Privacy Policy
Summary: Calendar Lab has no servers and does not receive your data. Everything the app stores stays on your iPhone, except what you choose to send: the optional iCloud Keychain backup (Apple), the ANAC licence lookup, and the company portals you open inside the app. There is no account, no advertising, no tracking, no usage analytics and no sale of data.
1. Who we are
This policy describes how the Calendar Lab app (the “App”) processes personal data under Brazil's General Data Protection Law (Law No. 13,709/2018, “LGPD”).
Controller and party responsible for the App: Ricardo Riet Correia, publisher of the App on the App Store.
Privacy contact (data protection officer channel): asdumont@gmail.com
The App is independent and is not affiliated with LATAM Airlines, IBS Software (iFlightNeo), ANAC or any other company or portal mentioned here.
2. Core principle: on-device processing
The App is designed to run entirely on your iPhone. The developer runs no servers for the App, does not receive your roster or profile data, and does not use third-party kits for analytics, advertising or tracking. Artificial-intelligence features use only Apple Intelligence on the device itself.
3. Data the App processes and where it is kept
| Data | Purpose | Where it is kept |
|---|---|---|
| Crew profile: name, nickname, employee number (BP), ANAC code, CPF, date of birth, date of joining, corporate and personal email, company, fleet, base and roles | Apply the right rules to your roster, fill in portal forms and validate your licence with ANAC | On the iPhone. Optionally, in your iCloud Keychain (section 4) |
| Roster: events in the iFlightNeo calendar | Generate the Calendar-Lab calendar with rules, limits and alerts | In the iOS Calendar app. The source calendar is only read, never changed |
| Other crew members' data: names, roles and flight information from the roster and the company portals | Show each leg's crew and who joins or leaves | On the iPhone only |
| Sleep (Apple Health): read-only sleep analysis | Estimate fatigue and rest against the roster | Read from the Health app and used on the device. The App writes nothing to Health |
| Profile photo: camera or photo library | Show on your profile | On the iPhone only |
| Safety reports (MOR/ASR) and voice dictation | Draft reports and fill in the safety portal's form. The App never submits a report on its own | On the iPhone (section 4) |
| Portal sessions: cookies and session credentials of the sites you open in the App's browser | Keep you signed in and fetch crew, hotel and aircraft registration data | In the App's browser storage, on the iPhone |
| Sync history: copies of the processed roster and manually entered rest periods | Show what changed between syncs and complete rest data | On the iPhone only. The oldest history copies are deleted automatically |
| Preferences and settings | Running the App | On the iPhone. Parts of the profile may go into the optional backup |
Face ID and Touch ID are handled by iOS: the App only receives an “authorized” or “not authorized” answer and never has access to your biometric data. Notifications are local and generated on the device. The App checks whether an Apple Watch is paired only to suggest the best source of sleep data.
4. When data leaves your iPhone
Data leaves the device only in the cases below, always through an action or choice of yours, and goes directly to the service named. It never passes through the developer.
- iCloud Keychain backup (optional): if turned on, the crew profile fields (section 3) are stored in the iCloud Keychain of your Apple Account, with Apple's protection and encryption. It does not include your roster, health data, photos or reports.
- ANAC lookup: when you enter your ANAC code during setup or in your profile, the App automatically checks ANAC's public licence lookup site (consultadelicencas.anac.gov.br) to validate your licence, sending your ANAC code, date of birth and CPF. If you do not want this lookup, leave the ANAC code blank.
- Company and third-party portals: when you open portals in the App's browser (for example, Pilot Portal, iFlightNeo, API Crew Care, Jeppesen, the vacation portal, AQD, MyIDTravel and Passe Livre), you communicate directly with those sites. The App may autofill your corporate email, employee number (BP) and CPF into their sign-in forms. Processing by those sites follows their own operators' policies.
- Voice dictation: speech recognition runs on the device whenever iOS offers it for your language. When it does not, the audio is processed by Apple's speech recognition service.
- Other apps: when you tap export to LogTen Pro, the App opens that app and hands it the flight data (date, route, times, aircraft registration and type). Shortcuts can also open the LATAM crew app or start a phone call to crew scheduling. Each app follows its own privacy policy.
- iOS Calendar: the Calendar-Lab calendar is an ordinary iOS calendar. If your calendar account (for example, iCloud) is synced, those events follow that sync, according to your settings.
5. Legal bases (LGPD, Articles 7 and 11)
- Performing the service you request (Art. 7, V): using your profile and roster to generate the calendar and apply the rules, and validating your licence with ANAC when you enter your ANAC code.
- Consent (Art. 7, I): iCloud backup, profile photo and dictation, all optional and started by you.
- Specific consent for sensitive health data (Art. 11, I): reading sleep data, which you authorize on the iOS permission screen and can revoke at any time in Settings › Health.
- Legitimate interest (Art. 7, IX): showing, on your device only, the data of other crew members that already appears in your roster and the company portals, to help organize your work.
6. International transfer
Apple's servers, used by the iCloud Keychain backup and, where applicable, by speech recognition, may be outside Brazil. This transfer happens only if you turn those features on (LGPD, Art. 33, VIII) and follows Apple's safeguards.
7. Sharing
The developer does not sell, rent or share your data, because the developer does not receive it. Health data is never used for advertising and never sent to iCloud by the App.
8. Retention and deletion
- iCloud backup: delete it in the App's Settings › Security & Privacy › iCloud Backup › “Delete iCloud Backup”. “Full App Reset” does not remove this backup.
- Profile and settings: the App's Settings › Reset or Fix App › “Full App Reset” erases the profile and settings stored on the device.
- All local data: delete the App from your iPhone. This also removes portal sessions, sync history and the profile photo.
- Calendar-Lab calendar: its events remain in the Calendar app until you delete the calendar in iOS.
- Data in the portals: what the portals themselves keep follows each operator's rules.
9. Your rights (LGPD, Art. 18)
You have the right to confirmation, access, correction, anonymization, portability, deletion, information about sharing, and withdrawal of consent. Because the data stays on your device, you exercise most of these rights directly in the App: view and edit your profile, revoke permissions in iOS Settings, and delete data as described in section 8. For any request or question, write to asdumont@gmail.com. You can also file a complaint with Brazil's National Data Protection Authority (ANPD) at gov.br/anpd.
10. Security
Your data is protected by iOS encryption and, for the backup, by iCloud Keychain. The App offers an optional Face ID or Touch ID lock. Keep your iPhone protected with a passcode and keep iOS up to date.
11. Audience
The App is meant for adult professional crew members and is not directed at anyone under 18.
12. Changes
This policy may be updated. The date at the top shows the current version. Significant changes will be announced in the App or on this page.