Legal
Privacy policy
Last updated: September 30, 2026
This is a translation provided for convenience. If it differs from the Spanish version, the Spanish version prevails.
Flownbook is in development and the app is in closed beta. This policy describes the data from the founding pilots form and from the app's licences section, which may include health data. When the app opens to the public we'll replace it with the full version, which will also cover the rest of the logbook data.
What data we collect
- Email address and pilot type, if you submit the founding pilots form. They're the only two fields in the form.
- Your licences, ratings, medical certificate and checks, if you add them in the app's licences section: the type, the number, the issuing authority, the issue and expiry dates, your remarks and, if you attach it, the scanned document or a photo of it. All of it is optional. If you import your AESA PDFs, they are read in your own browser and we keep the PDF and what it says about your licences —the number, the ratings and their dates—; your name, address and date of birth stay inside the PDF, but we don't store them separately.
- The email you sign in to the app with and the language you use it in, to send you expiry reminders in your language.
- Technical request data that our infrastructure provider logs by default to serve the page and protect it from abuse.
We don't use analytics or advertising cookies, and there's no profiling of any kind. The only things stored on your device are listed under cookies and storage.
What we use it for
The email from the form is used only to let you know when there's a place in the beta and to reply if you write to us. Your pilot type helps us decide the order in which we open places. We don't sell or share the list with third parties, and we don't use it to send anyone else's advertising.
Your licences and their documents are used to show them to you, to work out when they expire and from when you can revalidate them, to email you before they expire —you can turn the reminders off on the same screen— and to fill in the cover of the EASA-format PDF when you export your logbook. The reminders say what expires and when, but they don't include the number or the document. We don't use them for anything else or share them with anyone.
Health data
An aviation medical certificate is health data, and the law gives it special protection. That's why:
- We only store it if you add it, and only for what's explained here.
- Nobody else sees it: it doesn't appear on your profile and other pilots can't see it, not even the ones who follow you.
- The document you attach can only be opened while you're signed in, and it's stored on Cloudflare servers in the European Union.
- You can delete it whenever you like, and the file is deleted right away.
How long we keep it
The form data, until the product launches and we've let you know, or until you ask us to delete you, whichever comes first.
Your licences and their documents, until you delete them or delete your account. When you delete a document, a licence or your account, the file is deleted at that moment. What was in the database may remain for a few days in its automatic backups, until they expire.
Who we share it with
With the providers the site and the app need in order to work: hosting, database and document storage at Cloudflare, and email delivery through its email service. They process the data on our behalf and only to provide that service.
Cookies and storage
This is everything Flownbook stores on your device, across the website and the app. There's nothing else:
| What | What for | How long |
|---|---|---|
fb_sessioncookie | Keeping you signed in to your logbook without asking for the code on every page. | 30 days, or until you sign out. |
fb_temalocal storage | Remembering whether you chose the light or dark theme. | Until you clear your browser data. |
fb_idiomacookie | Remembering the language you chose in the website's selector. | One year. |
fb_bookmarksession storage | Making sure a flight you've just logged doesn't seem to disappear while the database copies it between servers. | Deleted when you close the tab. |
All of them are essential for the service to work or store a preference you chose yourself, so we don't ask for your permission for them: the law requires consent for what isn't necessary, and there's nothing like that here. If we ever add analytics, we'll ask you first, and you'll be able to say no and keep using Flownbook just the same.
You can delete them whenever you like from your browser settings. If you delete fb_session you'll have to sign in again; if you delete the others you lose nothing but your theme and language preferences.
An honest note: the website's fonts are loaded from Google's font service. It doesn't set cookies or identify you, but to serve the font Google receives your IP address, as happens with any file a browser requests from another domain. It's the only third party involved when you visit the website.
Your rights
You can request access to, correction or deletion of your data, and object to our processing it, by writing to info@flownbook.com. We'll handle your request without asking you to explain why.
For your licences and their documents you don't even need to ask: you can correct, download or delete them yourself in the app, and in Settings there's a copy of your data you can download.
Changes to this policy
We'll publish the final version before the app opens to the public. The date of the last update always appears at the top.
Terms of use
The terms for using the site are in the terms of use.