EDCTPrivacy Policy
Effective October 12, 2026
EDCT (“the app”, “we”) shows airline crews and dispatchers the Expect Departure Clearance Time (EDCT) of their flights and notifies them when it changes. We collect as little as the app needs to work. We don’t sell your data, show ads, use analytics or tracking tools, or follow you across other apps and websites.
What we collect
| Work email address | To create your account, send your sign-in code and recognize the airline you work for. It is the identifier of your account. |
|---|---|
| Sign-in codes and sessions | A 6-digit code, valid 10 minutes, and a session for each signed-in device. Both are stored only as one-way hashes. |
| Push notification token | Provided by your iPhone when you allow notifications, so we can alert you about the flights you follow. |
| Followed flights and airline codes | The flights you follow and, if you change them, the airline ICAO codes you filter by. |
| Domain access requests | If your airline’s email domain isn’t accepted yet and you ask us to add it: your email, the airline name and the ICAO codes you enter. |
| IP address | Kept in memory for up to one hour to limit abuse of the domain request form, and in our hosting provider’s request logs. |
We don’t collect your name, location, contacts, photos or payment details. Flight information in the app (callsigns, routes, times, EDCTs) comes from the FAA’s System Wide Information Management (SWIM) feed and is not personal data about you.
How we use it
- To sign you in and keep you signed in.
- To show your airline’s flights first and filter EDCTs by airline.
- To send you notifications about the flights you follow.
- To review requests to accept new airline email domains, and to email you when your domain is added.
- To keep the service secure and prevent abuse.
We don’t use your data for marketing. The only emails we send are sign-in codes and, if you requested access for your airline’s domain, the answer to that request.
For users in the European Economic Area and the United Kingdom, we process this data because it is necessary to provide the service you asked for (performance of a contract), and for security and abuse prevention (our legitimate interest).
Who processes it for us
We share data only with the providers that run the service on our behalf, under their data processing terms:
- DigitalOcean: hosting of our servers and database.
- Postmark: delivery of sign-in code emails.
- Expo and Apple Push Notification service: delivery of push notifications.
These providers may process data in the United States and other countries. Where required, transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses. We may also disclose data if the law requires it.
How long we keep it
- Your account data is kept until you delete your account.
- Followed flights leave your account 2 hours after the flight arrives or is cancelled. Flight data is deleted 36 hours after departure.
- Push tokens are removed when you sign out or when Apple reports them as no longer valid.
- Copies outside our database expire on their own: sign-in emails in Postmark’s logs and our database backups are deleted on their providers’ retention schedules.
Deleting your account
In the app, scroll to the bottom of the home screen and tap Delete account. This immediately deletes your account, sessions, push tokens, followed flights and airline codes, and removes your email from domain access requests. The app also clears everything it stored on your iPhone. You can also email us to ask for deletion.
Your rights
Depending on where you live (for example under the GDPR in Europe or the CCPA in California), you can ask to access, correct, delete or export your personal data, and object to or restrict its processing. Email us and we’ll answer within one month. We never sell or share personal information for advertising. If you are in the EEA or the UK, you can also complain to your data protection authority.
Security
Sign-in codes and session tokens are stored only as hashes, sign-in attempts are limited, and access to our servers is restricted. No system is perfectly secure, but we work to protect your data and will notify you as required by law if a breach affects it.
Children
EDCT is a professional tool for airline staff and is not directed at children under 16. We don’t knowingly collect data from children.
Changes
If we change this policy, we’ll update the date above, and for significant changes we’ll let you know in the app.
Contact
Questions or requests about your data: [email protected].