Privacy
Privacy Policy
Effective September 3, 2026 · Dean W. Charron DBA Log Scan Pro
Summary
Log Scan Pro does not sell, share, rent, trade, consign, license, or otherwise disclose your personal data to third parties for their own purposes. You own the records you create here. Another person — an instructor, a flight school, or an insurer — can see your records only through a relationship that you both confirm, or through your explicit authorization for a specific report.
Who we are
Log Scan Pro is operated by Dean W. Charron DBA Log Scan Pro. It is an aviation recordkeeping and decision-support platform that connects pilots, flight instructors, flight schools (FBOs), and aviation insurers. If you have any question about this policy or your data, contact us.
What we collect and why
We collect only what is needed to run the platform:
- Account information — your name, email address and chosen account type, so we can sign you in and show you the right tools.
- Pilot records — the profile, logbook entries, baseline totals, currency, and Pilot Vault documents (certificates, medicals, ratings, endorsements) that you enter, used to validate, chart and report on your own flying.
- CFI records — certificate and qualification information that an instructor owns and uses to sign endorsements and reviews.
- Organization information — FBO and insurer profiles, rosters, aircraft records and insurance requirements, maintained by those organizations.
- Uploaded documents — certificate images, medicals, signatures and other files you store in the Pilot Vault.
- Usage and visit data — limited, aggregated analytics that help us keep the service running and improve it.
The relationship-based access model
Log Scan Pro is built so that nobody browses anyone else's records. A pilot owns their logbook and Pilot Vault; an instructor owns their certificate record; a flight school owns its roster and aircraft; an insurer receives reports.
Access is granted only by a confirmed relationship — both sides must approve it — or by a pilot's explicit authorization for a specific report. Ending a relationship preserves the signed history already on file (endorsements, reports, audit records) but removes live access going forward. We never copy your logbook so that a school or insurer can read it later; the relationship, and your control of it, is what allows any view.
How we protect your data
The platform is hosted on Lovable's managed cloud infrastructure (Lovable Cloud), which maintains the database, authentication, file storage and runtime. The protections in place include:
- All data in transit is encrypted over HTTPS/TLS, and data at rest is encrypted in the managed backend database and storage.
- Row-Level Security is enforced in the database itself, so a user can only read or write their own records and those a relationship or authorization grants — not merely hidden behind the user interface.
- Ownership, membership and authorization are checked on the server on every write, so altered URLs, record IDs or API requests cannot reach another user's data.
- Sensitive documents — certificates, medicals, signatures, logbook images and reports — are stored in private storage with controlled file access, never in public buckets.
- Authentication uses secure, httpOnly session tokens; passwords are hashed, and social sign-in (Google) is handled by the managed authentication provider.
- Important administrative actions are recorded in an audit log that captures the actor, affected record, action, date, time and reason.
Payments
Paid upgrades (Milestones Premium tracks, IFR Insights, training bundles) and Go/No-Go reports are processed by our payment provider, Stripe. We do not see or store your full card number — card data is handled by the processor under its own PCI-DSS compliance. We retain only the order, the amount paid and a processor transaction reference.
Third-party data sources
Go/No-Go reports pull aviation data — weather, NOTAMs, terrain, airspace and obstacles — from government and commercial aviation sources at the moment a report is generated. Those sources receive only the query needed to fetch the data (for example, the airports and route of the planned flight), never your logbook. Where artificial intelligence assists in the analysis, it runs through the Lovable AI Gateway.
Data retention
Your records stay in your account for as long as it is active. We prefer archival over permanent deletion, so that signed endorsements, completed reports and audit history remain intact. If you ask, we will export your data or delete your account and its records, subject to the records we are required to keep — you can make that request through contact.
Your choices
You control your connections and can end any relationship at any time. You can revoke an authorization for a pilot report, manage notifications in your account settings, and request export or deletion of your data. Because access is relationship-based, ending a connection is the way to stop another person or organization from seeing your records going forward.
Children
Log Scan Pro is not directed at children under 13, and we do not knowingly collect their information. Pilot certificate-based features assume users are of the minimum age to begin pilot training.
Changes to this policy
We will update this page as the platform evolves. Material changes will be noted by the effective date shown at the top of the page.
Contact
Questions about this policy or your data are welcome through the contact page.
