Privacy Policy

We collect the following categories of information:

• Account information — name, email address, password (stored hashed), time zone, and notification preferences.
• Sign-in via Google — if you sign in with Google, we receive your name, email address, and basic profile information through Google OAuth. We do not receive your Google password.
• Operational data — aircraft details, schedules and bookings, flight and maintenance logs, squawks, endorsements, partnership and billing records you enter into the Service.
• Documents — files you upload (e.g. maintenance scans, insurance, registration), stored on Amazon S3.
• Payment information — payments are processed by Stripe. We do not store full card numbers; we retain transaction metadata and references provided by Stripe.
• Technical data — IP address and browser user-agent, captured for security and audit logging.
• Diagnostics (apps only) — when the app hits an unexpected error it sends us a crash report containing the error message, the stack trace, the name of the screen you were on, your operating-system version, and the app version. Reports go to our own servers, not to a third-party analytics provider. They do not include the values you typed into a form, the contents of a request, or your documents.
• Camera and photos (apps only) — if you choose to add an aircraft photo or attach a document, the app asks permission to use your camera or photo library. It reads only the images you pick, and only when you pick them.

We do not use analytics, advertising, or tracking software. The apps contain no third-party SDK that collects usage data, we do not track you across other companies' apps or websites, and we do not build advertising profiles. We do not collect precise or coarse location, contacts, health data, or device identifiers used for advertising.

We use information to:

• Provide, operate, and maintain the Service;
• Authenticate you and keep your account secure;
• Process subscription and partnership payments;
• Send transactional email (invitations, password resets, notifications) — you control notification preferences in your account;
• Diagnose crashes and fix defects;
• Maintain audit logs and detect or prevent fraud and abuse;
• Comply with legal obligations.

We do not use your operational data, documents, or diagnostics to train machine-learning models, and we do not use your information for advertising.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on these bases:

• Performance of a contract — providing the Service you signed up for, including your account, your aircraft records, and billing.
• Legitimate interests — securing the Service, keeping audit logs, preventing fraud and abuse, and fixing crashes.
• Legal obligation — tax, accounting, and records we are required to keep.
• Consent — camera and photo-library access in the apps, which you grant per device and can withdraw in your device settings at any time.

We share information only with service providers who process it on our behalf, under contract, to help us run the Service:

• Google — authentication (sign-in with Google).
• Stripe — payment processing and subscription billing.
• Amazon Web Services — document storage (S3) and transactional email (SES).
• Turso — managed database hosting.
• DigitalOcean — application hosting.

We may also disclose information where required by law, to enforce our Terms of Service, or in connection with a merger, acquisition, or sale of assets — in which case we will give notice before your information becomes subject to a different privacy policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding twelve months.

SharedHangar is multi-user by design. When you join an account, other members of that account see the records you create in it — your bookings, your flight and maintenance entries, squawks you report, endorsements recorded against you, and your share of partnership billing. Administrators of that account additionally see audit entries attributing actions to you. Consider this before entering information into an account you share.

We operate in the United States and our service providers store and process information there. If you access the Service from outside the United States, you are transferring your information to a country whose data-protection laws may differ from your own. Where required, transfers out of the EEA, the UK, or Switzerland rely on the European Commission's Standard Contractual Clauses or another approved safeguard.

We retain your information for as long as your account is active or as needed to provide the Service. Some records (e.g. transactions and audit logs) may be retained longer where required for legal, accounting, or security purposes. Diagnostic reports are retained for up to 90 days.

Backups are kept on a rolling basis and are overwritten in the ordinary course, so deleted information can persist in a backup for a short period after deletion takes effect in the Service.

You may delete your account at any time, and you do not need to ask us to do it.

• In the iOS or Android app — open Profile and choose Delete account.
• By email — write to privacy@sharedhangar.com from your account's email address and we will do it for you.

Deleting removes your personal information. If you are the only member of an account, that account goes too, along with its aircraft, bookings, logs and documents. If you share an account with other people, you are removed and their records are left intact. Transaction and audit records are kept as described in Data Retention, with your personal details removed from them.

Full details, including what is removed and what is kept, are on our account deletion page.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you, and receive a copy of it;
• Correct information that is inaccurate or incomplete;
• Delete your personal information;
• Receive your information in a portable, machine-readable format;
• Object to or restrict certain processing;
• Withdraw consent where we rely on it, without affecting processing already carried out;
• Not be discriminated against for exercising any of these rights.

You can review and update your account information and notification preferences yourself at any time while signed in, and delete your account from the Profile screen in the apps. For anything else, email privacy@sharedhangar.com. We will verify your request against the email address on your account and respond within 30 days (45 days for requests under the California Consumer Privacy Act, extendable once where permitted). You may use an authorized agent where the law allows it.

If you are in the EEA or the UK, you also have the right to lodge a complaint with your local supervisory authority. We would appreciate the chance to address your concern first.

We use industry-standard measures to protect your information, including encrypted connections (TLS), hashed passwords, role-based access controls, and account-scoped data isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a breach affecting your personal information, we will notify you and any applicable regulator as required by law.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, email privacy@sharedhangar.com and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice in the Service or by email.

Questions, requests, or complaints about this Privacy Policy? Contact us at privacy@sharedhangar.com.

For help using the Service, email support@sharedhangar.com. For legal notices, email legal@sharedhangar.com.

Pattern Interrupt Inc.
SharedHangar