Effective Date: July 23, 2025
This Privacy Policy explains what information Northlog collects, why we collect it, and how you can access, manage, export, and delete your data.
The Northlog application (the “App”), available at web.northlog.app, the Apple App Store, and other app stores, is owned and operated by Northlog (“Northlog,” “we,” “us,” or “our”).
Northlog is a digital pilot logbook that helps pilots log flights, track currency, generate professional PDF exports, and sync data across devices. The App is available on iPhone, iPad, and the web, with Android support coming soon.
This Privacy Policy applies to all users of Northlog, whether you are using a free account, a guest account, or a Pro subscription. The personal information we collect is used to provide and improve the service. We will not use or share your information with anyone except as described in this Privacy Policy.
We only collect and use your personal information for legitimate reasons. We collect personal information that is reasonably necessary to provide our services to you. All personal data is processed electronically and stored securely.
When you create an account or use Northlog, we collect information you provide during onboarding and in your profile settings, including your email address, name, profile image (from your auth provider), pilot role, home base, and fleet entries.
You can update your name and profile image at any time in your profile settings.
Northlog is a pilot logbook. The core data you store includes your flight records (block times, flight time breakdowns, landings, takeoffs, approaches, and notes), crew members, aircraft, aerodromes, custom groups, daily statistics, and derived currency status. All flight data is linked to your user account and is not shared with other users or third parties.
When you generate a PDF export, we store the export format, date range, page count, and the generated PDF file itself in InstantDB Storage under a path specific to your user ID. Export PDFs are only accessible to you and are deleted when you delete your account.
We store your preferences, including which logbook fields you choose to display and your preferred regulatory region for currency tracking.
When you use our service, or in the event of an error, we collect device information (type, OS version, app version), connection status, IP address, and usage details.
You can use Northlog as a guest without providing an email address. Guest accounts store all the same flight data and sync it to InstantDB under a guest user ID. If you later sign in with email, Google, or Apple, your guest data is preserved and linked to your new account.
We offer three authentication methods: email magic code, Google Sign-In (OAuth 2.0 with PKCE), and Apple Sign-In. We do not have direct access to your passwords. All authentication is handled by InstantDB, Google, and Apple.
We use your information to:
We do not sell, rent, or share your personal data with third parties for their marketing purposes.
If you are located in the European Economic Area or the United Kingdom, we only process your personal data when we have a valid legal basis:
We use the following third-party services to operate Northlog. Each provider is carefully selected and contractually bound to protect your data:
InstantDB is our primary backend. It provides real-time database synchronization, user authentication, and file storage for PDF exports.
InstantDB permissions ensure that each user can only access their own data. No other user or third party can view your flights, profile, or exports.
RevenueCat manages our Pro subscriptions, including purchases, billing, and receipt validation.
We never have access to your full payment card details. All payments are processed by Apple App Store, Google Play, or Stripe (depending on platform), and RevenueCat handles receipt validation.
OpenAIP provides our aerodrome database, which includes airport names, ICAO/IATA codes, coordinates, and country information.
Search queries are sent to our Cloudflare Worker, which proxies the request to OpenAIP. Your IP address is not forwarded to OpenAIP.
Cloudflare hosts our backend server, which handles aerodrome search, aircraft search, and PDF rendering.
When you generate a PDF export, we use Cloudflare’s headless Chromium service to render your HTML into a PDF.
The HTML is generated client-side from your data and sent to our server for rendering. The PDF is returned to you and then uploaded to InstantDB Storage. We do not store the HTML or PDF on our server beyond the duration of the request.
If you sign in with Google, we use OAuth 2.0 with PKCE to authenticate you.
If you sign in with Apple (iOS only), we use Sign in with Apple.
We use Expo to build and distribute the app across platforms.
We take data security seriously. Your data is protected with:
Payment information is never stored on our servers. All payments are processed by Apple, Google, or Stripe, which are PCI-DSS compliant.
You can permanently delete your account at any time from your profile settings. When you delete your account:
Guest accounts are retained indefinitely as long as you continue using the app. If you sign in with an email, Google, or Apple account, your guest data is migrated to your new account.
Export records (format, date range, page count) are deleted when you delete your account. The generated PDF files are also deleted from storage.
Aggregated, anonymized usage data may be retained for longer periods for product improvement purposes. This data does not contain any personally identifiable information.
Your data is stored in the United States (via InstantDB) and processed globally (via Cloudflare’s edge network). When transferring personal data outside the EU/EEA/UK/Switzerland, we ensure appropriate safeguards:
Depending on your location, you may have the right to:
You can exercise these rights by contacting us at support@northlog.app. We will respond within 30 days.
Note: Some rights (such as data portability) can be fulfilled directly through the app by exporting your data as a PDF. Account deletion is also available in your profile settings.
Northlog does not use cookies for tracking or marketing purposes. We do not use Google Analytics, Facebook Pixel, or any other third-party analytics or advertising trackers.
The web app uses minimal local storage to cache your preferences and offline data. This data is stored locally on your device and synced to our servers.
If we introduce analytics or marketing cookies in the future, we will update this policy and ask for your consent where required by law.
Our App and website may contain links to third-party sites (e.g., the Apple App Store, Google Play Store, or our export format documentation). If you click on a third-party link, you will be directed to that site. We are not responsible for the content, privacy policies, or practices of any third-party sites or services. We strongly encourage you to review the privacy policies of those sites.
Northlog is not intended for children under the age of 16. We do not knowingly collect personal data from children under 13 (COPPA). If we discover that we have collected personal data from a child under 13, we will delete it immediately. If you believe we have collected data from a child under 13, please contact us at support@northlog.app.
We may update this Privacy Policy from time to time. When we do, we will:
We encourage you to review this page periodically for any changes.
If you have any questions about this Privacy Policy, your data, or your rights, please contact us:
Northlog
Email: support@northlog.app