Privacy Policy
Last updated: [dd/mm/yyyy]
1.Data controller
[Name and Name] / [Company Ltd, business ID 1234567-8, address]
Privacy contact: privacy@hangarr.app
2.What data we process
Account data: email address, name, hashed password.
Data created by using the service: club memberships and roles, aircraft bookings, flight logs (times, duration, landings, notes), training sign-offs and instructor feedback, flight credits and their transactions, aircraft remarks, maintenance windows, club notices, club invitations.
Technical data: login sessions, server and error logs containing IP address and timestamp.
We do not collect location data and do not use tracking or advertising cookies.
3.Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing the service: account, bookings, flight logs, training, credits | Performance of a contract |
| Security, abuse prevention, troubleshooting | Legitimate interest |
| Essential service emails (password reset, club invitations) | Performance of a contract |
| [Newsletter / marketing, if introduced] | [Consent] |
We do not carry out automated decision-making or profiling.
4.Who can see your data
Hangarr is a shared service, so some of your data is visible to other members of your club:
- Club members see your name and your bookings (aircraft, start and end time).
- The club admin sees the member list, all bookings, and members' credit balances and transactions.
- Instructors see the confirmed flight logs of students paired with them, and can sign them off and leave feedback.
- Head of training and chairman see training data and can undo sign-offs.
- Secretary and chairman handle credit transactions and top-up requests.
Members of other clubs cannot see your data at all. We do not sell or share your data with third parties for marketing purposes.
5.Service providers processing data on our behalf
- Lovable — application hosting and the Lovable Cloud backend.
- Supabase — database and authentication (as part of Lovable Cloud).
- [Landing page host] — website hosting.
- [Email provider, if separate] — delivery of service emails.
Data is stored in [check the region in your Lovable Cloud project settings, e.g. EU (Frankfurt)]. [If outside the EU, describe the transfer mechanism here, e.g. EU Standard Contractual Clauses.]
6.Retention
Account data is kept for as long as the account exists. When an account is deleted, personal data is deleted or anonymised within [X days]. Club activity history (such as flight logs and credit transactions) may remain with the club in anonymised form, as the club needs it for its own records. Server logs are kept for [X months].
7.Your rights
You have the right to access the data we hold about you, correct inaccurate data, request deletion, restrict or object to processing, and receive your data in a portable format. Send requests to privacy@hangarr.app. We respond within one month.
If you believe we process your data unlawfully, you may lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
8.Cookies
We use only cookies and browser storage strictly necessary for the service to work, to keep you signed in. We use no analytics or advertising cookies.
[If analytics is added to the landing page, this section must be updated and a cookie consent banner is required.]
9.Changes
We update this policy as the service evolves. We will notify you in the app of significant changes. The current version is always available at hangarr.app/privacy.