MiniEFB Privacy Policy

Version: 2.0 (MiniEFB V2) Effective Date: 6 September 2026 Last Updated: 6 September 2026

This version supersedes and replaces every prior version of the MiniEFB Privacy Policy in full.

MiniEFB is an Electronic Flight Bag and digital pilot logbook application (the "App"), operated by Rudolph Bosman trading as Airgroup ("Airgroup", "us", "we", or "our"). This Privacy Policy explains what information the App collects, how we use it, who we share it with, and the choices you have.

By downloading, installing, or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

1. Information We Collect

a. Account Information

• Email address and password (if you sign up directly), or your Apple ID identifier (if you use Sign in with Apple — if you choose Apple's "Hide My Email" option, we only ever see the private relay address Apple generates, never your real one).

• Your first name, last name, and country, which you provide when setting up your profile.

• A profile photo, if you choose to add one.

b. Aviation and Flight Data You Enter

Everything you use the App to record, including but not limited to:

• Flight logbook entries (dates, times, routes, crew, notes, and any personal reflections you write in the flight debrief feature).

• Aircraft records you create or that a syndicate you belong to shares with you (tail number, type, photos, fuel and weight/balance configuration, logbook and maintenance history).

• Licences, ratings, and other privileges you record, including any proof photos or signatures you attach to them.

• Checklists you build or import.

• Flight plans, weight and balance calculations, and fuel planning data.

• Reminders, currency tracking data, and any reports or printed logbook pages you generate.

• Aircraft syndicate and booking information, where you participate in a shared aircraft.

c. Photos and Documents

• Photos you take or choose for a profile picture, an aircraft, or as proof for a licence, rating, or check flight (compressed and size-limited before upload).

• Documents and custom map layers you add (charts, plates, PDFs, or map tile files) are stored in your own iCloud Drive, under your own Apple Account — not on our servers. We never see or have access to these files; they're managed entirely by Apple's iCloud service, subject to Apple's own privacy practices.

d. Crew and Connections

Your first name, last name, country, and profile photo are visible to any other signed-in user of the App through an in-app directory — this lets a pilot searching for a real crew member's name (for example, when adding a co-pilot to a flight) find and correctly identify them by photo before any connection exists between you. Nothing else about your profile or flight data is exposed this way. Anything beyond those four fields (your flight history, aircraft, documents, etc.) is only ever visible to another user if you deliberately choose to share it with them — for example, by sending them a copy of a specific flight, or by adding them to an aircraft syndicate you own or belong to.

e. Location Data

The App requests location access to show your position on the moving map and calculate your progress along a planned route. If you grant "Always" access, the App can continue tracking your position and flight time while backgrounded during an active flight, so a logged flight time isn't lost if you switch apps mid-flight. Location data is used only for these App functions — it is never used for advertising or tracking across other apps, and we do not have an advertising identifier (IDFA) or any cross-app tracking mechanism in the App.

f. Local Network Access

If you connect a flight simulator (X-Plane or Microsoft Flight Simulator) via the App's Simulator Connection feature, the App listens for position broadcasts from that simulator on your local network. This never sends anything to us or leaves your local network — it's a receive-only feature for practicing with a simulator.

g. Device and Diagnostic Information

We do not use any third-party analytics or advertising SDK, and the App does not itself collect usage analytics. If you have opted in to sharing diagnostics with app developers (in your device's own iOS Settings), Apple may provide us with anonymised crash reports through Apple's own developer tools — this is governed by Apple's privacy practices, not ours, and we cannot identify you from it.

h. Subscription and Entitlement Status

Purchases are handled entirely by Apple through the App Store — we never see or store your payment card details. We receive confirmation from Apple of your subscription or purchase status (active, trial, expired, etc.) so the App can unlock the features you've paid for, and, where you use one, a redeemed license code.

2. How We Use Your Information

We use the information above to:

• Provide the App's core functionality, and keep your data synchronised across your own devices.

• Let you build, log, and analyse your own flights, aircraft records, and career/currency data.

• Enable features you deliberately choose to use with other people — aircraft syndicates, sharing a flight with a connected crew member, and the crew-lookup directory described above.

• Send you push notifications for things you've asked to be notified about (for example: a sync issue, a nav data update, a connection request, or a shared flight) — each notification type can be turned off individually in Settings.

• Process support requests and feedback you send us.

• Comply with legal obligations, and protect the safety, security, and integrity of the App.

We do not use your data for advertising, do not build behavioural profiles, and do not sell personal information — to anyone, ever.

3. How We Share Your Information

We do not sell your personal data. We share it only in these circumstances:

• With our service providers, who process it on our behalf under contract, solely to provide the App:

  • Supabase — our database, authentication, file storage, and server-side processing provider. Your account data, flight and aircraft records, and uploaded photos are stored with Supabase, hosted in Australia (see Section 6).

  • Apple — App Store billing and subscriptions, Sign in with Apple, push notifications (Apple Push Notification service), and iCloud storage for your own documents (Section 1c).

• With third-party aviation data sources, to power specific features — when you use Weather Briefing, the moving map's traffic overlay, or view an airport's weather, our servers request the minimum data needed (typically just a location or airport code) from providers including the NOAA Aviation Weather Center, Open-Meteo, and the ADS-B receiver network adsb.lol. These requests are made by our servers on your behalf, and do not include your name, email, or account identity.

• With other users, only where you choose it — the crew directory (Section 1d), a flight you deliberately share with a connected crew member, and aircraft syndicate/booking data with fellow syndicate members.

• If required by law, court order, or valid government request.

• In the event of a merger, acquisition, or sale of assets, with appropriate safeguards for your data.

• With your explicit consent, for any other purpose.

Aeronautical reference data used by the App (waypoints, procedures, airport information) is sourced from third-party aviation data providers and ingested into our own systems — this is a one-way flow of public aeronautical data, and never involves sending any of your personal information to those providers.

4. Data Storage and Retention

• Local-first design. The App works fully offline and keeps a local copy of your data on each device you use it on; that local copy is what the App actually reads from day to day.

• Cloud sync. Your data is also synced to Supabase so it's available across your own devices and safe if a device is lost. It's retained for as long as your account is active.

• Documents and custom map layers live in your own iCloud Drive (Section 1c) and are governed by your own iCloud storage and retention, not by us.

• Account deletion is a real, in-app, self-service feature, not a "contact us and wait" process:

  • Delete All Data resets your account's data (flights, aircraft, checklists, and everything else you've entered) back to empty while keeping you signed in.

  • Close & Delete Account permanently deletes your account and all associated data — including your files in our Storage — from our systems.

• Deleting a flight, aircraft, or other record you own removes it from your own devices and our servers; where you've shared something with another user (Section 1d), a copy they've already accepted into their own logbook is theirs and isn't affected by you deleting your own copy.

5. Data Security

We use encryption in transit and at rest for data held with Supabase, and access to your account data is restricted to you (and, for shared data, the specific other users you've chosen to share it with) through database-level access controls, not just app-level checks. No system is completely secure, and we cannot guarantee absolute security.

6. Where Your Data Is Stored

Your account and flight data is stored and processed on Supabase infrastructure located in Australia. If you are located outside Australia, this means your data is transferred to and processed in a different country. We take reasonable steps to keep it secure regardless of where you're located.

7. Your Rights and Choices

Depending on where you live, you may have rights under data protection law (for example, GDPR in the EU/UK, or CCPA/CPRA in California) to access, correct, delete, or receive a copy of your personal data, or to object to certain processing. Regardless of where you live, the App itself already gives you direct, immediate control over most of this:

• View, edit, or delete almost anything you've entered, directly in the App.

• Turn off any category of push notification individually, in Settings.

• Withdraw location or local network permission at any time through your device's own Settings.

• Use Delete All Data or Close & Delete Account (Section 4) at any time, without needing to contact us first.

For anything the App doesn't yet let you do directly, or a request for a copy of your data in a portable format, contact us (Section 10) and we'll respond within the timeframe required by applicable law.

8. Children's Privacy

The App is not directed at children and is not designed for use by anyone under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have, we will delete it.

9. Third-Party Services and Links

The App's Browser feature lets you visit bookmarked external websites. We do not control, endorse, or take responsibility for the privacy practices of any external website — review their own privacy policy before providing any information to them.

10. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data practices:

Rudolph Bosman, trading as Airgroup Email: legal@miniefb.nz Website: https://miniefb.nz

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the App and updating the "Last Updated" date above. Continued use of the App after such changes constitutes acceptance of the revised policy.