Rosternado ("the app", "we", "us") is a flight roster and flight-tracking app for aviation professionals and the people they choose to share their schedule with. This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, and the choices and rights you have.
The app is operated by İnanç Atil ("the developer"). By creating an account and using the app, you agree to the practices described here.
Rosternado is not affiliated with, endorsed by, or sponsored by any airline. Airline names and codes are used only to identify your employer and your duties.
When you register, we collect and store:
| Data | Purpose |
|---|---|
| First name & last name | Identify you to your friends and in friend search |
| Email address | Account login, account recovery, security notices |
| Password | Account login — stored only as a salted hash, never in plain text |
| Account type (crew / non-crew) | Determine app features available to you |
| Airline, base airport, crew ID | Crew accounts only — roster context and duty pre-fill |
| Profile photo (optional) | Displayed to your friends; you choose whether to add one |
If you choose to sign in with Google or Apple, the provider returns your name and email address to create your account. We do not receive your Google or Apple password. If you use Apple's "Hide My Email" feature, we receive only the private relay address Apple generates; we treat it as your contact email until you choose to provide a different one.
The core of the app is your flight roster — flights, standby, training, days off, leave and other duties, including airports, times (in UTC), and flight numbers. This data is created in one of two ways:
We store the friend requests you send and receive, their accepted/pending/rejected status, and (for non-crew users) which friend you have marked as a favorite.
We do not use third-party advertising or analytics SDKs, and we do not track you across other apps or websites.
Crew users can import a roster directly from their airline's own crew/roster website. This works as follows, and it is important you understand it:
You are responsible for using your airline's website in accordance with that airline's own terms of use.
Your roster is private by default. No one can see it unless you take action.
We do not sell your personal data, and we do not use it for advertising.
We rely on a small number of trusted providers ("processors") to run the app. They process data only on our behalf:
| Provider | Role | Data involved |
|---|---|---|
| Supabase | Database, authentication, file storage and hosting of all account and roster data | All account, roster and friendship data; profile photos |
| RevenueCat | Subscription and in-app purchase management | Your account ID and subscription status |
| Apple App Store / Google Play | Process subscription payments | Payment details — handled entirely by Apple/Google; we never see your card data |
| Expo push service, Apple APNs, Google FCM | Deliver push notifications | Your push notification token and the notification content |
| Google / Apple Sign-In | Optional social login | Your name and email, only if you choose this login method |
Each provider operates under its own privacy policy. We share with them only what is needed to perform their function.
We keep your account and roster data for as long as your account is active. When you delete your account, your profile, roster, friendships and associated data are permanently removed from our systems. Some records may persist briefly in encrypted backups before being overwritten. Subscription/payment records held by Apple or Google are retained by them under their own policies.
You can permanently delete your account at any time from Settings → Delete Account inside the app. This removes your profile, roster and friendships.
You can view and edit your profile and roster directly in the app. For any data not editable in-app, contact us using the details below.
You can disable notifications at any time in your device settings.
Depending on where you live (for example the EEA, the UK, California, or Turkey), you may have additional rights — including the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing. To exercise these rights, contact us at the email below. You also have the right to lodge a complaint with your local data protection authority.
Rosternado is intended for aviation professionals and adults. It is not directed to children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. Significant changes will be communicated through the app. Continued use of the app after an update means you accept the revised policy.