1. Who is responsible
Abdulselam Bozkurt, Neunkircher Straße 91, 66113 Saarbrücken, Germany ("we", "us") operates the Avio application and is the data controller for the personal data described here. You can reach us at info@myavio.app.
2. What data we process
- Account data — e-mail address, authentication identifiers, sign-in timestamps.
- Profile data — name, rank, base, licence and pay-relevant details you enter yourself.
- Roster and duty data — calendar entries imported from your crew roster feed or uploaded files, including flights, duty times and crew notes.
- Documents you upload — manuals, agreements, flight documents and the text extracted from them for search.
- Credentials for connected sources — roster feed and EFB/OFP logins, stored encrypted and never displayed again.
- Usage and technical data — requests, error logs, device and browser information, IP address.
3. Why we process it and on what legal basis
- Providing the service — account, roster import, document search, briefing and assistant answers (Art. 6(1)(b) GDPR, performance of a contract).
- Security, abuse prevention and service improvement (Art. 6(1)(f) GDPR, legitimate interests).
- Legal and tax obligations (Art. 6(1)(c) GDPR).
- Optional marketing e-mails, only with your consent (Art. 6(1)(a) GDPR).
4. Confidentiality of your documents
Documents, roster entries and profile data are stored per user account. Access rules are enforced in the database so that another user cannot read your content, and the assistant only searches documents belonging to your own account.
5. Who we share data with
- Hosting and database providers operating our infrastructure.
- Paddle.com Market Ltd as Merchant of Record for subscriptions, payments, invoicing and tax compliance.
- AI model providers that process the text of your question and the relevant passages in order to generate an answer.
- Aviation data providers for weather, NOTAM and airport information.
- Professional advisers and authorities where required by law.
6. International transfers
Some providers may process data outside the EEA/UK. In that case we rely on adequacy decisions or EU Standard Contractual Clauses together with additional safeguards.
7. Retention
Account, roster and document data is kept while your account exists and deleted or anonymised within 90 days of account deletion, unless a longer statutory retention period (for example for invoices) applies. You can delete documents and clear your roster at any time from inside the app.
8. Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, and you may withdraw consent at any time. Write to info@myavio.app; we respond within one month. You may also complain to your competent data protection supervisory authority.
9. Security
We use encryption in transit and at rest, per-user access control, encrypted storage of connected-source credentials and least-privilege access for administrators.
10. Cookies and local storage
We use strictly necessary cookies and local storage for sign-in sessions and for your interface preferences such as the selected theme. No advertising or third-party tracking cookies are set.