Ro Flight — Privacy Policy
Effective date: 4 June 2026
This Privacy Policy explains how the Ro Flight mobile application ("the app", "we", "us") collects, uses, stores, and shares your information. Ro Flight is a flight-planning and monitoring app for pilots that lets you plan flight paths, monitor your real-time GPS position, retrieve NOTAMs, and file flight plans with the Romanian flight authority (ROMATSA).
If you have any questions, contact us at pedas.software@gmail.com.
Information we collect and why
Account information (email and password). When you sign in, we use your email address and password to authenticate you and to manage your licence. Your password is never stored in readable form — our server keeps only a salted PBKDF2 hash of it. Your email is used for sign-in, licence management, and account-verification messages.
Device identifier. To enforce our licence's limit of three devices per account, the app generates a random identifier for your installation. Only a hashed form of this identifier is sent to and stored by our licence server. The identifier is reset if you reinstall the app.
Precise location. With your permission, the app accesses your device's precise GPS location to show your live position on the map and to alert you to nearby NOTAMs (restricted and warning areas). Location is accessed only while the app is open (foreground). Your location is used only on your device and is never transmitted to us or to any third party.
Pilot profile, aircraft profiles, and flight plans. Information you enter — your pilot contact details (name, phone, email), aircraft profiles, and the flight plans you create — is stored on your device and used to build the flight-plan messages you choose to file.
ROMATSA credentials. Your ROMATSA login is stored encrypted on your device (secure storage) and is sent only to ROMATSA (flightplan.romatsa.ro) to file flight plans on your behalf. It is never sent to us.
How your information is stored
- On your device: ROMATSA credentials, your licence token, and the device identifier are kept in the operating system's encrypted secure storage. Your pilot profile, aircraft profiles, and flight plans are kept in the app's private storage. Uninstalling the app removes this data.
- On our servers: Your account record — email, password hash, licence status, and the list of device identifiers (up to three) — is stored by our licence service, which runs on Cloudflare Workers. The account portal is hosted on Microsoft Azure.
How your information is shared
We do not sell or rent your personal information, and we do not share it for advertising. Information leaves your device only in these cases:
- ROMATSA: the flight-plan, arrival, and cancellation messages you choose to file — and your ROMATSA credentials — are sent to ROMATSA to process those submissions.
- Our licence service: your email, password hash, and hashed device identifier are sent to our licence server to authenticate you and enforce the licence.
- Service providers: we rely on Cloudflare and Microsoft Azure to host these services.
NOTAM information is retrieved from ROMATSA's public NOTAM service without sending any personal data.
Data retention and deletion
Account data is retained while your account is active. To request deletion of your Ro Flight account and its data, email pedas.software@gmail.com from (or quoting) the email address on your account, with the subject "Delete my account".
When we receive your request, we delete your entire account record from our licence service — your email address, salted password hash, hashed device identifiers, and licence status — within 90 days. We do not retain any of this account data after deletion, and we keep no copies for other purposes.
Your on-device data (ROMATSA credentials, pilot/aircraft profiles, flight plans, licence token) is never sent to us; you can remove all of it at any time by uninstalling the app.
Security
All communication between the app and our servers and ROMATSA uses encrypted HTTPS connections. Passwords are stored only as salted hashes, and credentials on your device are kept in the operating system's encrypted secure storage.
Children
Ro Flight is intended for pilots and is not directed at children.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date at the top of this page.
Contact
Questions or requests (including data-deletion requests): pedas.software@gmail.com.