Data Policy
Here is a privacy policy adapted for KRISTAL.air, compliant with GDPR, in English:
Privacy Policy — KRISTAL.air
Last updated: April 2025
1. Data Controller
The KRISTAL.air application is published by KRISTAL AERONAUTIQUE, contact@kristal.aero.
2. Data Collected
As part of using the KRISTAL.air application, we collect the following data:
- Identification Data: name, first name, email address (when creating an account)
- GPS Location Data: real-time position when using flight and navigation features, with your explicit consent
- Flight Data: GPS tracks, altitudes, durations, performances recorded during your flights
- Participation Data: registrations for challenges and competitions (Kristal Cup, etc.)
- Technical Data: device type, application version, anonymized error logs
3. Purposes of Processing
Your data is used to:
- Manage your account and authenticate your access to the application
- Display and record your flight tracks
- Calculate your performance and ranking in competitions
- To send you notifications related to the application's activity (if you consent)
- Improve our services and fix technical issues
4. Legal basis
- Contract execution: account management, access to features
- Consent: GPS location, push notifications
- Legitimate interest: security, service improvement, technical logs
5. Data recipients
Your data is hosted on secure infrastructures (servers located in the European Union or covered by standard contractual clauses compliant with GDPR). No personal data is sold or transferred to third parties for commercial purposes.
6. Retention period
- Account data: retained as long as your account is active, then deleted within 12 months after a deletion request
- Flight logs: retained as long as you are a user, exportable and deletable upon request
- Technical logs: maximum 90 days
7. Your rights
In accordance with GDPR, you have the following rights:
- Right of access: to obtain a copy of your data
- Right to rectification: to correct inaccurate data
- Right to erasure: to request the deletion of your account and your data
- Right to data portability: to export your logs in GPX or KML format
- Right to object: to object to certain processing
- Right to withdraw consent: withdraw your consent to location or notifications at any time
To exercise your rights, contact us at: contact@kristal.aero
In case of dispute, you can contact theCNIL (www.cnil.fr).
8. Security
Your data is protected by secure authentication mechanisms (Firebase Authentication, encrypted session tokens) and strict access rules. Communications between the application and our servers are encrypted via HTTPS.
9. Changes
This policy may be updated. Any substantial changes will be notified to you via the application. The current version is always accessible from the application settings.