Crewops — Privacy Policy

What stays on your device

Crewops works without an account. There is no sign-up, no password of ours, and no profile held anywhere but on your phone. The following is written to the app's private storage on your device and nowhere else:

We cannot read any of it. It is not backed up to a server of ours, because there is no server of ours. If your phone is included in an Apple device backup, that backup belongs to Apple and to you.

What leaves your device

Only these, and only for the purpose named:

There is no analytics SDK, no advertising, no tracking identifier and no crash reporter that sends us your data. We do not sell personal data and we have nothing to sell.

Your airline's crew portal

One of the three ways to import a roster is to sign in to the crew portal your airline operates. If you use it, the username and password you enter are sent to your airline's own system so it can return your roster. They are never sent to us and we never see them.

Those credentials are stored in the iOS Keychain on your device, protected by your device passcode and marked so that they are not copied into device backups or to another phone. You can remove them at any time from Ben → Roster senkronu (Me → Roster sync).

Two things you should know before using it. First, many airline crew portals are reachable only over an unencrypted connection, because that is how the airline operates them; where that is the case, the connection between your phone and your employer's server is no more protected than opening the same portal in a browser. Second, what happens to your data inside your airline's system is governed by your airline's own policies and your employment relationship, not by this policy.

Health information

Sleep entries, fatigue self-ratings, IMSAFE answers and the estimated cosmic radiation dose are health-related information about you. They are created by you, stored only on your device, never transmitted to us, and never shared with your employer, your regulator or anyone else by this app.

Each health module is switched off until you turn it on, and each one states what it reads and what it keeps before you enable it. Turning a module off stops it being used; deleting your data removes it.

Crewops is not a medical device. Its fatigue indicator, sleep readings, circadian plan and dose estimate are planning aids, not diagnoses, and the app never states that anyone is fit or unfit to fly.

Purchases

Crewops Pro is an auto-renewable subscription sold through the App Store. Apple processes the payment; we never receive your payment card details. RevenueCat, Inc. processes the resulting subscription state on our behalf under its own privacy policy so that Pro can be restored on a device you sign into with the same Apple Account.

How long data is kept, and how to delete it

Everything Crewops holds about you stays on your device until you remove it. We keep nothing, so there is nothing for us to delete on our side.

Your rights

Under the Turkish Personal Data Protection Law (KVKK) and the EU General Data Protection Regulation (GDPR), you have the right to access, correct, delete and port your personal data, and to object to its processing. For Crewops those rights are exercised directly on your device: the data is in your hands, the export gives you a portable copy, and the delete function erases it. Where you believe we hold something about you — for example a support email you sent us — write to us and we will tell you what we have and delete it on request. You may also complain to your national data protection authority.

Crewops is a professional tool intended for adults working as airline crew. It is not directed at children and we do not knowingly process children's data.

Contact

Questions about this policy, or about what the app does with anything: contact@hawkmason.com.

If we change this policy we will update the date at the top of this page, and where the change is significant we will say so in the app.