Privacy policy

Effective October 11, 2026 · Version 3.3 · Masterpilots LLC, Orlando, Florida, USA

1. Who we are

LogAloft (logaloft.com) is run by Masterpilots LLC, a Florida company at 1317 Edgewater Dr, Ste 727, Orlando, FL 32804, USA. For the personal information described here, Masterpilots LLC is the controller: we decide what is collected and why. You can reach us at Email us.

2. What this policy covers

This policy covers the LogAloft website and web app (the flight lookup and the logbook), the LogAloft email inbox, flight alerts, and email we send you. It does not cover the websites of airlines, flight-tracking services or payment providers you may reach from LogAloft; they have their own policies.

3. What we collect

When you look up a flight (no account needed)

The flight number, route and date you enter are sent to our server so it can fetch the flight's track and the space weather for that day. We keep the result for up to 7 days so the same flight isn't fetched twice. We also keep flight facts learned from lookups, such as which airports a flight number flies between, its usual departure time and aircraft type, and how it was flown (cruise levels, time in the air). These improve the estimates for flights without a track and are not linked to you. When you pick your flight from several candidates, that choice is kept with a one-way scrambled form of your IP address so one person's choice counts once; the address itself is not stored. Tracks you import from a file stay on your device.

When you create an account

• Account: your email address, and a password if you choose to set one (stored only as a secure hash by our authentication provider). If you sign in with Google or Apple, they send us your email address and, if you allow it, your name; we never see your Google or Apple password.
• Your logbook: the flights you save (dates, flight numbers, airports, times, aircraft, the computed dose and the track summary), remarks, and each earlier version of a flight, so your logbook has an audit trail. For flights you take as a passenger, also the seat, the booking reference and the passengers' names when they come from a booking email, an airline trip page you paste in, a boarding pass or a PDF itinerary, including ones you share to LogAloft from another app. Trip pages, boarding passes, PDFs and what you share are read on your device: the page text, the picture and the file are never sent to us.
• Track files you add to flights (GPX, KML and similar): the positions, altitudes and speeds in them, kept so the debrief opens on all your devices. Before you sign in they stay on your device.
• Certificates, medical and signatures: the certificates, ratings and endorsements you record, your medical certificate's class and exam date and, if you enter it, your date of birth (to work out when they expire), trip expenses, and instructor signatures on your entries, which our signing service keeps with the time and a fingerprint of the entry.
• Crew and aircraft records: names of crew members and aircraft you add. Names you type about other crew stay in your own logbook; we never use them to contact anyone.
• Your profile and settings: your name, role (crew or passenger), seat, airline, aircraft, crew base, home airport, commuting preferences, display choices, and your date of birth if you enter it (used only to project your career radiation dose to age 65). The risk model's sex and age band are kept only if you enter them.
• Plan: whether you have LogAloft Pro or its trial, how many flown tracks you have used this month, the plan's period and renewal date, and the last four digits and brand of your card, which Stripe shows us. Stripe holds the card itself.

When you use the inbox, alerts or commuting

• Emails you forward to your LogAloft inbox: we read the flights from booking emails and from attached rosters (calendar files and roster PDFs, whose text is read on our server) and logbook files, add them to your logbook, and reply with a summary. In your logbook we keep the flight details, the seat, the booking reference and the names of the passengers on the booking, so you can use them later (for example to claim compensation for a delayed flight). We do not keep the email or the file itself, or your payment details. Emails from addresses that are not linked to an account are not processed.
• Flight alerts: the flight number, date and airports, the latest gate and times, and, for each phone you allow, the address its notification service gave us.
• Reminder emails: if you turn them on, we email you before a certificate, medical or currency runs out, using your email address and the dates in your records. If you keep your roster in LogAloft, we also email you on the 1st of each month to ask for last month's final roster and this month's; you can turn that off in Settings.
• Sharing your schedule: if you create a share link, anyone with that link can see your next two weeks of flights, where you are and when you're home (never crew names or remarks), until you turn the link off.
• Where you are, for sales: when you open Plan and billing, our server reads the country of your connection from your IP address to know whether LogAloft Pro and its trial are offered there. It is not stored; the billing country you choose is kept by Stripe.
• Commuting options (Pro): your home and base airports and report time are sent to our server to find flights between them. The answer is kept in memory for about 20 minutes and is not stored with your account.

Collected automatically

Our hosting provider keeps standard server logs (IP address, page or function requested, time, browser type) to run and protect the service. We do not use outside analytics or advertising tools, and we do not build profiles of your behavior.

Visit counts. To learn how LogAloft is used, our server counts page visits and the features used (for example a flight lookup, an estimate, a logbook import, a sign-in email or a Pro checkout). For each visit it keeps the page, the website you came from, your country and city (from the network, not from your device's location), whether you use a phone, tablet or computer, its operating system and browser family, the size band of your screen, and your browser's language. To count visits and how long they last, each browser tab gets a random code that lives only in that tab and is forgotten when you close it; your browser also remembers that it has been here before (a yes-or-no flag, not a code), so first-time visitors can be counted. When you look up a flight, our server counts what was asked (the flight number, the airports and how the answer was found), never who asked. To count visitors once a day without cookies, it makes a code from your IP address and browser with a key that changes every day, so the code can't be turned back into either and doesn't follow you from one day to the next; your IP address itself isn't kept. These counts are never linked to your account, are combined into daily totals within two days, and are deleted after 25 months.

If a page runs into a script error, your browser sends us the error message, where in our code it happened, the page, the app version, your language and your browser type (for example "Safari on iOS"). Anything that looks like an email address or a sign-in token is removed first, and it never includes your flights or name. We keep the 50 most recent kinds of error to fix them.

Feedback

When you send feedback we receive what you typed, the name and email you chose to give, the app version, the tab you were on, your IP address and the approximate location derived from it (city, region, country), to answer you and filter abuse.

When you answer "Was this helpful?" on an article, we receive the article, your answer, the page's language, your email if you're signed in, and the approximate location of your connection (city, region, country). We don't keep or send your IP address for this.

4. How we use it

We do not sell personal information, and we do not share it for advertising. We do not use your logbook to train AI models, and we make no automated decisions about you that have legal or similar effects.

Anonymous statistics. We may combine data from many users into statistics that cannot identify any person, such as the average yearly dose on a route, for an aircraft type or for a group of pilots, and publish them or share them with airlines, pilot associations, researchers or authorities. Every figure we share comes from at least 10 people, never includes names, emails or individual flights, and is not linked back to you. Your own logbook is never shared this way.

5. Who helps us run LogAloft

We use the service providers below. Each receives only what it needs for its task and may use it only to provide that task to us.

We may also disclose information if the law requires it, to protect the rights and safety of our users or the service, or as part of a sale or merger of the business, in which case this policy continues to apply to your data. We never give your logbook to an airline, employer or regulator unless the law compels us, and we will tell you if we can.

6. Where your data is stored

We are based in the United States, and our providers process data in the United States and the European Union. If you use LogAloft from outside the US, your information is transferred to the US. Where European or UK law applies, these transfers rely on our providers' Standard Contractual Clauses or the EU-US Data Privacy Framework, as each provider offers.

7. How long we keep it

8. Your rights

Wherever you live, you can:

• See and export your data: the logbook's Export screen gives you every flight as a spreadsheet or a LogTen file.
• Correct it: edit any flight, record or setting in the app.
• Delete it: Your account → Delete account removes your account and every flight in it on all devices, immediately, with its backups and track files. Any active plan is canceled first so nothing keeps charging you. Your account → Close my account hides it and signs you out instead, keeps it for 90 days so you can restore it with a link we email you, and then deletes it for good. Write to us if you want a closed account erased sooner.
• Withdraw consent for notifications at any time, in the app or in your phone's settings.

European Union, United Kingdom and similar laws

You also have the right to access, rectification, erasure, restriction, data portability and objection, and to complain to your local data-protection authority. We would rather hear from you first.

California and other US states

You have the right to know what personal information we collect and how we use it (this policy), to get a copy, to have it deleted or corrected, and not to be treated differently for using these rights. We do not sell or share personal information as those laws define it, and we do not use or disclose sensitive personal information beyond what the service needs.

For anything you can't do in the app, write to Email us from the email on your account. We answer within 30 days.

9. Security

• All traffic to LogAloft and between our servers and providers is encrypted (HTTPS/TLS).
• Our database only lets each account read and write its own rows; one user cannot reach another user's logbook.
• Sign-in uses one-time email codes that expire, or a password stored only as a secure hash.
• Service keys live only on our servers, never in the web page. Card details are handled only by Stripe.
• Our providers encrypt stored data at rest and keep backups.
• Only the people who run LogAloft can reach the systems, and only when needed to run or fix the service.

No system is perfectly secure. If a breach affects your information, we will tell you without undue delay and as the law requires.

10. Cookies and browser storage

LogAloft sets no advertising or tracking cookies. It counts visits itself, without cookies (see “Visit counts” in section 3). The app keeps these in your browser's own storage:

• your sign-in session;
• a copy of your logbook, so it opens instantly and works offline;
• your settings, last inputs, and whether you have a Pro plan, so pages show the right thing at once;
• for the visit counts, a flag that this browser has been here before, and a random code for the open tab (gone when the tab closes).

Signing out removes the logbook copy from that device. Our typeface is served from our own site, so opening LogAloft sends no request to Google or other font services. When you open Stripe's checkout, Stripe may set its own cookies to prevent fraud.

11. Health information

We ask only for the medical details a pilot's records need: your medical certificate's class and exam date and, if you enter it, your date of birth, so the logbook can show when the medical expires. We do not ask for medical conditions, diagnoses or medications, and ask you not to enter them in remarks. The pregnancy planner works in your browser on the numbers you type and stores nothing. Dose figures are estimates for your information, not a medical record.

12. Children

LogAloft is not meant for children under 16, and we do not knowingly collect their information. If you believe a child has given us personal information, write to us and we will delete it.

13. Changes to this policy

When we change this policy we update the date and version at the top. If a change affects what we collect or how we use it, we will tell you in the app or by email before it takes effect.

14. Contact us

Masterpilots LLC · 1317 Edgewater Dr, Ste 727, Orlando, FL 32804, USA · Email us