Ro Flight — Privacy Policy

Effective date: 19 August 2026

This Privacy Policy explains how the Ro Flight mobile application ("the app", "we", "us") collects, uses, stores, and shares your information. Ro Flight is a flight-planning and monitoring app for pilots that lets you plan flight paths, monitor your real-time GPS position, retrieve NOTAMs, and file flight plans with a Romanian flight authority — either ROMATSA (an ICAO flight plan, via flightplan.romatsa.ro) or the Romanian Civil Aeronautical Authority, AACR (a VFR notification, via vfr.caa.ro). You choose which authority each flight plan is filed with.

If you have any questions, contact us at pedas.software@gmail.com.

Information we collect and why

Account information (email and password). When you sign in, we use your email address and password to authenticate you and to manage your licence. Your password is never stored in readable form — our server keeps only a salted, one-way cryptographic hash of it. Your email is used for sign-in, licence management, and account-verification messages.

Device identifier. To enforce our licence's limit of three devices per account, the app generates a random identifier for your installation. Only a hashed form of this identifier is sent to and stored by our licence server.

Precise location. With your permission, the app accesses your device's precise GPS location to show your live position on the map and to alert you to nearby NOTAMs (restricted and warning areas). Location is accessed only while the app is open (foreground). Your location is used only on your device and is never transmitted to us or to any third party.

Flight recordings. If you switch on flight recording and start a recording yourself, the app saves the track of that flight — positions, times, GPS altitude, speed and heading, and a summary of the device's motion sensor — on your device. Recordings are never transmitted to us or to any third party; they leave your device only if you choose to share or export one. You can review and delete them individually, or delete all of them, in Flight Log, and you can turn the feature off entirely in Settings > Pilot > Preferences. Switching it off stops new recordings but does not delete existing ones. Uninstalling the app removes them.

Pilot profile, aircraft profiles, and flight plans. Information you enter — your pilot contact details (name, phone, email), aircraft profiles, and the flight plans you create — is stored on your device and used to build the flight-plan messages you choose to file.

Flight-authority credentials. The app can hold one login per filing channel — your ROMATSA account and your AACR (vfr.caa.ro) account. Each is stored encrypted on your device (secure storage) and is sent only to the portal it belongs to, to file on your behalf. Neither is ever sent to us, and neither is sent to the other authority.

How your information is stored

On your device: your flight-authority credentials, your licence token, and the device identifier are kept in the operating system's encrypted secure storage. Your pilot profile, aircraft profiles, and flight plans are kept in the app's private storage. Uninstalling the app removes this data.
On our servers: Your account record — email, password hash, licence status, the device identifiers registered to it (up to three), and a count of the flight-plan submissions made from it — is held by our licence service and account portal, which run on third-party hosting infrastructure.

How your information is shared

We do not sell or rent your personal information, and we do not share it for advertising. Information leaves your device only in these cases:

ROMATSA: when you file a flight plan with ROMATSA, the flight-plan, arrival, and cancellation messages — and your ROMATSA credentials — are sent to ROMATSA to process those submissions.
AACR (vfr.caa.ro): when you file a VFR notification with AACR, the notification, landing-report, and cancellation messages — and your vfr.caa.ro credentials — are sent to AACR to process those submissions. In addition, if a departure or destination aerodrome on your flight is not already in that portal's catalogue, the app creates an aerodrome record (its name and coordinates) on your own vfr.caa.ro account, as a notification can reference only those aerodromes already recorded in that portal.
Our licence service: your email, password hash, and hashed device identifier are sent to our licence server to authenticate you and enforce the licence.
Service providers: we rely on third-party hosting providers to operate these services.

NOTAM information is retrieved from ROMATSA's public NOTAM service without sending any personal data.

Embedded video on this website

The manual's Videos page embeds players hosted by YouTube. Opening that page contacts Google's servers, which can see your IP address and may collect data under Google's own privacy policy. We use YouTube's privacy-enhanced domain (youtube-nocookie.com), so no tracking cookie is set unless you press play. No other page on this website loads third-party content, and we do not use analytics or advertising trackers anywhere on it.

Data retention and deletion

Account data is retained for as long as your account exists. You may delete your account at any time, either in the app under Data → Delete account or in a browser from your account page; no app installation is required in order to do so, and deletion takes effect immediately. Alternatively, you may request deletion by email to pedas.software@gmail.com from, or quoting, the address registered to the account, using the subject "Delete my account"; such requests are actioned within 90 days.

Deletion removes your account record, as described above, in its entirety. The account is deleted rather than deactivated: it is not frozen, suspended, or otherwise retained in any form that can be signed into.

Information retained after deletion. We retain one record of licence history, comprising whether a licence has previously been granted to that address and the dates of its validity. That record is indexed by a one-way cryptographic hash of your email address and contains no email address, password, or device identifier. It cannot be reversed to identify you; it can be matched only if the same address is subsequently presented to us. We retain it on the basis of our legitimate interest in restoring a licence already granted to a returning user, and in preventing a one-time entitlement from being claimed repeatedly through successive deletion and re-registration. A hashed email address constitutes pseudonymised rather than anonymous data, and is disclosed here on that basis.

Your on-device data (your flight-authority credentials, pilot/aircraft profiles, flight plans, licence token) is never sent to us; you can remove all of it at any time by uninstalling the app. Data held by ROMATSA or AACR in respect of submissions made through their portals is controlled by those authorities under their own policies, and any request for its removal should be addressed to them directly.

Security

All communication between the app and our servers, ROMATSA, and AACR uses encrypted HTTPS connections. Passwords are stored only as salted hashes, and credentials on your device are kept in the operating system's encrypted secure storage.

Children

Ro Flight is intended for pilots and is not directed at children.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date at the top of this page.

Contact

Questions or requests (including data-deletion requests): pedas.software@gmail.com.