Transparency
Subprocessors
Last updated: 2026-10-07
Aviator Archive is local-first: your logbook lives on your device, and most of it never touches a server. But a few narrow services help us run sign-in, licensing, payments, the optional AI Scan feature, and this website. Where those services may handle your personal data on our behalf, they're called subprocessors — and here's the whole list.
Each is engaged under a written data-processing agreement that binds it to handle your data only on our instructions. For the bigger picture — what we store, how deletion works, and your rights — see the privacy policy.
Sign-in & AI Scan
- Purpose
- Federated sign-in (OpenID Connect); for AI Scan, logbook-page image extraction via Google Cloud; and ML Kit, the on-device text recognition in the app on Android and iPhone, and its QR-code reading on Android.
- Data it receives
- Sign-in: your email, name, and a provider account id (Google may also estimate your general location from your IP address, to prevent fraud). AI Scan: the logbook-page image you choose to scan. ML Kit: usage statistics and basic device details (the images it reads stay on your device).
- Location & safeguards
- Google Cloud Data Processing Addendum; Google is certified under the EU–US Data Privacy Framework. AI Scan runs on Google's EU-resident endpoint for users in the EU/EEA, UK, or Switzerland, and in the US otherwise.
Apple
USSign in with Apple
- Purpose
- Federated sign-in, in the app on every platform and on this website.
- Data it receives
- Your email, a provider account id, and, on a first sign-in on this website only, the name you choose to share.
- Location & safeguards
- Apple’s data-processing terms and Standard Contractual Clauses.
Cloudflare
Global edgeHosting, backend & website
- Purpose
- Runs our sign-in, licensing, and AI Scan services (Workers, D1, R2) and serves this website. For website analytics it carries each page-view report to us, shortening your IP address on the way; it does not analyse or keep them.
- Data it receives
- Account data (email, user id, device fingerprints), AI Scan images while in transit/processing, request logs, and website analytics reports in transit, including your IP address until it is shortened.
- Location & safeguards
- Cloudflare Data Processing Addendum with Standard Contractual Clauses.
RevenueCat
USIn-app purchase entitlements
- Purpose
- Validates App Store / Google Play receipts and manages your Lifetime / pack entitlement.
- Data it receives
- An app user id (your provider account id) and the store transaction identifier. Never your payment card.
- Location & safeguards
- RevenueCat Data Processing Addendum with Standard Contractual Clauses.
Paddle
UK / USPayments (Merchant of Record)
- Purpose
- Handles direct web purchases as the Merchant of Record, including card processing and global sales-tax / VAT compliance.
- Data it receives
- Your payment details (which we never see) and, via webhook, your buyer email and transaction id.
- Location & safeguards
- Merchant of Record for the transaction; Paddle’s data-processing terms.
Backblaze
CanadaWebsite analytics backups
- Purpose
- Stores the backups of our website analytics, which we encrypt on our own server before they are sent. Backblaze cannot read them.
- Data it receives
- Encrypted copies of the website analytics records described in section 9 of the privacy policy, kept no longer than 30 days.
- Location & safeguards
- Backblaze’s Data Processing Addendum, part of its terms of service. Stored in its Canadian region, so the backups do not leave Canada.
Sentry
US / EUCrash reporting (on by default)
- Purpose
- Receives anonymized crash diagnostics. On by default during the beta; switch it off in Settings and that device sends nothing further.
- Data it receives
- Error type, a technical stack trace, platform and app version. The error message text, your identity, and your IP address are stripped on the device before sending.
- Location & safeguards
- Sentry Data Processing Addendum with Standard Contractual Clauses.
Your own backup storage
If you set up backups, your encrypted backup bundle goes to storage you choose — for example your own Google Drive or any WebDAV server. Those providers act for you, under your account and your agreement with them, not as our subprocessors. We never hold the backup or its password.
Changes to this list
We keep this page current. Before we add a new subprocessor that handles your personal data, we update this list; for AI Scan, the in-app disclosure always names the live provider and region before your first upload, so what you see is what's used.
Questions
Something here unclear, or want notice of changes? Ask through the contact form. A real human responds, usually inside 24 hours.