Privacy
Updated 1 September 2026.
In one sentence
Your logbook is never sent to us: it lives on your iPhone. We hold only the e-mail addresses volunteered for the test phase, and we relay — keeping nothing — the paper-logbook photos you choose to have read.
Who we are
Sillage is published by Sébastien Laus, self-employed individual (Belgian Crossroads Bank for Enterprises, no. 0869.790.387), data controller under the GDPR. For any question about your data: privacy@sillage.aero.
What stays on your phone
Your flights, your aircraft, your signatures, your expiry dates, your totals: all of it is stored in the app, on your device. None of it passes through our servers, and we have no technical means of reading it. If you enable iCloud backup, the copy goes to YOUR iCloud account, at Apple, under your own control — we have no access to it. Face ID, if you use it to sign, never leaves the device: recognition happens in the iPhone's secure element, and no biometric data is transmitted to us.
The test list (the only file we keep)
If you ask to try the app early, we record your e-mail address, the date of your request, the date you agreed to take part in the TestFlight trial where applicable, and the date of your invitation. Nothing else: no name, no licence, no phone number. Purpose: running the test phase and telling you about the release. Legal basis: your consent. You can withdraw it at any time by writing to privacy@sillage.aero — your address is then deleted from the list. This list is never sold, never rented, never used for marketing.
Reading a logbook page
If you photograph a paper logbook page to transcribe your old flights, the image is sent to our server, then immediately passed to Mistral AI (a French company, processing within the European Union), which extracts the text. The server keeps nothing: not the image, not the extracted text, not a draft, not a named trace — the image goes in, the lines come out, and nothing remains once the response is sent. No name, no address, no account identifier accompanies the file: there is no account. Mistral AI's own processing is further governed by its own terms.
Access control for that reading
So that this function is not open to the whole world, the app attaches Apple's signed proof of purchase to its request. The server retains a transaction identifier from it — a number, unconnected to your name — IN MEMORY ONLY and for at most one hour, long enough to count the pages read and stop manifestly abusive use. It is written to no file, to no database, and disappears the moment the server restarts.
What a logbook page may contain
A paper logbook page sometimes carries third-party names: your instructor, a pilot in command, a student. By choosing to have a page read, you transmit those mentions too. That is your decision, and it has an alternative: manual entry, entirely local, which never leaves the phone.
E-mails
We write to you only about what you asked for: confirmation of your test request, your TestFlight invitation, and the release announcement. Sending goes through Scaleway's European infrastructure (Transactional Email). No automatic newsletter, no marketing, no sharing of your address.
Hosting
The website and the reading relay are hosted at Scaleway, in France (Paris region), within the European Union. Connections are encrypted. The only database holds the test list described above.
Analytics
None. No advertising tracker, no measurement cookie, no pixel, no third-party analytics service on this site. The only cookie set is the publisher's administration console cookie, and it does not concern visitors.
Retention
Test-list address: until the end of the test phase, or until you ask to be removed if that comes sooner. Logbook image and extracted text: nothing is kept. Access-control transaction identifier: one hour at most, in memory.
Your rights
You have rights of access, rectification, erasure, restriction, objection and portability over the data we hold — which, in practice, is your e-mail address in the test list. Write to privacy@sillage.aero. Your logbook data does not fall under this procedure: it is on your phone, and you erase or export it yourself from the app. You may lodge a complaint with the Data Protection Authority (Belgium).
Backups, and your part
Since we do not hold your logbook, we cannot restore it for you. This page is also a warning: enable iCloud backup, export your logbook regularly as PDF and CSV, and keep those copies somewhere other than the phone. A logbook is a regulatory document you remain responsible for.