Privacy Policy

# Privacy Policy

Effective date: February 25, 2026

Last updated: April 3, 2026

This Privacy Policy explains how Cabin Crew Breaks ("App", "we", "us") handles personal data.

Data controller/contact:

- Cabin Crew Breaks Operator

## 1. Scope

This Policy applies to personal data processed when you use the App, including subscription features, optional iCloud sync, support requests, and product analytics.

Third-party platforms and SDKs, including Apple, RevenueCat, and Google Firebase, have their own policies that also apply to their processing.

## 2. Data We Process

We process the following categories of data:

### A. Data you enter in the App

- Flight and schedule data, such as departure and arrival codes, times, and sequence or timeline data

- Crew setup data, such as crew roles, custom role labels, break allocations, and optional display names

- App preferences, such as tint or theme, default durations, rounding preferences, and notification settings

By default, this data is stored locally on your device.

### B. Optional iCloud sync data

If you enable iCloud sync, the App syncs eligible settings and schedule records through Apple's iCloud services, including CloudKit and iCloud key-value storage, so your data can appear across your devices.

If iCloud sync is turned off, that sync processing is not performed.

### C. Subscription and purchase data

For paid features, the App uses Apple in-app purchases with RevenueCat.

Data processed for subscriptions may include:

- Product identifiers and offering identifiers

- Entitlement or subscription status

- Purchase and restore outcomes

- RevenueCat anonymous App User ID and related subscription metadata

Payment card details and direct billing credentials are handled by Apple, not by us.

### D. Notifications and alarms

If you enable notifications or alarms, the App processes:

- Notification permission state

- Notification settings, such as on or off, lead time, and type toggles

- Event timing data required to schedule local reminders

### E. Support communications

If you contact us, for example by email, we process the information you provide, such as your email address and message content, to respond and troubleshoot.

### F. Technical diagnostics

The App and service providers may generate limited technical logs and error information for reliability, security, fraud prevention, and debugging.

### G. Product analytics and feature usage data

The App uses Google Firebase Analytics to understand how Cabin Crew Breaks is used and to improve product quality and feature design.

Analytics data may include:

- App lifecycle events, such as app opens and foreground or background activity

- Screen views and navigation events

- Button taps and flow progress events

- Schedule-related actions, such as schedule creation or update, map reveal, sharing, and alarm toggles

- Settings and preference interactions

- Current selected tint or theme context attached to analytics events

- Device, app, and usage metadata processed by Firebase Analytics

We do not use Firebase Analytics for cross-app advertising, behavioral profiling across third-party apps, or selling personal data.

The App does not use third-party advertising SDKs and does not sell personal data for advertising.

## 3. Why We Process Data

We process data to:

- Provide core scheduling and crew-management functionality

- Save your preferences and in-app state

- Sync data across your devices when you enable iCloud sync

- Deliver reminders and alarms when enabled

- Validate subscriptions and control access to paid features

- Understand feature usage and improve product experience, usability, and performance

- Provide customer support

- Maintain app security, prevent abuse, and improve stability

## 4. Legal Bases (Where Required)

Depending on your region, legal bases may include:

- Performance of a contract, to provide App features you request

- Legitimate interests, such as security, service integrity, abuse prevention, analytics, troubleshooting, and reliability

- Consent, for optional features such as notifications, and where required by law

- Compliance with legal obligations

## 5. Sharing and Processors

We share data only as needed to operate the App:

- Apple

Purpose: app distribution, billing, subscriptions, optional sync, notifications, and platform operations

- RevenueCat

Purpose: subscription entitlement and purchase-state processing

- Google Firebase, including Firebase Analytics

Purpose: product analytics, feature usage measurement, and app improvement

- Service providers supporting operations or support, if used

Purpose: technical operations and issue resolution

We do not sell personal information.

We do not share personal information for cross-context behavioral advertising.

## 6. Retention

Retention depends on data type and your settings:

- Local App data: retained on-device until deleted by you or until the App is removed

- iCloud-synced data, if enabled: retained in your iCloud account until removed by you from the App or iCloud

- Subscription and purchase records: retained by Apple and RevenueCat under their policies

- Analytics and usage data: retained by Google Firebase under Google and Firebase policies and settings

- Support emails: retained as reasonably necessary to handle your request and keep support history

## 7. Your Choices

You can:

- Turn iCloud sync on or off in App settings

- Turn notifications and alarms on or off in App settings or iOS settings

- Disable sync and choose to delete synced or local data from within the App flow

- Manage or cancel subscriptions in Apple account subscription settings

- Contact us at raphparis@icloud.com with privacy requests

At this time, in-app analytics controls may be limited. If you have a privacy request related to analytics data, contact us at raphparis@icloud.com.

If you delete the App, locally stored App data is removed from the device according to iOS behavior. Data stored in iCloud may remain until removed from iCloud.

## 8. Regional Privacy Notices

### 8.1 California Notice (CCPA/CPRA)

This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies.

In the preceding 12 months, we may have collected:

- Identifiers, for example email address when you contact support

- User-provided profile and schedule data, such as crew labels, schedule data, and settings

- Commercial information related to subscriptions, such as entitlement or subscription status

- Internet or electronic network activity data, such as technical diagnostics, product analytics events, and app or SDK operation logs

Sources:

- Directly from you

- Automatically from your device or app interactions

- From Apple, RevenueCat, and Firebase in connection with subscriptions, analytics, and platform services

Business or commercial purposes:

- Purposes listed in Sections 3 and 5 of this Policy

Disclosure to third parties:

- Apple, RevenueCat, Google Firebase, and support or operations providers as described in Section 5

Sales and sharing:

- We do not sell personal information

- We do not share personal information for cross-context behavioral advertising

Sensitive personal information:

- We do not use or disclose sensitive personal information to infer characteristics about you

California privacy rights, subject to legal exceptions, may include:

- Right to know or access categories and specific pieces of personal information

- Right to delete

- Right to correct

- Right to data portability

- Right to non-discrimination for exercising privacy rights

You may submit requests by emailing raphparis@icloud.com with subject "Privacy Request". We may need to verify your identity and authority before processing requests.

Authorized agents:

- You may designate an authorized agent to submit a request on your behalf, subject to verification requirements under applicable law

Response timing:

- We aim to confirm receipt within 10 business days and respond within 45 calendar days, with extensions where permitted by law

### 8.2 EEA, UK, and Switzerland Notice (GDPR/UK GDPR)

For users in the EEA, UK, or Switzerland, this section applies in addition to the rest of this Policy.

Legal bases by processing purpose may include:

- Contract performance: providing requested App features and paid subscription functionality

- Legitimate interests: service security, fraud prevention, abuse prevention, troubleshooting, reliability, and product analytics

- Consent: optional notifications and alarms, and other processing where consent is required

- Legal obligations: compliance duties and lawful requests

Your rights, subject to legal limits, may include:

- Access

- Rectification

- Erasure

- Restriction

- Objection

- Data portability

- Withdrawal of consent where processing is based on consent

- Complaint to your local supervisory authority

To exercise rights, contact raphparis@icloud.com with subject "Privacy Request".

Article 27 representative:

- If and when required by applicable law, we will designate an EU or UK representative and publish those details in this Policy

### 8.3 Other U.S. States and Other Regions

If your jurisdiction grants additional privacy rights, you may submit requests to raphparis@icloud.com. We will handle requests in accordance with applicable law.

## 9. International Transfers

Apple, RevenueCat, Google, Firebase, and related providers may process data in countries outside your own. Where required, those providers apply transfer mechanisms under their legal frameworks.

## 10. Children's Privacy

The App is not directed to children under 13, or a higher minimum age required by local law. We do not knowingly collect personal data from children.

If you believe a child provided personal data, contact raphparis@icloud.com.

## 11. Security

We use reasonable technical and organizational measures for the nature of the data and processing. No method of transmission or storage is guaranteed to be 100% secure.

## 12. Third-Party Policies

Third-party processing is governed by third-party terms and policies. Useful references:

- Apple Privacy Policy: https://www.apple.com/legal/privacy/

- RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

- Google Privacy Policy: https://policies.google.com/privacy

- Firebase Data and Privacy Information: https://firebase.google.com/support/privacy

## 13. Changes to This Policy

We may update this Policy. If we make material changes, we will update the "Last updated" date and provide additional notice where required by law.

## 14. Contact

Privacy questions or requests:

- raphparis@icloud.com