Privacy Policy

This Privacy Policy describes how Drone Checklist (“we,” “us,” the “app”) collects, uses, and shares information when you use the Drone Checklist mobile app or the website at dronechecklists.com.

Who we are. Drone Checklist is operated by Utah Drone Video (the “operator”), based in the United States. For the purposes of the EU/UK GDPR, the operator is the data controller of the personal information described in this policy. You can reach us at contact@utahdronevideo.com.

1. Information we collect

Account information

• Email address and display name provided by Google Sign-In through Firebase Authentication.
• Optional profile fields you enter in the app: full name, FAA Part 107 certificate number, and default drone model.
• Account creation time and last sign-in time, used to keep your account synced and for basic account security.

App content you create

• Flight logs: date, location (free-form text you enter), drone model and type, flight duration, pilot-in-command and total time, number of flights, and notes. Depending on how you complete a log, an entry may also include the pilot name recorded on the flight, your FAA certificate number, crew size and whether the crew was briefed, whether a risk assessment and an IM SAFE fitness-to-fly self-assessment were completed, a hazardous-attitudes self-check, drone registration status, operation type (recreational or Part 107), and any weather or condition issues you noted.
• Drone fleet: the drones you save to your fleet, including nickname, model, and drone type, and — if you enter them — the FAA registration number and Remote ID. This stays private to your account.
• Companies and memberships: the company name, description, and website you enter when creating a company; your membership status with companies you join.
• Support tickets: messages you send through the in-app support form.

Subscription information

• Subscription status (active or inactive) and a subscription identifier sent to us by PayPal when you subscribe to the Business Plan. We do not collect or store your credit card or bank details — PayPal handles payment information directly.

Device location

• If you tap the “current location” button on the airspace map, we use your device’s location once to center the map and look up nearby airspace data. Your location is used in memory and is not saved to your account.

Diagnostic information

• The Firebase SDKs used to sign you in and store your data may transmit basic operational identifiers and network diagnostics to Google (for example, a Firebase Installation ID). The app does not currently include a dedicated crash-reporting or analytics SDK (such as Crashlytics or Google Analytics for Firebase).

Abuse-prevention data

• When you submit the account-deletion form on our website, or when your browser reports a Content-Security-Policy issue, we record your IP address and browser user-agent string. We also key short-lived rate-limit counters by IP address. This data is used only to prevent abuse and spam of these endpoints, never for advertising or profiling.

2. How we use information

• To authenticate you and keep your account secure.
• To provide app features — checklists, logbook, fleet management, weather, airspace, NOTAMs, TFRs, and company management.
• To enforce access to paid features (the Business Plan).
• To respond to support requests you send.
• To detect abuse and enforce rate limits on third-party data lookups.
• To diagnose crashes and improve the app.

3. How information is shared

We do not sell your personal information. We share information only with the service providers and parties listed below.

Service providers (data processors)

• Google / Firebase — hosts the app database (Firestore), authentication, cloud functions, and web hosting. Subject to Google’s privacy practices.
• PayPal — processes Business Plan subscription payments. PayPal handles your payment information directly under their privacy policy.

External data sources we query on your behalf

• Aviation Weather Center (aviationweather.gov) — we query this U.S. government API for METAR weather data. No personal information is sent.
• FAA NOTAM API (external-api.faa.gov) — we query for NOTAMs and TFR boundary data. No personal information is sent.
• FAA ArcGIS service (services6.arcgis.com) — we query for LAANC grids and FRIA boundaries. No personal information is sent.
• OpenStreetMap / Nominatim — if you search for a location on the airspace map, your search query is sent to Nominatim. Map tiles are loaded from OpenStreetMap servers.

Other users

• If you join a company in the app, the company’s admin(s) can view your display name, email, and any flight logs you record under that company.
• Other pilots can see the public information of companies you create (name, description, website).

Legal disclosures

• We may disclose information if required by law, subpoena, or to protect the rights, safety, or property of users or the public.

International transfers

• Firebase (Google Cloud) may store and process your data on servers in the United States. If you use the app from outside the United States, your information will be transferred there. Google Cloud offers data-transfer safeguards for such transfers, including the EU–U.S. Data Privacy Framework and the European Commission’s Standard Contractual Clauses.

4. Data retention

• We keep your account data and content for as long as your account is active.
• You can delete your flight logs, drone fleet entries, and companies you own from within the app.
• To delete your entire account and all associated data, use Delete Account in the app’s Profile screen, submit the form at dronechecklists.com/deleteaccount, or email us at contact@utahdronevideo.com from the email address on the account. In-app deletion takes effect immediately; requests submitted by form or email are completed within 30 days, except for information we are legally required to retain.
• Firebase keeps brief audit and backup records for operational reasons; these expire on standard Firebase retention schedules.
• Abuse-prevention records: rate-limit counters keyed by IP address are short-lived and roll over on their time window. Account-deletion requests submitted through our website (email, reason, and IP address) are retained until the request is actioned and then for a limited period for our records. Content-Security-Policy problem reports appear only in short-lived server logs.

5. Your rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Withdraw consent for optional processing at any time.

To exercise any of these rights, edit your profile in the app, delete content within the app, or email contact@utahdronevideo.com.

6. Security

• All traffic between the app and our servers is encrypted using HTTPS.
• Database access is restricted by Firebase Security Rules so users can only read and write their own data, plus data shared by companies they belong to.
• We do not store credit card or bank details. Payment information is handled by PayPal.
• No security measure is perfect. If we learn of a breach affecting your information, we will notify affected users in accordance with applicable law.

7. Children’s privacy

Drone Checklist is intended for adult drone pilots and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Third-party links

The app and website may link to third-party websites (for example, FAA resources, PayPal, weather services). We are not responsible for the privacy practices of those sites. Please review their policies before providing any information.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Effective” date at the top of this page when we do. Significant changes will be highlighted in the app or by email when reasonable.

10. Contact

Questions about this Privacy Policy or your data:
contact@utahdronevideo.com