Privacy policy

This policy explains what the Avigami app and this website, avigami.com, do with personal data: what leaves your device, where it goes, how long it is kept and how you stop it.

Who we are

Avigami is made by Vecihi LLC, Dover, Delaware, USA. Vecihi LLC is the controller of the personal data this policy describes; in this policy, “we” and “us” mean Vecihi LLC. You can reach us at support@avigami.com.

In short

• No account: Avigami has no sign-up, no email login and no password.
• Your logbook stays on your devices and in your own iCloud. Our server never receives it; of your flights it receives only the flight number, date and departure airport, for a flight-time lookup.
• There is no advertising and no tracking code, in the app or on this website.

Where your data goes

This is the table the app shows in Settings › Data and backup › Privacy › Where your data goes. Both are made from the same source, so they say the same thing. Rows marked “Only when the app uses Avigami's server” appear in the app only when it is connected to our server; a version of the app that is not connected sends nothing to it.

Your logbook stays on this device and in your own iCloud. The flows below run only as described; each says how to stop it.

• Not on our server: your logbook, email, password, location, searches, calculations and backup.
• With Advanced Data Protection on, attachments and very large records are end-to-end encrypted too. Record names never are; some are made from an airport, a registration or a rostered flight.

On your device

• Pages you photograph with Scan from paper and document photos are read on your device with Apple's text recognition; the images go to no server. Paper scans stay in Avigami's folder on this device and are not synced, but a backup of the device includes them (see below). A document photo is kept with the document, so it goes with your logbook to your iCloud and into your backup file.
• A medical certificate is health data. Avigami asks for your consent before it keeps the first one. Like your other documents, it stays on your devices, in your iCloud and in your backup files; we never receive it.
• A roster screenshot is read on your device too.
• Camera: Avigami uses it to read a crewmate's QR code and to photograph your documents and logbook pages. These pictures are not saved to your photo library.
• Calendar: if you choose a calendar for your roster, Avigami reads it on this device. The flights it finds become drafts in your logbook, which syncs to your iCloud like any record, and are used for flight-time lookups if those are on. If you have Avigami write your duties to a calendar, they go to the calendar you choose; who can see that calendar is set in your calendar app.
• Face ID: Avigami asks for Face ID before it deletes your logbook. iOS does the check; Avigami never sees your face data.
• Location: Avigami does not ask for your location.
• Device backups: iCloud Backup and backups made with a computer include Avigami's data on the device, paper scans too. Avigami does not exclude its logbook or paper scans from them, so a device backup can bring your logbook back.
• Crash reports: if you turn on Share With App Developers in iOS Settings (Privacy & Security › Analytics & Improvements), Apple sends us crash and performance reports for Avigami. Apple decides what they hold: technical details such as the device model, the system version and where the app stopped. You can turn this off there at any time. Avigami contains no crash-reporting or analytics code of its own.

iCloud

When iCloud is on, Avigami keeps your logbook in its private database in your own iCloud account (CloudKit). Vecihi LLC and our server cannot read it.

• The content of each record is written to CloudKit's encrypted fields, which are end-to-end encrypted with keys in your iCloud Keychain.
• Attachments, such as document photos and signature drawings, and records larger than 500 KB go as CloudKit files. They are encrypted too: under standard data protection Apple holds their keys, and with Advanced Data Protection they are end-to-end encrypted.
• So that sync can work, each record's type, name, time of last change and format number are stored without that extra encryption, also with Advanced Data Protection. The names do not show what a record is about: each one is a code made with a key that only your devices have, kept in the encrypted fields, so that all your devices give the same place, aircraft or roster flight the same name. Whoever can see them, Apple included, can see how many records of each type you have and when they changed, but not what they contain.
• iCloud is Apple's service, under your agreement with Apple. To stop it, turn off iCloud for Avigami in iOS Settings; your logbook then stays on this device only.
• If you sign out of iCloud or switch to another account, Avigami pauses sync and keeps your logbook on this device.
• If you choose a military role when you set up Avigami, you can choose Keep only on this device; looking up flight times also starts off for military roles.

Avigami's server

Some features use our small server. It runs on Cloudflare, which processes data for us. The app connects to it only to register your device's app key, to look up flight times, to download settings and data packs, for Delete everything, to send product counters if you turn them on, and, on iPhone and iPad, to register for notifications from us if you allow notifications. Your logbook never goes to it.

What it keeps in a database in Cloudflare's EU jurisdiction, and for how long:

• The App Store's identifier for your copy of Avigami (the app transaction ID Apple gives your download). It does not contain your name or email, but it stays the same, so we treat it as personal data. It is kept as long as one of the records below that carry it.
• Your devices' app keys: a public key made on each device, a counter, which kind of key it is (App Attest on iPhone and iPad, or a key kept by the device on the Mac and where App Attest is not available) and when it was registered. With App Attest, Apple confirms that the key belongs to a genuine copy of Avigami. Kept until Delete everything.
• Your plan as the App Store reports it: Plus or Pro, monthly or yearly, trial or not, and when it started and ends; without a plan there is no such record. Deleted when the App Store reports a refund or a revoked purchase, and otherwise 25 months after the plan ends.
• Usage counts and your Archive Pack credit. Monthly counts are deleted after 25 months. Counts for the whole life of your copy or for a plan year, and your credit, are your allowance itself, so they stay until Delete everything.
• On iPhone and iPad, if you allow notifications: each device's notification token, with the app's language and version. When it is deleted is under Notifications.
• Single-use codes that show a request is fresh; each is valid for 5 minutes and deleted when used or expired.
• Product counters, if you turn them on: totals per day, with nothing that points to you, deleted after 13 months.
• Our monthly spending with each provider, linked to no one.

The deletions above run every day on the server.

What it keeps in Cloudflare's key-value store, which Cloudflare copies to its data centres around the world:

• Flight data answers, found by flight number, date and departure airport only, and deleted automatically after 30 days.
• The signed settings and data packs (rules, import and roster formats, output layouts). They are the same for everyone.

Our server code does not store IP addresses and keeps no request log, and Workers Logs and Logpush, Cloudflare's logs of our server's requests, are switched off for it. Like any service on the internet, Cloudflare sees your device's IP address when the app connects, in order to deliver the request; it may keep security logs under its own policy, for example when its protection against attacks acts on a request.

For a flight-time lookup, the app sends our server the flight number, the date and the departure airport of the drafts whose time has come, and says whether they are flight records or duties. The request is signed with your device's app key, so the server knows which purchase to count it against; it does not keep which flight you asked about together with that identifier. Our server sends FlightAware only the flight number and the dates to search, and nothing about you or your device. Looking up flight times works with Pro for flights and Plus for duties. It is on unless you chose a military role; the switch Look up flight times online in Settings › Data and backup › Privacy turns it off.

When you buy or renew a subscription or an Archive Pack, or get a refund, the App Store tells our server, for the same identifier.

Notifications

Avigami shows notifications only if you allow them for Avigami on that device. They are of two kinds:

• Reminders from the app itself: documents about to expire, flights ready to confirm, a roster that goes over a flight time limit, and roster changes. Avigami schedules them on your device from what is in your logbook; our server has no part in them. The first reminder that needs the permission asks for it.
• Notifications from us. We write each one and send it by hand, from our own tool; nothing on our server sends them by itself. Apple's Push Notification service delivers them to your device.

So that a notification from us can reach it, Avigami on iPhone and iPad registers the device's notification token with our server once notifications are allowed, you have finished setting up the app and Notifications from Avigami is on in Settings › Data and backup › Privacy. That switch starts on unless you chose a military role. It asks for nothing more: the permission you gave for the reminders is enough. While you use the app, it renews the registration at least once a week. A version of the app that is not connected to our server registers nothing, and the Mac app never registers a token. The token is a code Apple gives Avigami on that device so that a notification can reach it. It does not contain your name or email. Our server keeps it with that device's app key, so it is linked to the same identifier as your other records there, together with the app's language and version, which of Apple's delivery services it belongs to, and when it was registered and last updated.

The token is deleted:

• when you turn off Notifications from Avigami; if the device is offline, the next time you open Avigami;
• the next time you open Avigami after you turn its notifications off in iOS Settings;
• with Delete everything. If you choose Avigami's server, the tokens of all your devices go with your record, and on the device you used, Notifications from Avigami stays off until you turn it on again; your other devices keep their own setting and register again within a week of being opened. If you choose only this device, its token goes too, and the conditions above apply again once you set up the app again;
• at the latest 90 days after Avigami was last opened on that device;
• when Apple reports that the token is no longer valid, for example after you delete the app: we delete it the next time we send a notification.

iCloud sync also uses Apple's silent notifications, so that changes from your other devices arrive at once. They need no permission, show nothing and come from iCloud; our server has no part in them.

Crew share

When you give a flight to crew, it goes from your device to theirs by QR code or AirDrop, or through another app you choose when you share it. It does not pass through our server. If you send it through another app, such as Messages or Mail, it goes through that service, under its terms.

A share holds the flight's date, flight number, route, registration, aircraft type, and block and flight times with how certain they are; a fingerprint of your record, so the same flight is recognised if it comes twice; the time you shared it; and, if you leave it on, your name. A cabin manager's duty also carries its kind, its start and end times and the operator code. Never your role, remarks, signatures, licence number or other crew names.

The QR code holds a link to avigami.com/s. If your crewmate has Avigami, the link opens the app. If not, it opens this website's page avigami.com/s. The flight is in the part of the link after the # sign, which browsers do not send to any server. The page reads it on their device and shows only the date, flight number, route and your name; it stores nothing and sends nothing, and it marks the flight and your name so that the browser's page translation leaves them out.

A share link can be copied and forwarded like any link, and whoever has it can read what it holds. In Avigami it always arrives as a draft that the receiver confirms.

Support

If you write to support@avigami.com, we receive your email address and what you write. The diagnostics package comes only if you attach it, after you have read it and deleted any lines you want; the Support page lists what it holds. We use your message, your address and the package only to reply to you and do not share them with anyone. Our email is hosted by Apple's iCloud Mail. Ask us at any time and we will delete them.

Your rights and choices

• Settings › Data and backup › Delete everything deletes, each chosen on its own, the logbook on this device, the logbook in iCloud on all your devices, and your record on Avigami's server. On the server it removes your usage counts, Archive Pack credit, device keys and notification tokens. Your plan record (plan, trial, dates) stays, because the App Store keeps it up to date and we need it to give you what you paid for; it is removed when the App Store reports a refund or a revoked purchase, or 25 months after the plan ends.
• Export: whenever you like, you can save your logbook as a file other apps can read, with Career › Outputs › Export the logbook (JSON) or Export the logbook (Excel).
• Under the GDPR and Türkiye's personal data protection law (KVKK) you can ask to see, correct, delete or receive your data, and object to or restrict its use. Write to support@avigami.com. Avigami has no accounts, so include the support code from Settings › About and support › Support: it lets us find your server record without your name.
• We answer these requests within 30 days, free of charge.
• You can also complain to a data protection authority, for example the one where you live; in Türkiye, the Personal Data Protection Authority (KVKK).

Legal bases

• To provide what you use or pay for (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)): your plan, quota and credit records, flight-time lookups, settings and data packs, and answering your support requests.
• Your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)): product counters, which are off unless you turn them on.
• Our legitimate interest in keeping the service secure and its costs under control (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)): single-use codes, device keys and our spending totals.
• Our legitimate interest in being able to send notices about Avigami to the people who use it (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)): notification tokens. You can object at any time by turning off Notifications from Avigami or Avigami's notifications in iOS Settings.

Who handles data for us

• Cloudflare runs our server and this website, under Cloudflare's Data Processing Addendum.
• Apple's iCloud Mail hosts our email, support@avigami.com.

Other recipients

• Apple, under its own terms and privacy policy: iCloud (under your agreement with Apple), the App Store, App Attest, the delivery of notifications, and crash reports if you share them.
• FlightAware, a flight data service: our server asks it for flight times and sends it only flight numbers and the dates to search.

Transfers

Our server's database is in Cloudflare's EU jurisdiction. Cloudflare runs our server and this website on its network of data centres around the world, and copies the flight-data cache and the public settings to those data centres. Cloudflare processes this data under its Data Processing Addendum, which includes the EU Standard Contractual Clauses; Cloudflare, Inc. is also certified under the EU-U.S. Data Privacy Framework. FlightAware, in the United States, receives only flight numbers and dates. Vecihi LLC is in the United States: support emails and crash reports reach us there, and our email is stored by Apple's iCloud Mail. Apple is in the United States; iCloud, the App Store, App Attest and the delivery of notifications are under Apple's terms.

For users in Türkiye: your personal data leaves Türkiye only for the services you use, that is our server and the services above. Under Article 9 of the KVKK this transfer relies on it being necessary to give you the service you asked for under our contract with you, and, for optional features that stay off until you turn them on, on the explicit consent you give in the app. You can withdraw that consent at any time by turning the feature off.

This website

avigami.com uses no cookies, analytics, trackers, third-party fonts or third-party scripts. Cloudflare hosts it and sees your IP address to deliver the pages. If you choose a language in the menu at the bottom of a page, your browser remembers the choice on your device; it is never sent to us. The crew share page reads the flight in your browser only.

Changes

When the app changes what leaves your device, the table above changes with it, and we update this page and its date.

Questions about privacy: support@avigami.com.

Vecihi LLC