Terms of Service & Privacy Policy

Effective Date: April 2, 2026

1. Introduction

Welcome to Tachbase ("Service"), a pilot logbook and flight planning platform operated by Tachbase ("we," "us," or "our"). The Service is available as a website and as a native iOS application. By creating an account and using our Service, you agree to be bound by these Terms of Service and Privacy Policy ("Agreement").

Please read this Agreement carefully before using the Service. If you do not agree to these terms, you may not use the Service.

2. Description of Service

Tachbase is a comprehensive aviation platform that allows pilots to:

• Record and track flight time and experience in a digital logbook
• Manage aircraft information including weight & balance data
• Track certifications, medical certificates, and currency requirements
• Build routes and file flight plans through FAA-authorized services
• View interactive weather maps, METARs, TAFs, SIGMETs, PIREPs, and forecasts
• Access detailed airport information including charts, runways, frequencies, and NOTAMs
• Display real-time ADS-B traffic from GDL90-compatible devices and internet sources
• Download maps, charts, and airport data for offline use
• Import and export flight data in standard formats
• Generate reports and summaries of flight activity

3. User Accounts

3.1 Account Creation

To use the Service, you must create an account by providing accurate and complete information. You may sign in with a username and password, or through a third-party authentication provider (such as Google). You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

3.2 Account Security

We strongly recommend enabling Two-Factor Authentication (2FA) to protect your account. You agree to notify us immediately of any unauthorized access to your account.

4. Data Collection and Privacy

4.1 Information We Collect

We collect only the information necessary to provide the Service:

• Account Information: Username (required), password (stored securely using bcrypt hashing), and email address for account recovery
• OAuth Credentials: If you sign in with a third-party provider (e.g., Google), we receive and store a unique identifier and display name from that provider. We do not receive or store your third-party password.
• Personal Information (optional): Name, date of birth, contact email, phone number, and mailing address
• Emergency Contact (optional): Name, email, and phone number of an emergency contact
• Flight Data: Flight records, aircraft information, route plans, weight & balance calculations, and related logbook entries you choose to enter
• Certification Data: Pilot certificates, ratings, and medical certificate information
• Flight Plan Filing Credentials: If you use FAA flight plan filing, your 1800wxBrief username is stored to facilitate filing through the Leidos Flight Service system
• Location Data: If you connect a GDL90-compatible ADS-B device (such as a Stratus), the app receives your GPS position, altitude, heading, and nearby traffic data directly from the device over your local WiFi network. This data is used only for real-time map display and is not transmitted to our servers.
• Device-Local Data: The native iOS app stores map tiles, airport data, chart PDFs, and cached content locally on your device for offline access. This data is stored in the app's private sandbox and is not accessible to other applications.

4.2 Why We Collect Personal Information

The optional personal information you provide helps us deliver better service to you:

• Date of Birth: Used to accurately calculate medical certificate expiration dates and age-related currency requirements per FAA regulations
• Contact Email & Phone: Used for password recovery, security alerts, and essential service communications
• Mailing Address: Used for flight plan filing through the Leidos Flight Service system
• Emergency Contact: Available for search and rescue purposes if included in filed flight plans

You may add, update, or remove any optional personal information at any time from your profile settings.

4.3 How We Use Your Information

4.4 Third-Party Services

The Service integrates with the following third-party services to provide functionality. Data is shared with these services only when you actively use the corresponding feature:

• Leidos Flight Service (1800wxBrief): When you file a flight plan, your flight plan details (route, aircraft, pilot information) are transmitted to the FAA's Leidos Flight Service system. This is initiated only by your explicit action.
• ADS-B Traffic (airplanes.live): When internet-based traffic display is enabled, the app queries airplanes.live for nearby aircraft positions based on your current map view. No personal information is sent in these requests.
• Google OAuth: If you choose to sign in with Google, authentication is handled by Google's OAuth service. We receive only your name and a unique identifier.
• Cloudflare: Our content delivery network (CDN) is provided by Cloudflare. Static content (map tiles, chart PDFs, airport data) is cached and served through Cloudflare's global network. No personal or account data passes through the CDN.
• FAA Data: Airport information, charts, NOTAMs, weather data, and instrument procedures are sourced from FAA public data systems (NASR, d-TPP, TFR, AWC). This is publicly available government data.

4.5 What We Will Never Do

We make the following commitments regarding your data:

• We will NEVER sell your personal information to third parties
• We will NEVER share your data with advertisers or marketing companies
• We will NEVER use your flight data for any purpose other than providing you with the Service
• We will NEVER monetize your personal information in any way
• We will NEVER provide your data to third parties without your explicit consent, except as required by law or when you initiate a specific action (such as filing a flight plan)

4.6 Cookies and Session Management

We use the following technologies to maintain your session and preferences:

• Session Cookies: A signed session cookie is used to keep you logged in. It contains no personal information and expires automatically.
• Local Storage: The app stores your preferences (theme, map settings, selected layers) in your browser's or device's local storage. This data never leaves your device.
• Keychain (iOS): On the native iOS app, authentication tokens are stored in the device's secure Keychain for persistent login across app restarts.

We do not use any third-party tracking cookies, analytics services, or advertising pixels.

5. Data Security

5.1 Encryption

We implement industry-standard security practices to protect your data:

• In Transit: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security)
• At Rest: Sensitive data is encrypted at rest on our servers
• Passwords: Passwords are never stored in plain text; we use bcrypt with salt for secure password hashing
• Session Tokens: Authentication tokens are signed using HMAC-SHA256 to prevent tampering

5.2 Security Measures

We employ the following security practices:

• Two-Factor Authentication (2FA) support via TOTP
• Secure session management with signed cookies and Bearer tokens
• Protection against common web vulnerabilities (XSS, CSRF, SQL injection)
• Parameterized database queries throughout the application
• Regular security updates and monitoring
• Rate limiting to prevent brute force attacks

6. Your Rights and Data Control

6.1 Access to Your Data

You have the right to access all data we store about you at any time. Your flight records, aircraft, certificates, and profile information are always available through your account.

6.2 Data Export

You may export your data at any time in standard formats (including CSV) for use with other applications or for your personal records.

6.3 Data Deletion

You have the right to delete your data at any time:

• Individual flight records, aircraft, or certificates can be deleted through the application
• You may request complete account deletion, which will permanently remove all your data from our systems
• Upon account deletion, your data will be purged from our active systems within 30 days and from backups within 90 days
• Locally cached data on your device (tiles, charts, airports) can be cleared through the app's download settings

6.4 Data Portability

Your data belongs to you. We support data export in standard formats to ensure you are never locked into our platform.

7. Native iOS Application

The Tachbase iOS app provides additional functionality beyond the web version:

• Offline Access: Map tiles, airport data, chart PDFs, and other content can be downloaded for use without an internet connection. This data is stored locally on your device.
• GDL90 Device Integration: The app can connect to GDL90-compatible ADS-B receivers (such as Stratus) over your local WiFi network to display your GPS position and nearby traffic on the map. All GDL90 data stays on your device and is never transmitted to our servers.
• Background Sync: The app periodically synchronizes your logbook, aircraft, and flight plan data with our servers to keep your data current across devices.

8. Acceptable Use

You agree to use the Service only for lawful purposes and in accordance with this Agreement. You agree not to:

• Use the Service in any way that violates applicable laws or regulations
• Attempt to gain unauthorized access to the Service or other users' accounts
• Interfere with or disrupt the Service or its infrastructure
• Use automated systems to access the Service without permission
• Falsify flight records or other aviation documentation

9. Aviation Disclaimer

The Service is provided "as is" and "as available" without warranties of any kind, either express or implied. While we strive for accuracy, you acknowledge that:

• The Service is a tool to assist with record-keeping and flight planning and is not a substitute for official FAA records or certified flight instruments
• Weather data, NOTAMs, TFRs, and other aviation information may be delayed, incomplete, or inaccurate. Always verify critical information through official FAA sources before flight.
• ADS-B traffic display is for situational awareness only and does not replace the responsibility to see and avoid other aircraft
• Currency calculations are provided for informational purposes and should be verified independently
• Weight & balance calculations use data you provide and should be cross-checked against your aircraft's official POH
• You are responsible for verifying the accuracy of all flight records, flight plans, and aviation data

10. Limitation of Liability

To the maximum extent permitted by law, Tachbase shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Service, including but not limited to loss of data, loss of profits, regulatory penalties, or any damages resulting from reliance on information provided by the Service.

11. Changes to This Agreement

We may update this Agreement from time to time. We will notify you of any material changes through the Service or via email. Your continued use of the Service after such changes constitutes acceptance of the updated Agreement.

12. Termination

You may terminate your account at any time by contacting us or using the account deletion feature. We reserve the right to suspend or terminate accounts that violate this Agreement.

13. Governing Law

This Agreement shall be governed by and construed in accordance with the laws of the United States of America, without regard to its conflict of law provisions.

14. Apple App Store

If you access the Service through the Apple App Store, the following additional terms apply:

• This Agreement is between you and Tachbase, not Apple Inc. ("Apple"). Apple is not responsible for the Service or its content.
• Apple has no obligation to provide any maintenance or support services for the Service.
• In the event of any failure of the Service to conform to any applicable warranty, you may notify Apple and Apple will refund the purchase price (if any) for the app. To the maximum extent permitted by law, Apple has no other warranty obligation with respect to the Service.
• Apple is not responsible for addressing any claims by you or any third party relating to the Service, including product liability claims, any claim that the Service fails to conform to legal or regulatory requirements, and claims arising under consumer protection or similar legislation.
• In the event of any third-party claim that the Service or your possession and use of the Service infringes that third party's intellectual property rights, Apple is not responsible for the investigation, defense, settlement, or discharge of any such claim.
• Apple and its subsidiaries are third-party beneficiaries of this Agreement. Upon your acceptance, Apple will have the right (and will be deemed to have accepted the right) to enforce this Agreement against you as a third-party beneficiary.
• You represent and warrant that (a) you are not located in a country subject to a U.S. Government embargo or designated as a "terrorist supporting" country, and (b) you are not listed on any U.S. Government list of prohibited or restricted parties.

15. Contact

If you have questions about this Agreement or our privacy practices, please contact us through the application or at the email address provided on our website.

Copyright © 2026 Tachbase. All Rights Reserved.