Privacy policy

Who is responsible

Thomas DETRAZ (Entrepreneur individuel (EI)), trading as TDx Aero, is the data controller for the processing described below. Full publisher details are on the legal notice page. You can reach us at contact@tdxaero.com.

This website

This site is a static website. It sets no cookies, runs no analytics, embeds no third-party trackers, and loads no external fonts or scripts. We do not build a profile of you and there is nothing here to consent to.

Our hosting provider keeps standard server logs — IP address, date, requested page, browser identification — for security and troubleshooting purposes. We do not use those logs to identify individual visitors.

When you email us

If you write to us, we process your address and the content of your message in order to reply. We keep a closed support case for 12 months, then delete it. A deletion request prompts an earlier review; messages and attachments no longer needed are removed sooner. We do not use support correspondence for marketing.

The AnaLog application

Flights, aircraft and pilots

Your logbook is stored on your device. On the Trial and Base plans it stays there: no account is required and nothing is sent to us. You can export your flight records on every plan as CSV, JSON or PDF.

ANA account and cloud features

An ANA account is required only for the cloud features of the Plus plan — backup, synchronisation between devices, and restoring your data. Creating an account gives us your email address and an account identifier. Nothing is uploaded until you explicitly enable cloud backup.

Cloud backups are encrypted before they are stored, and all traffic between the app and our services is encrypted in transit. Recovery of your data is protected by your ANA account.

Purchases

Purchases and subscriptions are processed by Apple and Google. We never receive your card details. We receive confirmation of which plan is active, in order to unlock the corresponding features.

Diagnostics

We may collect technical diagnostics to fix defects. They do not contain logbook entries. Application diagnostic logs are retained for 30 days. Administrative and system audit logs are retained by Google Cloud for 400 days in a locked bucket; they are used for security and accountability and can contain account-identifying technical metadata.

How long we keep things

• Data on your device and exports you keep: until you delete those copies yourself.
• Cloud backups: while your account exists and Plus is active, unless you delete them or request account deletion.
• After Plus ends: your cloud data is kept for 1 year after the subscription ends so you can recover it. We warn you by email before deletion. Data on your device is never deleted by us.
• Inactive accounts: after 2 years without signing in, an account with no active subscription and no access rights requiring it is closed and its cloud data deleted. We warn you by email first. An active subscription or access right prevents this inactivity closure.
• Deleting your ANA account: the live account and cloud data are removed without waiting for the periods above. Cloud files are then retained in a recoverable, soft-deleted state for up to 7 days before permanent deletion. Data on your device is untouched, and deleting your account does not cancel a subscription — that is managed in the App Store or Google Play. The account-deletion page lists all records that remain and their periods.

We process deletion requests without undue delay and respond within one month of receiving your request. If the request is complex or we receive numerous requests, this period may be extended by up to two further months; we will explain the extension within the first month.

Some limited operational records remain after an account-deletion request. The exact categories, purposes and periods are listed below.

• Cloud files pending permanent deletion: files deleted from the ANA account are no longer available to the app. The storage service keeps a recoverable, soft-deleted copy for up to 7 days before permanent deletion.
• Application diagnostic logs: a deletion event can include the account identifier needed to investigate the operation. These logs are retained for 30 days.
• Administrative audit logs: Google Cloud retains administrative and system audit logs for 400 days in a locked bucket. These logs are used for security and accountability; they can contain account-identifying technical metadata. This provider-managed period cannot be shortened in the current configuration.
• Anti-abuse record: the current automatic deletion flow leaves a rate-limit record containing a one-way hash of an account-specific operation key, a count and timestamps. When deletion is requested by email, we remove this record as part of handling the request, within the response period stated above. It is not a logbook record.
• Subscription-management profile: account deletion does not cancel an Apple or Google subscription. When deletion is requested by email, we manually request deletion of the related RevenueCat customer profile and relevant aliases, then confirm the result before closing the request. This is handled within the response period stated above.
• Support correspondence: we retain a closed support case for 12 months, then delete it. A deletion request prompts an earlier review; messages and attachments no longer needed are removed sooner.
• Minimal request record: we keep the case reference, the minimum identifying information, dates and outcome of a deletion request for 12 months after closure to handle rights requests and disputes. It does not include a flight logbook or a full account copy.

Where a legal obligation or an identified dispute requires a specific record to be kept, we limit that retention to the necessary data, document its purpose and set its own end date. It does not justify retaining the whole account.

Who else sees your data

We do not sell personal data and we do not share it for advertising. We use service providers to operate the product — hosting and cloud infrastructure, subscription management, crash reporting — who process data on our instructions only.

Your rights

You can ask for access to your data, correction, deletion, a portable copy, or restriction of processing, and you can object to processing based on our legitimate interest. Write to contact@tdxaero.com. If you are not satisfied with our response, you may lodge a complaint with your national data protection authority — in France, the CNIL.

In practice, most of this you can do yourself: export gives you a portable copy on every plan, and account deletion is available inside the app or by email through our account deletion page, which lists the steps, response time and any retained data.

Children

ANA products are intended for pilots and student pilots and are not directed at children under 16.

Changes

If this policy changes materially, we will update this page and, where the change affects data you have already given us, tell you in the app.