Privacy policy

Summary

CrewBook by FHG stores your logbook on your own device. Using the app requires no sign-in and no account, and we do not receive your flights, your records, your documents, or a record of how you use the app. The app offers an optional, free FHG Cloud account for one purpose: keeping an encrypted backup of your logbook that only you can decrypt, and signing in to the CrewBook web app to reach it. If you never create an account, nothing about you reaches Far Horizon Group. The only other copies that leave your device are the ones you or your own Apple iCloud settings create, and those stay in your Apple account.

Information we collect

If you do not create an FHG Cloud account: none. CrewBook by FHG does not require an account or an email address, and does not transmit your logbook, military record, medical or certificate records, aircraft or people directories, attachments, imported files, or usage activity to Far Horizon Group.

If you create an FHG Cloud account, Far Horizon Group stores: your email address; the key-derivation salt and settings your app chose; a one-way authentication verifier derived on your device from your password — never the password itself; if you set up an authenticator app, the shared secret needed to check its codes; your encrypted backups (the current one and up to five earlier versions) and small encrypted key-recovery envelopes, none of which we can decrypt; and operational details of each backup, such as its version number, size, and the times requests were made. Like any web service, our server also sees the network address of each request and uses it for rate limiting and abuse prevention.

With or without an account, the app contains no third-party analytics, advertising, or tracking software, and no data is sold or shared for advertising.

What is stored on your device

Your logbook entries, military records, medical and certificate records, aircraft and people directories, attachments, and app settings are stored in the app's own storage on your device, protected by your device's system protections — on Apple devices, file protection tied to your passcode.

Automatic backups on your device

Because a logbook is a career record, CrewBook writes protective backup copies into the app's Documents folder each time it launches: a logbook file in LogTen-compatible text format, a military record file in JSON, and a full-fidelity JSON archive. These files are readable, are not encrypted by the app, and exist so you can recover your record by re-importing it.

iCloud Drive copies

On Apple devices, when iCloud Drive is available for CrewBook, the app also copies that full JSON archive, and mirrors your attachment files on a best-effort basis, into CrewBook's own iCloud Drive folder in your Apple account. These copies are readable rather than encrypted by the app, and they are handled by Apple under your iCloud settings and Apple's terms. Far Horizon Group has no access to them. If you do not want these copies, turn iCloud Drive off for CrewBook in your device settings.

FHG Cloud accounts

FHG Cloud is optional and free, and exists so your logbook can survive a lost device. Accounts are created only inside the CrewBook by FHG apps; the CrewBook web app signs in to an existing account and cannot create one. Creating an account sends your email address, a key-derivation salt, and an authentication verifier derived on your device from your password. Your password never leaves your device.

You must confirm your email address before the service will store a backup; verification messages are delivered by our email-delivery provider, which processes your address for that purpose. You must also set up an authenticator app (time-based one-time codes) before your first backup. The authenticator is the identity check for password reset — a career record deserves something stronger than an email inbox.

Encrypted cloud backup

Backups are sent only when you choose to back up in the app. The app assembles its full-fidelity archive, encrypts it on your device with keys derived from your password, and uploads one sealed envelope. The server performs no decryption and holds no key that opens your data; it cannot distinguish your logbook from random noise. We keep your current backup and up to five earlier versions, each up to 25 MB. Attachment files are not included in the cloud backup. If the app's FFDO tools are enabled, that planning data is stored separately on your device, is excluded from every backup, and never reaches FHG Cloud.

Restoring is always explicit: the app shows what a restore will land before it lands, and a backup conflict between two of your devices stops and explains itself rather than silently overwriting either side.

The CrewBook web app

Signing in at crewbook.farhorizongroup.com fetches your encrypted backup and decrypts it in your browser, on your machine, using keys derived from your password. Your decrypted logbook is not sent back to us. The web app cannot create accounts.

Password reset, retention, and account deletion

Because we cannot decrypt your data, losing your password has real consequences. Resetting a password requires your verified email address and your authenticator. A reset that cannot carry your old encryption keys forward sets your stored backups aside for 90 days and then deletes them; it cannot unlock them. An account that has never confirmed its email address and never stored a backup is removed after 30 days. An account with a confirmed email address or a stored backup is kept until you ask us to close it. To close your account or delete the backups stored under it, email [email protected] from the account's address.

Imports and on-device recognition

Files you import, including LogTen and ForeFlight exports, military JSON, and flight-record PDFs, are read and parsed on your device. Image and document recognition uses Apple's on-device Vision framework. Imported content is not uploaded anywhere by the app.

Photos, camera, and files

CrewBook asks your device for access to photos, the camera, or files only at the moment you choose an action that needs it, such as capturing a flight record or importing a logbook. The selected content is used for that action and stays on your device.

Exports and sharing

Reports, exports, and manual backups are created only when you ask for them, and go only where you send them. If you save a file to a cloud-backed location or send it through another app, that provider or app handles it under its own terms.

Subscriptions and payment

CrewBook by FHG offers an auto-renewable annual subscription sold through the App Store. Apple processes the purchase and the payment. Far Horizon Group never receives your card number, billing address, or Apple Account credentials, and receives only the aggregate sales and subscription reporting Apple provides to developers. Manage or cancel a subscription in your Apple Account settings.

Deleting your data

You can delete entries inside the app at any time. Deleting the app removes its private storage according to your operating system's behavior. Copies you exported, and copies in CrewBook's iCloud Drive folder, are yours to remove from those locations. If you created an FHG Cloud account, closing it — see the section above — deletes the encrypted backups stored under it.

Children

CrewBook by FHG is a professional tool for pilots and is not directed to children.

Changes to this policy

If this policy changes, the effective date above changes with it, and the current version is always published at this address.

Contact

Questions about this policy: [email protected].