Last updated: August 17, 2026
Volara Log ("the App", "we", "us") is a personal flight logbook application for pilots, developed by Volara Lab. This Privacy Policy explains what data the App handles, how it is stored, and what control you have over it.
All flight, duty, simulator, crew, and aircraft records you enter — including licence and medical certificate records, and any photos or documents you attach to them — are stored locally on your device, in a private database that only the App can access. Volara Lab does not operate a server or database that stores this logbook data. We cannot see, access, or recover your records — if you lose your device without a backup, your data is gone. Document attachments (e.g. photos of licences or medical certificates) are additionally encrypted before being stored or backed up.
The App may request access to your photo library (to attach a document photo) and permission to send local notifications (e.g. a reminder that a document is about to expire). Both are used entirely on your device and never transmit any data to us.
You must sign in with a Google or Apple account to use the App. Sign-in is handled through a lightweight account system that Volara Lab operates, built on Supabase, our authentication provider — solely to identify your account across devices, for example so your free trial and subscription status survive a reinstall or a new device. This account system only ever holds your email address, display name, and an internal account identifier. It never receives, stores, or has access to your flight, duty, simulator, crew, aircraft, or document records — those stay on your device, and, if you choose, in your own Google Drive or iCloud account (see Sections 3 and 4). Depending on which you choose:
You can use a different Google account for Sign-in than the one you use (if any) for Google Drive backup or Google Calendar roster import below — these are independent connections.
If you choose to connect Google Drive, the App stores a copy of your data in a hidden, app-specific folder in your own Google Drive account (Google's "appDataFolder"). This folder is not visible in your regular Drive file listing and is only accessible to the App itself, using your Google account's own storage and permissions. Volara Lab has no access to this folder or its contents — the data is encrypted in transit and stored under Google's own security model, governed by Google's Privacy Policy.
You can disconnect Google Drive at any time from Settings, and revoke the App's access entirely from your Google Account permissions page.
On iOS, an equivalent iCloud sync option is also available — see Section 4.
On iOS, you can instead (or in addition) choose to sync your data to your own private iCloud account, using Apple's CloudKit framework. As with Google Drive, this stores a copy of your data in a private container tied to your Apple ID, which only the App can read — Volara Lab has no access to this data, which is encrypted and governed by Apple's own iCloud security model and Apple's Privacy Policy.
You can enable, disable, or delete your iCloud backup at any time from Settings. Google Drive and iCloud sync are independent — you may use either, both, or neither.
If you choose to connect a calendar to import your duty roster, the App requests read-only access to either:
Either way, the App reads calendar events only when you trigger an import — it does not continuously monitor your calendar, and no calendar data is stored anywhere other than the duty records you explicitly choose to import into your own local/synced logbook. On iOS, the App requests full Calendar access because Apple does not offer a read-only permission tier, even though the App never creates, edits, or deletes any calendar event.
The App offers a free trial followed by a paid subscription. Payment is processed entirely through the app store you installed the App from — Google Play Billing (Android) or the Apple App Store (iOS), as applicable. Volara Lab never receives or stores your payment card details — Google or Apple handles that transaction under their own privacy and security terms.
To manage your subscription status across devices (so your Pro access is recognized whether you log in from a new phone or reinstall the App), we use RevenueCat, a subscription management service. Your account email, name, and identifier (from whichever of Google or Apple Sign-in you used) are shared with RevenueCat solely for this purpose — to identify your subscription and keep it in sync — and are not used by RevenueCat or Volara Lab for advertising or any purpose beyond subscription management. RevenueCat processes this data under its own Privacy Policy.
You can delete your data at any time in one or more of these ways:
Volara Log is intended for licensed and student pilots and is not directed at children. We do not knowingly collect data from children under 13 (or the relevant minimum age in your jurisdiction).
We rely on your device's own operating system security and your Google/Apple account security (for Sign-in, Drive, and Calendar) to protect your data. The App also offers an optional biometric app-lock (Face ID or fingerprint, depending on your device) as an extra layer of protection, and encrypts document attachments before they are stored locally or backed up. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.
We may update this policy as the App evolves. Material changes will be reflected by updating the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.
Questions about this policy or your data can be sent to volaralab@gmail.com.