Privacy policy
Last updated: September 18, 2026
1. Data controller
FLIGHTSHARED, a French SASU with a share capital of €1, 4 rue Montmejean, 33100 Bordeaux, France (Bordeaux trade register 999 869 662) — contact: contact@flightshared.com.
2. Data processed and purposes
- Account: email address, password (stored hashed only), first name (optional). Purpose: create and secure your account, send confirmation and reset codes. Legal basis: performance of the contract.
- Installation identifier: a random identifier specific to your installation, used to secure your sessions and to grant the free trial only once per device. Legal basis: legitimate interest (fraud prevention).
- Subscription: transaction identifiers provided by Apple or Google, plan, period dates. No payment data passes through our servers: payment is handled by Apple or Google. Legal basis: performance of the contract.
- Technical data: IP address and request timestamps, kept temporarily in server logs for security and rate limiting. Legal basis: legitimate interest (security).
- Sync between your devices: while you are signed in, the items you create in the app are stored on our servers so that they are available on your other devices (phone, tablet): your navs (name, route points), your own points (name, position, notes and attachments), your map layers (imported KML, GPX or GeoJSON files), your own documents and your aircraft profiles (registration, masses, arms, fuel figures). For an official document kept offline, only its reference is synced; the file is downloaded again from its publisher. Not synced: your position, your flight recordings, your MBTiles base maps and your display settings. This data is neither analysed nor used for any other purpose. Legal basis: performance of the contract.
- Position and flights: your GPS position, nav logs and flight recordings are processed on your device and are not sent to our servers. Some features (live traffic) send the displayed map area to fetch matching data; that area is not stored.
- Weather and aeronautical data: forecast/observation files and country data packs are downloaded from our servers; those downloads carry no personal data beyond the technical data above.
FSnav contains no advertising, no ad trackers and no behavioural analytics SDK. This website uses no cookies.
3. Recipients and processors
- Amazon Web Services EMEA SARL (Luxembourg) — servers and database hosting (account, subscription, synced items other than files), EU region (Ireland, eu-west-1).
- Cloudflare, Inc. — delivery of data packs and weather files, DNS; storage of synced files (attachments, documents, layers) in a private space, Western Europe location.
- Apple Inc. / Google LLC — subscription and payment processing under their own policies.
- Email delivery provider (Amazon SES) — confirmation and reset codes.
- Vercel Inc. — hosting of this website.
No data is sold or transferred to third parties for commercial purposes.
4. Retention
- Account data: until you delete the account (anytime in the app: Home → avatar → Delete my account), then immediately removed from the database.
- Synced items: until you delete them in the app, or until the account is deleted. A deleted item is erased from our servers (its content immediately, its files within minutes); only a deletion marker, with no content, is kept so that your other devices learn of it. When the account is deleted everything goes: the database immediately, the files within the hour. What is saved on your devices stays there.
- Sessions (login tokens): at most 180 days of inactivity; revoked on sign-out or password reset.
- Subscription history: duration of the contract, then only as required by accounting and tax obligations.
- Technical logs: limited duration, security purposes only.
5. Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection. Account deletion is available directly in the app. Any other request: contact@flightshared.com. You may lodge a complaint with the French supervisory authority (CNIL, cnil.fr).
6. Security
Hashed passwords (bcrypt), session tokens stored hashed server-side and in the device’s secure keychain, encrypted transport (HTTPS), attempt limiting, short-lived confirmation codes. Synced files are stored encrypted in a private space, partitioned per account, reachable only through temporary links (15 minutes) issued to your signed-in devices.
7. Minors
FSnav is intended for pilots and student pilots. Under 15, use of the service requires the consent of a parent or guardian.
8. Changes
This policy may change; the update date is shown at the top and material changes are announced in the app.