about the service, such as email verification and password reset messages.
• To maintain and improve the application.

We do not sell your personal information, and we do not use your data for advertising.

Third-party services

• Google Cloud Vision — EFL images you upload are sent to Google's Cloud Vision API for text extraction. Google processes these images as a data processor on our behalf.
• Hosting and email providers — your data is stored with our hosting provider, and transactional emails (verification, password resets) are sent through our email delivery provider.
• Bunny Fonts — fonts are served from fonts.bunny.net, a privacy-focused CDN that does not track visitors.

Cookies

We use cookies that are necessary for the service to work: a session cookie to keep you signed in, a "remember me" cookie if you choose that option at login, and a CSRF token cookie for security. We do not use advertising or cross-site tracking cookies.

Data retention and deletion

We keep your information for as long as your account is active. You can export your logbook as a PDF or CSV at any time. If you would like your account and all associated data deleted, contact us using the details below and we will remove it.

Security

Passwords are hashed, EFL images are stored privately and only accessible by your account, and access to your data requires authentication. No online service can guarantee absolute security, but we take reasonable steps to protect your information from misuse, loss, and unauthorised access.

Your rights

We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You may request access to, correction of, or deletion of your personal information at any time.

Changes to this policy

We may update this policy from time to time. If we make material changes we will update the date at the top of this page. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

Contact

For privacy questions, data access requests, or account deletion, contact us at [email protected].