Airworthiness+

Privacy Policy

Last updated 7 September 2026

Airworthiness Limited respects your privacy and is committed to protecting your personal data. This policy explains what we collect, why we collect it, how we look after it, and the choices you have.

It applies to everything we provide: our website, our contact form, and our apps and online services. Where a particular product handles data in a way this policy does not cover, we say so in that product.

In short, we collect only what we need to run our services and answer you.

1. Who we are

Airworthiness Limited is the data controller for the personal data described in this policy.

We are a company registered in England and Wales, company number 17130234. Our registered office is Collingwood Buildings, 38 Collingwood Street, Newcastle upon Tyne, NE1 1JF, United Kingdom.

You can reach us at contact@airworthiness.co.

2. What we collect

When you visit our website: Our hosting provider keeps standard server logs, such as your IP address and the pages you request, to keep the site running and secure.

When you contact us: If you email us or use our contact form, we receive your name, your email address, the subject of your enquiry and what you write. Our form provider passes your message to us and does not use it for anything else.

When you create an account: You sign in with a one-time code sent to your email address, or with a sign-in provider such as Google. Either way we receive your email address and an account identifier. If you use a sign-in provider and allow it, we also receive your name. There are no passwords. A code works once and expires after a short time.

When you use our services: We store the information you choose to record. Our professional record-keeping products include your profile, your experience, your licences and ratings, your training and examination records, your employment history, and any items you list. Where another person signs off on one of your entries, we store the details they provide so the entry can be evidenced later.

When you take part in shared features: Some of our services include a feed or other shared areas. Anything you post there, including comments, connections and any location you attach, is visible to other users. The blocks and reports you create are stored so we can act on them.

Optional profile details: A profile photo and similar details you choose to add.

3. Why we use it

We use your personal data to:

  • create and run your account and keep your records in sync across your devices;
  • keep your records safe so they survive a lost or replaced device;
  • remind you about dates you have asked to be reminded about;
  • operate shared features and act on reports and blocks;
  • answer your enquiries and provide support;
  • keep our services secure and prevent misuse;
  • meet our legal obligations.

We do not make automated decisions about you that have a legal or similarly significant effect.

UK data protection law requires a lawful basis for each use of your personal data. Ours are:

  • Contract: Running your account, and storing and syncing your records.
  • Consent: Posting to shared features and attaching a location, which you give each time. You can withdraw consent at any time.
  • Legitimate interests: Sending reminders, holding sign-off details so your records can be evidenced, moderating shared features, answering enquiries, and keeping our services secure.
  • Legal obligation: Where the law requires it.

Some products include optional settings, such as anonymised analytics or contact from third parties. Each is off unless you switch it on. We do not currently share any data for those purposes. If that changes, we will update this policy and ask for your consent first.

5. Who we share it with

We share your data only with the providers we need to run our services, and only what each needs:

  • Hosting and database: Our services and your records are hosted by Supabase in Ireland. Access controls mean your records can only be read by your own signed-in account.
  • Email delivery: Sign-in codes and service emails are sent through Resend, which sees only the address it sends to.
  • Sign-in providers: If you sign in with Google, Google handles the sign-in and receives nothing else about you.
  • Contact form: Messages sent through our website form are delivered by Web3Forms.

Other users of our services see only what you post to shared features, together with the profile details you have chosen to show. They never see your private records.

Within our company, access is limited to the people who need it to run and support the service.

We may disclose data where the law requires it, or where necessary to protect people's safety or our legal rights. We do not sell personal data.

6. Where it is kept

Your records are held in Ireland. Some of our providers are based in the United States or operate globally, so the limited data they handle may be processed outside the United Kingdom. Where that happens we rely on recognised safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

Some data never leaves your device. This may include keys used to seal verified entries, biometric data, locally scheduled reminders, and files such as photos and certificates, with only the filename synced.

7. Security

Your data travels over an encrypted connection and is encrypted at rest. Sign-in tokens are held in your device's secure storage. We use appropriate technical and organisational measures to protect your data. No method of storage or transmission can be guaranteed completely secure.

8. How long we keep it

We keep your records for as long as your account is open, because a professional record is a career-long document.

You can delete your account and everything held with it from within the service. This cannot be undone, so export your records first if you want to keep them. If you would rather we do it for you, email contact@airworthiness.co from your account's email address, and we will erase it within a reasonable timeframe and confirm when it is done.

Deletion takes effect immediately. We keep no automated backup copies from which your records could be recovered afterwards.

Anything you post to shared features stays visible until you delete it, although anyone who has already seen it may have kept a copy.

Enquiries sent to us are kept for as long as needed to deal with them, and then for a reasonable period in case you contact us again.

9. Your rights

Under UK data protection law you have the right to:

  • be informed about how we use your data;
  • access a copy of it;
  • have it corrected or erased;
  • restrict or object to how we use it;
  • receive it in a portable format;
  • withdraw consent where we rely on it.

You can view, correct and export your records within our services, and delete your account at any time. For anything else, email contact@airworthiness.co, and we will respond within one month.

You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

10. Children

Our services are intended for professionals and are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, please contact us and we will remove it.

11. Changes to this policy

We may update this policy as our services or the law change. We will post any changes on this page and update the date at the top.

12. Contact us

If you have questions, concerns or requests about your privacy, email contact@airworthiness.co, or write to Airworthiness Limited, Collingwood Buildings, 38 Collingwood Street, Newcastle upon Tyne, NE1 1JF, United Kingdom.