BlockTime Privacy Policy
Last updated: 11 November 2026
This policy explains what personal data BlockTime Pilot Logbook ("BlockTime", "we") processes, why, how long we keep it, and what your rights are. We wrote it in plain language. If anything is unclear, write to us.
Who we are
BlockTime is made by Cirrolus CommV, Hazeschransstraat 37, 2650 Edegem, Belgium, enterprise number BE 0757.800.226, RPR Antwerpen, afdeling Antwerpen.
- Privacy questions and requests: privacy@blocktime.aero
- Help with the app: support@blocktime.aero
- Anything else: info@blocktime.aero
The short version
- Your logbook lives on your device first. BlockTime works fully without an account.
- If you sign in, a copy of your logbook is stored on our server so your devices stay in sync and you have a cloud copy.
- We do not use analytics, advertising or tracking. We do not sell your data or share it with anyone for their own purposes.
- You can export everything at any time, delete your account from within the app, and erase the app's data from a device.
Local first
Everything you enter (flights, aircraft, people, settings, expiries and so on) is stored in the app's storage on your device. The app also keeps automatic snapshots of your logbook on the device, so a mistake can be undone. None of this leaves your device unless you sign in to sync, create a signing link, or export a file yourself.
What we process, why, and on what legal basis
| Data | Why | Legal basis |
|---|---|---|
| Your email address | To create your account and sign you in with a one time code sent by email | Contract (providing the service you asked for) |
| Your synced logbook: entries, aircraft, types, people, places, settings, Smart Groups, expiries, accepted findings, signatures on your entries, and a random id of the device that last changed each record | To sync your devices and keep a cloud copy | Contract |
| Sign in sessions | To keep you signed in on a device | Contract |
| Technical logs: IP address, time, the request made, and an audit log of sign ins | To keep the service secure, prevent abuse and fix faults | Legitimate interest (security and reliability) |
| Data of a signing link and of the person who signs (see "If you sign a pilot's logbook") | To let an instructor or examiner sign entries in your logbook through a link | Legitimate interest (a signed logbook, for the pilot and the signer) |
People in your logbook
Your logbook can hold data about other people: crew names, employee ids, email addresses, licence numbers and remarks you type yourself. You decide what you enter. For this data we act on your behalf: we only store and sync it for you, and you are responsible for having a reason to record it (for example, your own logbook record keeping).
If you sign a pilot's logbook (signers who do not use BlockTime)
A pilot can send you a link to sign one or more of their entries. When you open the link, you see a copy of only those entries: date, route, aircraft registration and type, block times and the pilot's function. The pilot's name is shown too.
When you sign, we store your name, your role (PIC, instructor or examiner), your licence number if you give one, your drawn signature and the time of signing. The pilot's app collects the signature at its next sync and adds it to the pilot's logbook.
- The link is valid for 7 days, until it is signed, or until the pilot revokes it.
- Our server deletes the link and everything in it, signed or not, 37 days after the link was made (a daily cleanup, so at most one day later). We keep a signed link that long so the signature can be put back if a sync conflict ever removes it from the pilot's logbook.
- Once the signature is in the pilot's logbook, it stays there as long as the pilot keeps their logbook, like a signature on paper. That copy is part of the pilot's data (see "People in your logbook").
- The signing page uses no cookies and no tracking. It only talks to our database.
To ask about your data or to have it removed earlier, write to privacy@blocktime.aero. Removing a signed link before the pilot's app has collected it means the signature never reaches the pilot's logbook.
How long we keep data
The times below are maximums; data may be removed sooner.
| Data | Where | How long |
|---|---|---|
| Logbook on your device | Your device | Until you delete it, use Erase this device, or remove the app |
| Automatic snapshots on your device | Your device | The newest 7 daily snapshots; snapshots taken before an import, restore or batch change for 30 days (at most 50 MB together) |
| Your account and email address | Our database | Until you delete your account |
| Your synced logbook | Our database | Until you delete your account. Entries you delete go to Trash and stay stored as deleted, so all your devices learn about the deletion; they leave the server with your account |
| Sign in audit log | Our database | Until you delete your account |
| Sign in codes | Our authentication service | They expire after 1 hour and work only once |
| Sign in sessions | Your device and our authentication service | Until you sign out or you delete your account (sessions have no fixed end date). Signing out ends the session on the server when the device is online; the short lived access token stays valid until it expires (at most 1 hour) |
| Signing links and signers' data | Our database | At most 37 days after the link was made (see above) |
| Database backups | Our database provider | Up to 7 days. Data you delete stays in these backups until they expire. We restore a backup only after a fault, and we then delete again any account that was deleted in the meantime |
| Server logs of our database provider | Our database provider | Up to 7 days |
| List of deleted accounts | Cloudflare | Up to 8 days. Only the account's internal id and the time of deletion, no email address, so we can delete the account again if we ever restore a database backup |
| Request logs of our hosting provider | Cloudflare | We do not keep request logs (Workers Logs are off). Cloudflare processes IP addresses only to deliver and secure traffic |
| Every email we send, including its content with the sign in code | Our email provider | Up to 30 days |
| Emails you send us | Our mailbox | Emails to privacy@, support@ and info@ are kept as long as needed to handle your question and deleted at the latest 2 years after the last email. Emails about a privacy request (access, deletion, correction) are kept for 3 years, as proof that the request was carried out |
Who processes data for us
We use a small number of service providers. They process data only on our instructions, under a data processing agreement.
| Provider | What for | Where | Transfer safeguard |
|---|---|---|---|
| Supabase Pte. Ltd. (Singapore) | Database, sign in, sync | Database in London, United Kingdom | EU adequacy decision for the United Kingdom (valid until 27 December 2031); standard contractual clauses in the Supabase data processing agreement for any access from outside the EU and the UK |
| Resend | Sending sign in codes by email | Sent from Ireland (EU) | EU-US Data Privacy Framework (certified); standard contractual clauses in the data processing agreement |
| Cloudflare | Hosting the website and the signing page, network delivery, the list of deleted account ids (8 days) | Global network | EU-US Data Privacy Framework; standard contractual clauses in the data processing agreement |
| Apple (iCloud Mail) | Receiving the emails you send us | Apple Distribution International, Ireland (for users in the EU) | For transfers to the United States Apple relies on standard contractual clauses |
Data in transit is encrypted (HTTPS). The people who run BlockTime can technically access the database; we only do so when needed to keep the service running or when you ask us for help.
Deleting your data
Delete account (in the app: More, Account & Sync). After a fresh sign in code, this deletes from our server your account, your email address, your sessions, your synced logbook, all your signing links with the signers' data, and your lines in the sign in audit log. Your logbook stays on the device you use, unless you also choose "Also erase this device". Other devices signed in to the account are signed out and keep their own copy.
If you no longer have the app, write to privacy@blocktime.aero from the email address of your account. We check that the request comes from that address before we delete anything.
Erase this device (More, Account & Sync, This device). This removes everything the app stored on this device: the logbook, Trash, snapshots, settings and the sign in session. It does not touch your account or the cloud copy.
What neither of them can remove:
- Backups you exported yourself (Files, iCloud Drive, mail). Delete them yourself.
- Emails with sign in codes in your mailbox.
- Our email provider's copy of every email it sent (including the code), kept for up to 30 days.
- Our database backups and server logs, kept for up to 7 days.
- The internal id of a deleted account (no email address) and the time of deletion, kept for up to 8 days, so we can delete the account again if we ever restore a database backup.
- Signing links in messages you already sent. They stop working once the link is deleted.
No analytics, no tracking, no selling
BlockTime has no analytics, no advertising, no tracking pixels and no third party scripts. The app stores data on your device only to work (your logbook, your settings, your sign in). We never sell personal data and never share it with anyone for their own purposes.
Your rights
Under the GDPR you have the right to access your data, to correct it, to have it deleted, to restrict or object to its use, and to receive it in a portable format. Most of this you can do yourself in the app: every field can be edited, everything can be exported (JSON, CSV, PDF), and the account can be deleted. For anything else, write to privacy@blocktime.aero. We answer within one month.
If you think we handle your data wrongly, please tell us first. You can also complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be) or to the authority in the country where you live.
Age
BlockTime is meant for pilots and is not intended for anyone under 16.
Changes
When we change this policy, we update the date at the top. If a change matters for how we use your data, we tell you in the app before it takes effect.