Privacy policy
Last updated: 12 October 2026
This is a translation provided for convenience. The French version is the only legally binding one.
In short
- Your airline credentials are encrypted and only used to fetch your roster.
- We sell no data and show no advertising.
- Your photos stay on your phone.
- You can delete your account and all your data from the app.
Data controller
SARL BSIGHT, 15 rue des Halles, 75001 Paris, France, SIREN 910 119 023. Personal data contact: privacy@callout.aero.
Data processed and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account: email address, airline, role, fleet, base, TLC | Create your account and tailor alerts | Performance of the contract |
| Credentials and session tokens for your airline portal | Fetch your roster and the master roster on your behalf | Performance of the contract |
| Roster, activities, flights, times | Display, calendar export, change detection | Performance of the contract |
| Device notification token | Send the alerts you have turned on | Consent (system permission) |
| Callout+ subscription status | Unlock paid features | Performance of the contract |
| Technical logs (errors, syncs) | Security and troubleshooting | Legitimate interest |
Payments are handled by Apple or Google. We never receive your bank details.
Data about other crew members
Your roster and the master roster contain the TLCs and sometimes the names of your colleagues. This information comes from your airline's system and is only shown to users from the same airline. A name is only linked to a TLC if that person has chosen to share theirs. Any crew member can ask for their name to be hidden by writing to privacy@callout.aero.
Sharing with your loved ones
When you invite a loved one with a code, they get a filtered view of your roster, at the level you choose. Crew names, your hotel, your actual position and your credentials are never shared. You can pause or remove a loved one at any time.
Photos and memories
Callout does not upload your photos to its servers. The app keeps the photo's identifier in your camera roll, with a thumbnail stored on your phone. Camera roll access is requested by the system and can be revoked in settings.
Retention periods
- Airline credentials: deleted as soon as you disconnect your airline or your account.
- Account and roster: for as long as your account is active, then deleted within 30 days of its deletion.
- Inactive accounts: deleted after 24 months without sign-in, following a reminder email.
- Technical logs: 90 days.
Recipients and processors
| Provider | Role | Location |
|---|---|---|
| Scaleway SAS | Hosting of the website, servers and database | France |
| Expo (650 Industries) | Notification delivery | United States, standard contractual clauses |
| Apple, Google | Notifications, subscriptions, distribution | United States, Data Privacy Framework |
| RevenueCat, Inc. | Subscription management (purchase receipts and subscription status, linked to your Callout identifier) | United States, standard contractual clauses |
Security
Your credentials are encrypted with AES-256-GCM, using a key unique to each user, itself protected by a master key stored outside the database. Communications are encrypted with TLS. Notifications shown on the lock screen never contain a colleague's name.
The callout.aero website and cookies
The website uses no advertising cookies. A single technical cookie remembers the language you chose. Audience measurement is cookieless and anonymous, so no consent banner is required.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. You can delete your account from Account › Delete my account, or write to privacy@callout.aero. You can also lodge a complaint with the CNIL (cnil.fr) or with the supervisory authority of your country.
Callout is reserved for adults working as flight crew members.