Privacy Policy

Effective date: September 16, 2026 · Version 1.0

⚠ Placeholder — review before launch. This policy was generated as a best-effort draft for a Delaware LLC operating AutoNavlog. It must be reviewed and approved by a licensed attorney before the site is opened to the public, particularly the Stripe, Google, and aviation-data disclosures.

AutoNavlog, LLC ("AutoNavlog," "we," "our," or "us"), a Delaware limited liability company, operates the website autonavlog.com and the AutoNavlog navigation-log calculation service (the "Service"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights with respect to it.

By using the Service, you agree to the collection and use of information described in this policy. If you do not agree, do not use the Service.

1. Information We Collect

Account information. When you create an account, we collect your email address and, if you sign in with Google, your Google profile name and profile picture URL. We do not collect a password in plaintext; passwords are managed by Firebase Authentication (Google).

Flight planning data. When you use AutoNavlog, we store the navigation logs, route strings, waypoints, aircraft performance parameters, wind data, and other inputs you enter ("Flight Data"). For Pro subscribers, this data is saved to your personal account in Google Cloud Firestore so you can access it across sessions. For all signed-in users, route and leg performance data may be contributed to a shared crowd-sourced cache to benefit other pilots (see Section 4).

Usage and analytics data. We use Google Analytics 4 ("GA4") to collect anonymized information about how the Service is used, including pages visited, features used, session duration, approximate geographic location (country/region level), browser type, and device type. This data is collected using cookies and similar tracking technologies. See Section 5 (Cookies) and Section 6 (Your Choices) for how to control this.

Payment information. If you subscribe to AutoNavlog Pro, payment processing is handled entirely by Stripe, Inc. We do not store your full credit card number, CVV, or billing address on our servers. We receive from Stripe a customer ID, subscription status, and subscription period dates. Stripe's privacy policy is available at stripe.com/privacy.

Feedback and suggestions. If you submit feedback or a bug report through the "Suggestions" feature, we collect the content of your message and, optionally, your current app inputs (route, parameters, etc.) that you choose to attach. This data is stored in Firestore and used only to improve the Service.

Technical data. We collect IP addresses for rate limiting and abuse prevention, and error logs (without personal flight data) for debugging.

2. How We Use Your Information

To provide, operate, and maintain the Service
To authenticate your identity and manage your account
To process payments and manage your subscription via Stripe
To save and restore your navigation logs (Pro feature)
To improve the Service through aggregate, anonymized analytics
To detect and prevent fraud, abuse, and unauthorized access
To respond to your feedback and support requests
To send you transactional emails (e.g., password reset, subscription confirmation) — we do not send marketing emails without explicit consent
To comply with applicable law

3. Crowdsourced Data Contributions

To help all pilots, signed-in users (including Basic accounts) may contribute route and leg-performance data to a shared cache. Contributed data is stored without your name or email attached to individual entries. The aggregate cache contains route strings and performance numbers only — no personally identifiable information. You may opt out by not using the "Save" feature on the Results page.

4. Information Sharing and Disclosure

We do not sell your personal information. We share information only in these circumstances:

Service providers. We share data with Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Google Analytics) and Stripe (payment processing). These providers act as data processors under our instructions and are bound by their own privacy commitments.
Legal requirements. We may disclose information if required by law, court order, or governmental authority.
Business transfers. If AutoNavlog is acquired or merged, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Service before any such transfer.
With your consent. We will share information for other purposes only with your explicit consent.

5. Cookies and Tracking Technologies

We use the following types of cookies:

Essential cookies. Required for authentication and session management (Firebase Auth). Cannot be disabled.
Analytics cookies. Google Analytics 4, used to understand aggregate usage. We implement Google Consent Mode v2: analytics cookies default to denied for users in the European Union and United Kingdom until you provide consent. Users outside the EU/UK are opted in by default but may opt out (see Section 6).
Preference cookies. Small items stored in localStorage (not cookies) to remember your app state between sessions. These do not track you across websites.

6. Your Choices and Rights

Cookie consent. On your first visit, you may accept or decline analytics cookies via our cookie consent banner. You may change your preference at any time by clicking "Cookie Settings" in the site footer.

Account data. Signed-in users can download a JSON export or delete their account from the Account dialog. You may also email autonavlog@gmail.com. Deletion cancels an active Stripe subscription, removes your user document and saved navlogs, and strips email from suggestions. Crowdsourced route and leg cache entries stay anonymized in the shared cache.

EU/UK residents. If you are located in the European Economic Area or the United Kingdom, you have rights under the GDPR / UK GDPR including the right to access, correct, port, or erase your personal data, and the right to object to processing. Lawful bases we rely on include contract (providing the Service) and legitimate interests (abuse prevention and product improvement). To exercise these rights, use the Account dialog or contact us at the address below.

California residents — Do Not Sell or Share. We do not sell personal information and we do not share it for cross-context behavioral advertising. Analytics cookies stay denied in the EU/UK until you consent. If you are a California resident and want to opt out of analytics cookies, use Cookie Settings in the footer. You also have CCPA/CPRA rights to know, delete, and correct.

7. Data Retention

We retain your account and flight data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days, except where retention is required by law or for legitimate fraud-prevention purposes. Aggregate, anonymized usage data may be retained indefinitely.

users — kept while the account exists; deleted on account deletion
navlogs — Pro saved logs; deleted with the account or when you delete a log
suggestions — kept to improve the product; email and user id are stripped on account deletion
routeData / legData — anonymized crowd cache; retained; contributor uids are not emails
_rateLimits / stripeEvents — short-lived operational records with TTL / expireAt

8. Security

We use industry-standard measures to protect your information, including Firebase Security Rules, App Check, and TLS encryption in transit. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy with an updated effective date. For material changes, we will notify you via email (if you have an account) or a notice on the Service at least 14 days before the change takes effect.

11. Contact Us

For privacy questions, data requests, or concerns:

AutoNavlog, LLC
[Address — to be added upon company formation]
Email: autonavlog@gmail.com