Washateria LLC, 2901 Shenandoah Ave, Saint Louis, MO 63104, United States, is the controller of the personal data described here. Questions or requests: flyguy2006@gmail.com. We never sell your data, never use it for advertising, and never share it except as set out below.

Account: your email address, password (stored only as a secure hash), name and account type.

Profile and Documents: what you choose to add, such as your licences, ratings, medical certificate, passport, visas, training records, date of birth, nationality, phone, home base, photo, CV details and the bank and tax details you print on invoices. A medical certificate can be health information; we use it only because you add it, to track its validity for you.

Work Records: trips and itineraries, logbook entries, duty times, expenses and receipts, invoices, clients, FBO notes and ratings, aircraft acceptance checks and photos, and emails and files you forward to your CallSign Inbox.

Subscription: your plan and its status, from Apple, Google or Stripe through RevenueCat. We never see or store your full card details.

Technical: sign-in sessions, basic logs of requests and errors kept by our hosting providers, and the settings saved on your device. We use no advertising or cross-site tracking cookies; the web app stores only what it needs to keep you signed in.

To provide CallSign to you: store and show your records, send the reminders you turn on, read documents with AI when you use AI Reading, work out currency, duty, per diem and invoice figures, and keep copies on your phone for offline use. To run your subscription. To keep the Service secure, fix problems and answer you. To meet legal obligations, such as tax records for payments.

Legal basis (GDPR and UK GDPR): performing our contract with you; our legitimate interests in running, securing and improving the Service; your consent where we ask for it, including for health information in a medical certificate you choose to store (you can withdraw it by deleting that document); and legal obligations.

When you use AI Reading (CallSign Pro), the file or email you are importing is sent to Anthropic (the Claude AI model) to read it and suggest fields. Anthropic processes it on our behalf under its commercial terms, which do not allow it to train its models on this data. Nothing is saved to your records until you check and confirm it. On Free, nothing is sent for AI Reading.

Service providers who process data for us under written agreements: Supabase (database, sign-in and file storage, hosted in Frankfurt, Germany (European Union)); Anthropic (AI Reading); RevenueCat, Apple, Google and Stripe (subscriptions and payments); Postmark (receiving emails you forward to your CallSign Inbox); and Expo (app updates and web hosting). Weather and NOTAM requests send only airport codes and routes, never your identity.

People you choose: anyone you send a share link or availability link to sees only what that link shows; a crew member you add to a trip sees that trip's itinerary, briefing and aircraft check, never your pay, expenses, invoices, documents or logbook; agencies see your marketplace profile only if you publish one; FBO notes and files you mark as shared are seen by other CallSign crew members.

Authorities, only where the law requires it, and a buyer of our business, who must keep this policy's protections.

Pilots and cabin crew use CallSign worldwide and some providers are in the United States or other countries. Where personal data leaves the UK or the European Economic Area we rely on adequacy decisions or the standard contractual clauses (and the UK addendum) with our providers.

For as long as your account is open. When you delete something it is removed from the Service straight away. When you delete your account, your records and files are deleted at once and any remaining copies in encrypted backups expire within 30 days. We keep subscription and payment records only as long as tax law requires. Copies saved on your own devices are removed when you sign out or delete the app.

Wherever you live you can see, export, correct and delete your data in the app: export your Logbook, CV, trip summaries, invoices and expenses, edit anything you added, and delete your whole account in Profile under Delete Account.

Under the GDPR and UK GDPR you also have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interests. Email flyguy2006@gmail.com; we answer within one month. You can complain to your data protection authority, such as the ICO in the UK or the authority where you live in the EU.

Data is encrypted in transit and at rest, each crew member's records and files are walled off from everyone else's at the database level, and only a small number of people can reach production systems. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

CallSign is for working pilots and cabin crew and is not meant for anyone under 18. We do not knowingly collect data from children.

If we change this policy in a way that matters, we will tell you in the app or by email before the change applies.

Washateria LLC, 2901 Shenandoah Ave, Saint Louis, MO 63104, United States. Email: flyguy2006@gmail.com.