Legal

Privacy Policy

Effective date: May 21, 2026  ·  Last updated: May 21, 2026

1. Who We Are

QuickLogs (the “Service,” “QuickLogs,” “we,” “our,” or “us”) is based in Alabama, United States. This Privacy Policy describes how we collect, use, store, and share information when you use quicklogs.app. By using QuickLogs, you agree to the practices described here.

2. Information We Collect

We collect the following categories of information:

  • Account information — your email address and authentication credentials when you create an account.
  • Logbook images — photos or scans of your paper logbook pages that you upload for processing, stored securely in cloud storage during processing and for ongoing review support.
  • Extracted flight data — structured flight records produced by our AI and OCR pipeline from your images, including dates, airport identifiers, aircraft tail numbers, aircraft make/model, flight times, instructor endorsements, remarks, and other fields that appear in your logbook.
  • Usage data — pages processed, credit balances, session activity, device and browser metadata, and product interaction data used to operate and improve the Service.
  • Payment information — handled exclusively by Stripe. We receive only metadata such as the last four digits of a card, transaction ID, and amount. We do not store credit card numbers or bank details.
  • Support communications — emails or messages you send us when requesting help.

3. How We Use Your Information

We use the information we collect to:

  • Process your logbook images using OCR and AI extraction pipelines.
  • Store your verified flight records in your QuickLogs digital logbook.
  • Manage your account, credits, and billing.
  • Send transactional emails (account confirmations, support responses, receipts).
  • Operate, secure, and improve the Service — for example, debugging extraction quality issues, monitoring error rates, and measuring product performance.
  • Comply with applicable legal obligations.

We do not sell or share your personal data as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA), and we do not engage in cross-context behavioral advertising.

4. AI Processing & Model Training

We use a combination of proprietary extraction logic and third-party AI and OCR services to convert your logbook images into structured flight data. Our specific AI and OCR providers are confidential and may change from time to time. All of our current AI and OCR providers are major U.S.-based enterprise platforms that operate under contractual data-processing terms with QuickLogs.

We do not use your uploaded images, extracted flight data, or any other personal information to train, fine-tune, or improve AI or machine learning models — ours or our providers’. We use our AI and OCR providers under paid enterprise terms that contractually prohibit training on customer content. These providers process your data only to return extraction results to QuickLogs and then delete or retain inputs only for the short period required for abuse monitoring, as defined in their published terms.

When we improve the accuracy of the Service, we do so by adjusting prompts, post-processing logic, validation rules, and reference datasets — not by training models on your data.

You may request a current list of our AI and OCR subprocessors for your own compliance review by emailing customer-support@quicklogs.app.

5. Subprocessors

QuickLogs relies on a small number of third-party service providers (“subprocessors”) to operate the Service. We publicly disclose the providers that handle account, payment, and hosting data below. For competitive reasons, the specific AI and OCR providers we use to extract data from logbook images are not publicly listed, but they are all U.S.-based enterprise platforms operating under data-processing terms that prohibit AI training on customer content (see Section 4). You can request the current AI/OCR provider list at any time by emailing customer-support@quicklogs.app.

  • Supabase — authentication and database hosting (United States). Privacy Policy
  • Stripe — payment processing. We share only the minimum information required to complete transactions. Privacy Policy
  • Vercel — frontend web hosting and content delivery. Privacy Policy
  • U.S.-based cloud infrastructure providers — for secure image storage, backend API hosting, AI/OCR processing, and error monitoring. All are major enterprise platforms operating under data-processing terms with QuickLogs.

Each subprocessor is bound by its own privacy policy and a data-processing agreement with QuickLogs where applicable.

6. Data Storage, Region, and Retention

Your account data and flight records are stored in a Supabase Postgres database hosted in the United States. Logbook images are stored in secure U.S.-based cloud storage. All processing of your data occurs in the United States.

  • Account & flight records: retained until you delete your account.
  • Logbook images: retained until you delete the corresponding session or your account.
  • Backups: encrypted backups are retained for up to 90 days.
  • Billing records: retained for up to 7 years as required by U.S. tax and accounting law.
  • Support emails: retained for up to 3 years for service-history purposes.

7. Cookies & Analytics

QuickLogs uses cookies and similar technologies that are essential to operating the Service, including session authentication and security cookies. We do not use third-party advertising cookies, tracking pixels, or cross-site advertising identifiers.

We may use limited product analytics (such as page-load timings and error reporting) to operate and improve the Service. These do not build advertising profiles about you.

8. Data Security

We use industry-standard security practices including TLS encryption in transit, encryption at rest, role-based access controls, and short-lived signed URLs for image access. Authentication is managed by Supabase with secure session tokens.

No system is completely secure. While we work to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and using a strong, unique password.

9. Data Breach Notification

In the event of a security incident that we reasonably believe has resulted in unauthorized access to your personal data, we will notify affected users by email without undue delay, and in any event within 72 hours of confirmation, and will report to applicable regulators where required by law.

10. Your Rights & Choices

You have the right to:

  • Access — view all your flight records in your QuickLogs logbook at any time.
  • Export (Portability) — download your flight data as a JSON backup or ForeFlight-compatible CSV at any time.
  • Correct — edit any extracted field in the Review Station.
  • Delete — delete individual sessions, or your entire account and all associated data, by pressing the Delete Account button under Settings → Account. Account deletion is irreversible and removes your uploaded images, extracted flight data, and account metadata within 30 days. Encrypted backups are purged within 90 days.
  • Object / Restrict — ask us to limit or stop certain processing of your data, where applicable.

To exercise any right not addressed above, email us at customer-support@quicklogs.app. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority in your jurisdiction.

11. California Residents (CCPA/CPRA)

If you are a California resident, you have the right to: (a) know what personal information we collect, use, disclose, and retain; (b) request deletion of personal information; (c) correct inaccurate personal information; (d) opt out of the sale or sharing of personal information (we do not sell or share); and (e) not be discriminated against for exercising your privacy rights. To exercise these rights, email customer-support@quicklogs.app. We may need to verify your identity before responding.

12. International Users (GDPR / UK GDPR)

QuickLogs is operated from the United States, and your data will be processed in the United States. If you access the Service from the European Economic Area, the United Kingdom, or another jurisdiction with data-protection laws, you consent to the transfer of your information to the United States.

Our legal bases for processing personal data include: (a) performance of a contract with you (providing the Service), (b) our legitimate interests in operating and securing the Service, (c) compliance with legal obligations, and (d) your consent where required.

You have the rights described in Section 10 above, including access, rectification, erasure, portability, restriction, and objection. For data-protection inquiries, contact customer-support@quicklogs.app.

13. Children's Privacy

QuickLogs is not directed to children under 16. We do not knowingly collect personal information from children under 16. Users between the ages of 16 and 18 must have their parent or legal guardian’s permission to use the Service. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by a notice within the application before the change takes effect. Continued use of QuickLogs after the effective date constitutes acceptance of the updated policy.

15. Contact

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Email: customer-support@quicklogs.app

© 2026 QuickLogs. All rights reserved.