Privacy — Crew Thrust

What we store: Your email, name, airline, base, your roster calendar link, your tax/pay profile, and the family & friends shares you create (name, email and what you chose to share with each person). Your password is stored only as a cryptographic hash — never in plain text. We also store the date and time of your last visit, used to run the app and for internal usage statistics — never shared with third parties.

What we do with your roster: We read the calendar you connected only to show you (and whoever you choose) your schedule and estimates. We never sell or share your data with third parties. Salary, hotels and crew colleagues are never shared with family & friends.

iPhone calendar: In the iOS app you can connect your roster by picking a calendar on your iPhone. The app reads only the events of the calendar you choose — never the others — and sends them to your account to display as your roster. You can revoke access at any time in iOS Settings.

Pilot logbook: If you use the logbook (pilots), the flight records you confirm or import — dates, times, routes, registrations, commander name, landings — are stored in your account so you can keep your record. PDFs you import are processed on the spot and never stored.

Family & friends sharing: Each access is individual and revocable by you at any time in your Profile. Only the person with the invited link/account sees what you authorised, and never any financial information.

Camera (payslip): If you photograph your payslip to fill in the values automatically, the image is processed on your phone itself (text recognition) and is never stored or sent off the device.

Location: The distance to the airport is calculated on your device — your position never leaves your phone or is stored on our servers.

Flights and weather: To show live flight status and airport weather, the app requests data from external public services: adsb.lol (aircraft position), aviationweather.gov (METAR/TAF, US NOAA agency) and Open-Meteo (weather forecast and city lookup). These requests include only what's needed for the lookup (e.g. flight number, airport code, city name) — never your identity.

Push notifications: In the iOS app, if you grant permission, we store your device identifier (APNs token) only to send you useful reminders. You can turn notifications off in iOS Settings at any time.

Sign-in and where data is processed: The app runs on Vercel (hosting), account data lives on Upstash (database), and emails are sent via Resend. These providers process data only to operate the service. If you signed in with Google or with Apple (Sign in with Apple), we use that account's identifier — and, for Apple, only on the first sign-in, the name and email Apple shares — solely to sign you in.

Your rights: You can access, correct or delete your account and all data at any time. For full deletion, contact us: support@crewthrust.com.