FlitMate

Privacy Policy

Last updated 28 October 2026

FlitMate is a roster and crew-life companion app for airline crew. This policy explains, in plain language, what data the app handles, why, where it lives, and how you stay in control of it. FlitMate shows no ads, carries no analytics trackers, and your data is never sold.

1. Who is responsible for your data

FlitMate is provided by Aviation Time Company, Jeddah, Saudi Arabia (commercial registration 7053684465), which is responsible for your data as its controller.

For anything about your data, write to support@flitmate.com. This inbox is actively monitored.

FlitMate is the app SVCrew Hub became. SVCrew Hub accounts, with their data, are now Aviation Time Company's responsibility and carry on in FlitMate under this policy, as do the email addresses left on svcrew.com to hear when the app launched.

FlitMate is an independent app. It is not affiliated with, endorsed by or operated by Saudia or CAE.

2. What FlitMate collects

Most of it you type, the app reads from your crew portal with your sign-in, or the crew of a flight share in the app. The rest comes from your phone, such as its notification token, or from other FlitMate users, such as messages and requests sent to you.

Your account and profile

  • Your email address and password, to sign you in. The password is checked by Firebase Authentication and never stored in FlitMate's database.
  • Your name, staff number, airline, role, rank, base, gender and phone number, and for pilots your fleet, which registration asks for; and, if you add them, your date of birth, hiring date, retirement plan and photo. They show your profile, decide which chats, trade groups and announcements are yours, and feed your pay estimate.
  • The name your crew portal prints for you, kept when the app checks your profile against the crew lists it imports.
  • Settings that follow your account between phones: your duty alarms, whether you get report reminders, your chats and the ones you muted, and your privacy switches.
  • Your pay settings (salary, allowances, deductions and loans) and the months the Salary tool records, for your pay estimate.
  • Your in-app inbox: a copy of each notification you receive, some of them naming other crew. Swiping one away only hides it; it stays until you delete your account.

Your roster

  • Your duties as your crew portal shows them: flights, times, aircraft, layovers, hotel names, addresses and phone numbers, transport and remarks, with the portal's credit and block hours and its statistics. It includes leave as the portal records it, such as sick, medical, maternity and fatigue days.
  • For pilots, the block and air times of each flown leg from the company flight log, with the pilots who flew it.
  • Your roster change history, a month you project from a bid line, and your own notes on flights, aircraft and colleagues.
  • Flight plans you import (the plan as read, not the file) and scratchpad pages you write.

Data about your colleagues

When you import a flight or layover, its crew list, the same list you can already see in your crew portal, is saved into your own roster, so the app can show who you are flying with and whether you have flown together before.

  • It holds professional data only: each crew member's name, staff number, rank, the rank they fly that flight in, cockpit or cabin, operating or deadheading, and joining date; for a layover, the name and staff number of each crew member the portal lists at that station. Passports, visas, medical data and dates of birth are deliberately left out.
  • It is stored in your account's roster, which you and the colleagues you link with can read (section 4). If you share a special-meal list, the staff numbers of that flight's crew are copied onto the list to decide who can read it.
  • It is deleted with your account. The same lists in your colleagues' rosters are their records, read from the same portal, and are not affected by your deletion.

FlitMate also shows signed-in users the airline's out-of-kingdom station contacts: each contact's name, title, phone numbers and email address, from the airline's own list.

What you write and share

  • Documents you track in the document wallet: the type, title, number, issuing authority, issue and expiry dates, and notes. No photo of a document is ever uploaded.
  • Chat messages, trade posts and the offers you make, galley notes and shared aircraft notes, each with your name. Section 4 says who sees them.
  • Special-meal lists the cabin crew of a flight share: the passengers' names, seats and meal codes, the text read from each row (which can include assistance requests, such as a wheelchair, and other names printed beside it), and the name of the crew member who shared it. Meal codes can show a passenger's religion or health.
  • The colleagues you link with, and the colleague requests you send or receive.
  • Your phone's notification token, so notifications reach it.
  • Messages you send through Help & feedback, with your name, staff number, role and email address, and the app's version and platform.
  • An eSIM you order, once they are on sale: the plan, its price and the eSIM's number.
  • If you choose an airline FlitMate does not support yet: your answers about how it works there, and the email address and phone number you leave.

Used only on your phone

  • Your location, for prayer times and the qibla, read only on the Prayer times page. It is never stored or sent.
  • A photo you take or pick to fill in a document or read a special-meal list. It is read on your phone and never uploaded, and the text it fills in is saved as described above; a temporary copy stays in the app's own storage until the phone clears it.
  • Portal passwords you save, your crew portals' sign-ins in the app's browser, and your FlitMate sign-in if you use biometric sign-in (section 5).
  • Your other settings (app lock, theme, text size and notifications), your bid list and the bid packages you open, and anything waiting to be sent while you have no signal.
  • A copy of your account's data, so the app works with no signal.
  • On a paired Apple Watch, your current or next duty, sent over Apple's own watch link.
  • Like the rest of your phone's data, these can be part of your phone's own backup.

FlitMate is for airline crew. It is not meant for anyone under 18, and we do not knowingly collect their data.

3. The law we rely on

FlitMate follows Saudi Arabia's Personal Data Protection Law (PDPL) and honours the EU and UK GDPR. It relies on:

  • Providing the service you ask for: your account, roster, documents, pay estimate, chat, trading, galley notes, notifications and support (GDPR Article 6(1)(b)).
  • A legitimate interest: keeping the crew lists of your own flights, which mirror operational information already open to you in your crew portal, and showing your phone number and photo to other crew so crew can reach and recognise each other, which you can switch off at any time (GDPR Article 6(1)(f)).
  • Your consent, for everything else that is optional: saving a portal sign-in, your location for prayer times, linking with colleagues, and sending your data to your calendar or another app. You can withdraw it at any time by switching the feature off.
  • Special-meal lists are kept only to serve the meals the passengers of that flight ordered, and only until two days after the flight.

4. Who receives it

Your data is stored in Google Firebase, in Google's Frankfurt region in the European Union: the database, the files and most of the app's server. Sign-in is handled by Firebase Authentication in the United States, and three scheduled jobs run in Google's United States region: report reminders, which read each crew member's flights due within the hour, and the trade board's daily summary and nightly close, which read the open trade posts. Your data therefore leaves Saudi Arabia. Google processes it for FlitMate under the Firebase data-protection terms.

Some features send data to other services, each only what that feature needs:

  • Firebase Cloud Messaging, and Apple's push service on iPhone, carry each notification to your phone with its text: chat messages, report reminders, trade alerts and announcements.
  • FlitMate's emails (verification, password resets and account notices) are sent by Firebase Authentication or by FlitMate's own email service. Messages you send through Help & feedback are kept in FlitMate's database, where administrators read them.
  • Google ML Kit reads the text of a photo on your phone. FlitMate never uploads the photo, and the text is saved only as section 2 describes. The ML Kit library itself sends Google a device identifier and usage, performance and diagnostic data, which Google says is not linked to you or used for tracking.
  • Flightradar24, through FlitMate's server, receives an aircraft registration and a time when the app checks where your aircraft is. Airalo, through FlitMate's server, receives the number of an eSIM you hold, to show its data use.
  • Open-Meteo receives an airport's coordinates, for layover weather; aviationweather.gov an airport's code, for its weather reports; open.er-api.com a request for exchange rates. Each also receives your phone's internet (IP) address with the request, and none receives your name, your roster or your position.
  • Your crew portals. While Auto-update roster is on, which it is from the start (Profile, Crew portal), the app checks CAE each time you open it. CAE receives your sign-in and the app's requests for your roster, crew lists, statistics and flight log, any flight you look up, and for pilots the takeoff and landing marks you send to the company flight log. Lido receives your sign-in and the requests for your flight plans. For Check load, Microsoft receives the sign-in you type on its page, and Saudia's travel portal receives a flight number and date.
  • Other apps, only when you choose: your phone's calendar receives your duties, with each flight's crew names and staff numbers and the hotel's details, when you export your roster, and so does any app you send the calendar file to; the family roster card carries your name and your month; scratchpad pages and crew rest plans can be saved to your photos; LogTen Pro receives your flown sectors, with the other pilots' names unless you switch that off; ForeFlight receives a flight's route and aircraft; WhatsApp receives a colleague's number when you tap it. A calendar that syncs online passes what it holds to its own provider.

Inside FlitMate, who can see what. A FlitMate account is open to anyone who registers: FlitMate asks for a company email address, but cannot confirm that every account belongs to airline crew.

  • The colleagues you link with, up to ten, can read your roster, with its crew lists, leave and hotel details, until you pause sharing or remove the link on the Colleagues page. If you accept requests automatically, anyone who enters your staff number is linked at once.
  • Any signed-in FlitMate user can read the full list of members' names and staff numbers, and the phone numbers and photos members show. Show my phone number and Show my photo to other crew (Profile, Privacy and security) start on. Switching Show my photo off takes your photo off crew lists, but signed-in users can still open it until you remove the photo itself.
  • Any signed-in FlitMate user can look up the email address on an account from its staff number. Without signing in, anyone can do the same through the sign-in screen, limited per network and per day; to count those lookups, FlitMate keeps a short code made from the caller's IP address.
  • Any signed-in FlitMate user can read the trade posts you make, with your name and staff number; the board shows each post to crew of your role, rank and base, and for pilots your fleet. What an offer you make says is seen by the crew member who posted and by the administrators who handle trades; the post itself shows any signed-in user that you made an offer, and your name once it is accepted.
  • A flight's or layover's chat is open to every FlitMate user whose roster has that flight or layover, with flight crew and cabin crew in separate chats. Its members see your first name, rank and staff number with your messages. Any FlitMate user who knows your staff number can send you a direct message, unless you switch Allow direct messages off or block them.
  • A galley note is shown, with your name, only to the crew whose roster puts them on that aircraft at that station, and you see the names of those who open it. A shared aircraft note shows your first name and rank to every signed-in user.
  • Announcements, including one sent to you alone, can be read by any signed-in FlitMate user, with the staff numbers they were sent to; the app shows each one only to the crew it is for.
  • A special-meal list can be read by any account whose profile carries a staff number on that flight's crew list.
  • FlitMate's administrators, each limited to the permissions they were given, can see account profiles and sign-in records, feedback, reported messages and aircraft notes, trade posts and the offers on them, paid access, and deletion requests. No administrator screen shows your roster, documents, pay settings or notifications, or your chats beyond a message someone reported.
  • The few people who run FlitMate's servers can reach the stored data directly, and do so only to keep FlitMate running or to act on your request.

5. Your crew portal passwords

Saving a portal password is your choice. When you sign in on a portal's own page inside the app, FlitMate does not read what you type there.

  • If you save your CAE sign-in (Profile, Crew portal), it is kept in your phone's secure storage (the Keychain on iPhone, the Android Keystore), never on FlitMate's servers. FlitMate types it only into the CAE portal's own sign-in page, after checking the page's address, to keep your roster up to date, to look up a flight's crew when you ask, and for pilots to send the takeoff and landing marks you choose to the company flight log.
  • If a saved CAE sign-in fails, FlitMate deletes the saved password at once and stops trying, so it is never tried twice. You then choose whether to enter it again.
  • A Lido sign-in (Profile, Lido), for flight plans, is kept the same way, separately for each FlitMate account on the phone, and is used only on Lido's own sign-in page, close to your report time.
  • For Check load you sign in yourself, on Microsoft's own page. FlitMate does not read or keep that password; the sign-in stays in the app's browser on your phone.
  • If you turn on biometric sign-in, your FlitMate email and password are kept in the same secure storage and used only after your phone's own check (Face ID, a fingerprint or the phone's passcode). They stay after you sign out, so anyone who can unlock your phone can sign in as you until you switch biometric sign-in off. An app passcode is kept only as a one-way code, never as the digits.
  • Remove them in the app: Profile, Crew portal (or Lido), Remove; and switch off Biometric sign-in in Profile, Privacy and security. Signing out of FlitMate removes none of them. Asking to delete your account removes the Lido sign-in and your saved FlitMate password, but not a saved CAE sign-in.
  • Removing a saved password does not sign the app out of a portal. Your CAE and Microsoft sign-ins in the app's browser last until the portal ends them or you delete the app, and while the CAE one lasts the app keeps checking your roster with it. If someone else will use FlitMate on your phone, delete the app first: their account could otherwise read your roster through your portal sign-in.
  • On Android, uninstalling the app removes them. On iPhone the saved passwords stay in the phone's Keychain after the app is deleted and can come back from your phone's encrypted backup, so remove them in the app first.
  • Passwords saved in SVCrew Hub do not carry over to FlitMate. Save them again in FlitMate, and remove them in SVCrew Hub.

6. How long it is kept

Until you delete your account, except for these, which go sooner:

  • A flight's or layover's chat is deleted with all its messages once its crew are back at base, at the latest 15 days after the flight. Direct messages stay until you delete your account.
  • A galley note is deleted 72 hours after it is written, and a special-meal list two days after the flight.
  • Your roster change history keeps your last 30 updates and none older than 90 days, trimmed each time a new change arrives. A notification token unused for 30 days is deleted the next time FlitMate sends you a notification.
  • Trade posts close after their last flight date, and stay until you delete them.
  • The app's server logs, which can carry your account's internal number, your phone's IP address, your email address and the number of an eSIM you hold, are kept for 30 days.

Some things outlast the chat they came from: each member's inbox can keep the last message a chat announced, and a message someone reports is kept, with your first name, for the moderators until your account is deleted.

What is kept after you delete your account is in section 8.

7. How it is protected

  • All traffic is encrypted in transit (HTTPS).
  • In the app, Firebase security rules decide who can read what, as section 4 sets out: your documents, notifications, pay settings and private notes are readable by your account only.
  • An optional app lock (Face ID, fingerprint or an app passcode) protects the app on your phone. Biometrics never leave your phone.
  • Saved sign-ins are held in your phone's secure storage (section 5).
  • In the app, administrative actions are limited to named administrator accounts, each holding the permissions it was given.
  • If a breach puts your data at risk, we tell you and the authorities as the law requires.

8. Deleting your account

You can delete your FlitMate account and its data at any time, in the app or by writing to Aviation Time Company.

In the app: Profile, Edit profile, Danger zone, Delete account, then type your staff number to confirm. You are signed out at once, and our team deletes the account within 24 hours. Changed your mind? Sign back in and tap Cancel deletion request; this works only until the account is deleted, which can be soon after you ask.

Without the app, or if you registered for an airline FlitMate does not support yet: write to support@flitmate.com from the email address on your account and ask for your account to be deleted. We delete it within 24 hours of receiving your email.

Deleted with it: your profile, your roster and its crew lists, your documents, your pay settings, your flight plans, scratchpad pages and notes, your trade posts and the offers you made, your inbox, your galley notes and read receipts, your phone number and photo as crew saw them, your colleague links, your votes on aircraft notes, your sign-in by staff number, and any subscription record.

Your chats: a direct-message chat is deleted with both sides' messages. In a flight's or layover's chat you are still a member of, your messages are emptied at once and show only as deleted, with your first name, until the chat closes, at most 15 days after the flight. In one you left or removed with Delete chat, your messages stay as you wrote them until it closes, and a direct-message chat you removed with Delete chat is not deleted.

Kept afterwards:

  • Shared aircraft notes you wrote stay with the aircraft as crew knowledge, with your name and rank removed.
  • Messages you sent us through Help & feedback stay as you sent them, with your name and contact details, until we delete them.
  • An eSIM purchase stays as a sales record, without the codes that install it.
  • A record of your request, with your name, staff number, email address and its dates, stays as proof that the deletion was done.
  • Your name on a trade post where another crew member accepted your offer, and your internal account number on posts where you made one.
  • Your name and staff number on special-meal lists, until two days after the flight, and your staff number on an announcement sent to you by name, until it is deleted.
  • What other crew hold in their own accounts stays theirs: the crew lists of flights you shared, and the notifications they received from you or about you.
  • A few service records keyed only to your account's internal number, such as a promotion code you redeemed.

Deleting your account does not clear your phone. Remove your CAE sign-in in Profile, Crew portal before you delete, then delete the app, which removes its copy of your data and its portal sign-ins.

9. Your rights

You can ask us at any time to tell you what data we hold about you, to see it and get a copy, to correct it or to delete it, and to restrict or object to how it is used. You can withdraw a consent you gave by switching the feature off. Most of it you can do yourself in the app: Edit profile corrects your data, and Delete account erases it. For anything else, write to support@flitmate.com. We answer within 30 days, usually much sooner.

You may also complain to the Saudi Data and AI Authority (SDAIA), or to the data protection authority where you live.

10. Changes to this policy

If we change what we collect or how we use it, we update this page and its date, and announce significant changes in the app.

11. Contact

Aviation Time Company, Jeddah, Saudi Arabia. Commercial registration 7053684465.

Email support@flitmate.com.