This app holds a record of where you fly and when you are home. Here is exactly what that means in practice.
01 Who is responsible for your data
Q400 Flyer is published by JRI Conseil, a sole proprietorship (entreprise individuelle) registered in France under SIREN 941 051 435, based in Metz, France.
JRI Conseil is the data controller for the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
For any question or request about your data: app-support@jri-aero.net
02 What we process, and why
Account information — email address, first name, last name. Used to create your account, sign you in, and show your name to the people you share your schedule with. Legal basis: performance of the contract between you and us.
Your password is handled by our authentication provider and stored only as a cryptographic hash. We never see it and cannot recover it.
Your duty schedule — duty dates and categories, report and end times, flight numbers, departure and arrival airports, scheduled times, aircraft type. Uploaded to your account when you import a roster, so the app works across your devices and the people you invite can see the part you allow them to. Legal basis: performance of the contract.
Your logbook — flights and simulator sessions, block times, airports, aircraft, the captain identifier you selected from your own reference list, take-offs, landings, approaches, passenger counts and your own comments. Stored in your account so it survives changing a phone and stays in step with the web version of your logbook. Legal basis: performance of the contract.
Sharing invitations — the email address you enter when you invite someone, and the level of detail you grant them. Used solely to connect that person's account to yours once they register with the same address. Legal basis: performance of the contract, and our legitimate interest in operating the sharing feature you asked for.
App preferences — check-in offset, notification lead time, chosen time zone, pilot-features setting, and your drive-time threshold and margin. Kept on your device, with the pilot-features setting also on your account so it follows you between devices.
03 What stays on your device
The roster PDF you import is read on the iPhone itself. It is never sent anywhere for processing.
Crucially, the names, trigrams and identifiers of the other crew members listed on your roster are stored only in the app's local database on your device. They are not uploaded to our servers and are never visible to anyone you share your schedule with.
Your cached weather briefings, NOTAMs and D-ATIS also stay on the device so they remain readable without a connection. Deleting the app removes all of this local data.
04 Location & drive time
If you turn on the drive-time feature, the app estimates how long it will take you to reach your departure airport and reminds you when to leave.
- Your location is used only to compute that driving time, and only while the feature is enabled.
- Your position is processed on your device and is never sent to JRI Conseil or stored in your account. We never see where you are.
- The route and traffic estimate are produced by Apple Maps on the device. To return an ETA, iOS passes the coordinates to Apple's mapping service under Apple's own privacy terms — we are not a party to that exchange and receive nothing from it.
- iOS asks your permission first. You can grant “While Using the App” or, for background refreshes, “Always”, and you can withdraw it at any time in iOS Settings. Denying location simply turns the feature off; everything else keeps working.
05 Who your schedule is shared with
Sharing is off by default. Nothing about you is visible to anyone until you invite them yourself.
When you invite someone you choose one of three levels, and you can change or withdraw it at any time:
- Availability — whether each day is free or busy, and nothing else.
- Availability and times — the above, plus your duty start and end times.
- Full schedule — the above, plus flight numbers, airports and times.
The restriction is enforced by the database itself, not merely hidden in the app, so someone granted level 1 cannot obtain level 3 information by any means. Your logbook is never shared, at any level, with anyone.
06 External services the app contacts
To produce a briefing or a weather search, the app queries public aviation data sources. It sends only the airport code concerned — never your name, your email or any account identifier:
aviationweather.gov(US National Weather Service) — METAR and TAF reportsnotams.aim.faa.gov(US Federal Aviation Administration) — NOTAMsdatis.clowd.ioandatis.guru— digital ATISaeroapi.flightaware.com— filed route information, only if that feature is enabled
These providers are located outside the European Union. As with any internet request, they receive the technical metadata inherent to the connection, including your IP address. We have no control over their own data practices.
Your account and its data are hosted by Supabase, our database and authentication provider, in the eu-west-1 region (West EU — Ireland).
Check-in and drive-time reminders are scheduled locally by iOS on your device. No push notification token is generated, and no notification passes through our servers or Apple's push service.
07 What we do not do
We do not use advertising, and we do not sell, rent or trade your data. We do not employ analytics or attribution SDKs, we do not build behavioural profiles, we do not track you across other apps or websites, and we never request access to your contacts, photos or calendar. Location is used only for the drive-time feature described in section 04, only on your device, and only with your permission.
08 How long we keep your data
Your account data, schedule and logbook are kept for as long as your account exists, because the app's purpose is to preserve a flying record over many years.
If you ask us to delete your account, we erase it and all associated data from our systems within 30 days, apart from anything we are legally obliged to retain. Sharing links pointing to your account are removed at the same time.
You can delete the on-device data at any time, independently, by deleting the app.
09 Your rights
Under the GDPR you may, at any time, request access to the data we hold about you, ask for it to be corrected or erased, ask us to restrict or object to a given processing, or receive a copy in a portable format.
Write to app-support@jri-aero.net and we will respond within one month.
If you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL (3 place de Fontenoy, 75007 Paris — cnil.fr), or with the supervisory authority of your country of residence.
10 Security
Every exchange between the app and our servers is encrypted in transit using TLS. Access to the database is governed by row-level security rules, so an account can only ever reach its own rows and, for shared schedules, exactly the fields its permission level allows. Passwords are stored as hashes by our authentication provider.
No system can be guaranteed absolutely secure, but we treat a flying record as something worth protecting properly.
11 Children
Q400 Flyer is a professional tool intended for adults. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we will delete it.
12 Changes to this policy
If this policy changes materially, we will update the date at the top of this page and inform you within the app before the change takes effect. Continuing to use the app after that point means you accept the revised policy.