Jumpbook Privacy Policy

Introduction

Jumpbook is a digital skydiving logbook with live jump tracking, wind analysis, and in-person QR-based jump sign-off, built for licensed skydivers. This Privacy Policy explains, in plain and accurate terms, what information the App collects, how it is used, who it is shared with, and the choices you have. Please read it carefully — in particular the sections on location and sensor data used during live jump tracking.

Information We Collect

Account & Identity Information

Jumpbook does not use passwords. You sign in with Google Sign-In or Sign in with Apple. From whichever provider you choose, we receive and store:

• Email address
• Name (full name / display name, as provided by Google or Apple)
• Profile photo URL, if your Google account has one
• A unique account identifier issued by Firebase Authentication, used internally to link all of your data

If you sign in with Apple and choose to hide your email, Apple provides us with a private relay address instead of your real one. Jumpbook never sees your Apple ID password or other Apple account details.

Profile, License & Credential Information

To support license tracking and the in-person signature workflow described below, you may enter:

• Federation membership/license numbers (e.g. USPA, FEDEAEREOS), license category, issue/expiration dates, and ratings
• Instructor or coach credentials, if you hold them — used to determine what you're eligible to sign off on in the in-person QR signature workflow
• Pilot certificate number, if applicable
• Gear/equipment details you log for your own rig — including, if you record a repack, the name and rigger certificate number of the person who repacked it (this is personal information about a third party that you choose to enter)

Jump Records

For every jump you log, the App stores the details you enter or that the Jump Tracker records automatically:

• Date, time, dropzone name, aircraft, jump type, and discipline
• Exit altitude, deployment altitude, freefall time, canopy time, and speeds
• Gear used and free-text notes/observations you write
• Photos you choose to attach (see Camera & Photos below)

Location Data

The App uses your device's GPS in three distinct situations:

• Live Jump Tracking: when you start the Jump Tracker, the App records your precise location (latitude, longitude, accuracy, ground speed, and heading) throughout the jump — boarding, freefall, canopy flight, and landing — together with barometric altitude (see Motion & Barometric Sensor Data). Because a jump typically lasts 15-30 minutes and your phone is usually stowed and its screen locked, iOS asks you to upgrade location permission from "While Using the App" to "Always", and the App keeps running in the background for the duration of tracking so the track isn't cut short. Location is not tracked in the background outside of an active Jump Tracker session.
• Wind Analysis: the Wind screen requests your current location once, to center the map and fetch wind data for your position (see the third-party Wind Data API below).
• Dropzone entries: dropzone names you type in are stored as plain text; the App does not attach GPS coordinates to a dropzone entry itself.

A completed jump's track (a series of timestamped location points, plus a summary exit/deployment/landing location) is saved to your jump record so you can review it later, including as a 3D map. Points recorded while GPS signal was weak or unavailable are also kept, flagged as such, so the track can be displayed honestly rather than silently smoothed over.

Motion & Barometric Sensor Data

The Jump Tracker reads your device's barometer (air pressure, to measure altitude and vertical speed) and motion sensors (to help detect freefall/canopy/landing) continuously while tracking. These raw readings are processed on your device to compute altitude and speed; we do not store or transmit raw barometer/motion sensor streams — only the resulting altitude and speed values that become part of your jump record.

Camera & Photos

• QR sign-off scanning: when you act as a witness and scan someone else's signature QR code, the camera is used live to decode the code's text. No photo or video frame is captured or stored.
• Profile and gear photos: if you choose to add a profile picture or a photo of your gear, the App accesses your camera or photo library to let you pick or take one, compresses it, and uploads it to Firebase Storage. You can replace or delete these photos at any time.

In-Person Signature (QR) Data

Jumpbook replaced remote signature requests with an in-person, single-use QR flow aligned with USPA SIM 3-1. When you generate a signature QR code for a jump:

• A short-lived (10-minute) token is created containing a summary of that one jump (date, dropzone, altitudes, and similar flight details) so the person scanning it can review what they're signing without needing broader access to your logbook.
• The person who scans and signs it (the witness/instructor) has their name and license or certificate number permanently recorded on your jump record, together with the date and their credential tier — this is a regulatory record-keeping requirement, not optional metadata.

Push Notification Data

If you allow notifications, we store a device push token (Firebase Cloud Messaging) linked to your account, used to notify you about the signature workflow above (a signature request, a completed signature, or a rejection with a reason). We do not use push notifications for marketing.

Automatically Collected Diagnostic Information

Jumpbook uses Firebase Crashlytics to automatically receive crash reports and error logs (stack traces, device/OS version) when the App fails unexpectedly, so we can fix bugs. Jumpbook does not use a separate behavioral analytics or advertising SDK — we do not track which screens you visit, how long you use the App, or your interaction patterns for marketing purposes.

How We Use Your Information

• Core functionality: creating your account, logging and displaying your jumps, calculating statistics, rendering your 3D flight track, and predicting wind drift
• License & currency tracking: warning you when a license, rating, or recurrency requirement is approaching expiration
• In-person signatures: generating and validating single-use QR tokens, and permanently recording who signed which jump, per SIM 3-1
• Notifications: alerting you about the signature workflow described above
• Stability: diagnosing and fixing crashes via Crashlytics

Data Storage and Security

Firebase Services (Google LLC)

Your data is stored and processed using the following Google Firebase services:

• Firebase Authentication — sign-in
• Cloud Firestore — your jumps, tracks, profile, licenses, gear, and signature records
• Firebase Storage — profile and gear photos
• Firebase Cloud Functions — server-side logic
• Firebase Cloud Messaging — push notifications
• Firebase Crashlytics — crash and error reporting

Firebase's own privacy and security practices are governed by Google's Privacy Policy.

Maps & Location Services

Rendering a map necessarily sends the coordinates being displayed to the map provider. Jumpbook uses:

• Mapbox, to render your 3D jump track with real terrain, on the jump detail screen only. See Mapbox's Privacy Policy.
• Google Maps, on the Wind screen, centered on your current location. See Google's Privacy Policy.

Wind Data Provider

To show wind predictions, the Wind screen sends your selected latitude/longitude to a third-party wind data service (a proxy that sources data from the Open-Meteo weather model). This request contains only coordinates — no account or identity information is sent with it.

Security Measures

• Data encrypted in transit and at rest by Firebase
• Role-based access controls (user, instructor, admin) enforced by Firestore security rules
• Single-use, time-limited tokens for the QR signature flow, so a signature cannot be replayed or reused

Information Sharing and Disclosure

Who Can See What

• Witnesses/instructors you choose to involve: scanning your signature QR code shows a summary of that one jump; signing it permanently attaches their name and credential number to your jump record (see In-Person Signature Data above)
• Administrators: app administrators can access account and jump data for moderation, support, and safety purposes
• Service providers: Firebase, Mapbox, Google Maps, and the wind data provider listed above, each acting as a data processor for the specific function described
• Legal requirements: if required by law, legal process, or to protect the rights, property, or safety of Jumpbook, our users, or others

Your Rights and Choices

• Access & correction: view and edit your profile, jumps, licenses, and gear directly in the App
• Deletion: delete individual jump records, or your entire account, at any time
• Export: generate a CSV or PDF of your jump records directly in the App at any time; to request a full copy of all data tied to your account, contact us
• Location permission: you can decline or later revoke "Always" location access in your device settings; the Jump Tracker will then only be able to record location while the App is in the foreground, which may cut your track short during a real jump
• Notifications: you can disable push notifications in your device settings
• Language: the App and this policy are available in English and Spanish

Account Deletion

To delete your account:

1. Go to Settings
2. Select "Delete Account"
3. Confirm deletion (this action cannot be undone)

This permanently deletes your jump records (including tracks and attached photos) and your account profile, and signs you out everywhere. You can also request deletion by emailing us at contact.jumpbook@gmail.com; we will process your request within a reasonable timeframe.

Children's Privacy

Jumpbook is a logbook for licensed skydivers and is not directed at children. It is not intended for use by anyone under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at contact.jumpbook@gmail.com and we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Effective Date" above, and, where appropriate, an in-app notice. Continued use of the App after a change constitutes acceptance of the updated policy.

Your California Privacy Rights

California residents have additional rights under the CCPA: to know what personal information is collected, to know if it is sold or disclosed (we do not sell it), to request deletion, and to non-discrimination for exercising these rights.

GDPR (EEA Users)

• Legal basis: consent (e.g. location, camera) and contract performance (providing the logbook service you sign up for)
• Your rights: access, rectification, erasure, restriction, portability, and objection
• Withdrawal: you can withdraw consent at any time, including by revoking a device permission or deleting your account
• You may lodge a complaint with your local data protection authority

Consent

By using Jumpbook, you consent to this Privacy Policy and agree to its terms.