Who we are
The hosted service at log-book.app (and Log-Book addresses that redirect to it) is run by Marthinus Bosman, an individual in South Africa. For your account, we are the responsible party under POPIA. The Information Officer is Marthinus Bosman, reachable at privacy@log-book.app.
Log-Book is also open-source software that dropzones can run on their own servers. This policy covers only the hosted service at log-book.app. If you use a Log-Book server at any other address, whoever runs that server is the responsible party for it, and their own policy applies.
Your dropzone’s records
Two kinds of information live in Log-Book, and the responsibility differs:
- Your account and personal logbook: your profile, credentials, logbook, gear and settings. We are the responsible party.
- Records a dropzone keeps about the people who jump there: signed waivers and indemnities, manifest and load records, check-ins, wallet balances and ledger transactions, payment records and tandem bookings. The dropzone decides what it records and why, so the dropzone is the responsible party and we process that information on its behalf as its operator. Questions about those records go to the dropzone first; we will help it answer.
What we collect
Your account
- Name, email address and a password, which we store only as a salted PBKDF2 hash (never the password itself).
- Optional profile details: phone number, address, date of birth, emergency contact name and number, profile photo, and whether you want marketing messages from your dropzones.
- Jumper credentials: association (e.g. PASA, USPA), membership number and expiry, licence, ratings with expiry dates, number of jumps before you started this logbook, body weight and exit weight (used for manifest weight limits).
- If you verify your PASA membership: the public member details para.co.za returns for your number (name, licence, ratings, home dropzone, whether you are on the current members list).
- Your logbook: jump number, date, dropzone or location, aircraft, altitude, freefall time, jump type, notes, rig used, and sign-offs (the signer’s name, licence and drawn signature image).
- Your gear: rigs, container and canopies, reserve repack and AAD service dates, service history.
- Jump buddies, teams, dropzones you follow, in-app notifications and import history.
At a dropzone
- Membership and roles (jumper, manifest, instructor, owner…), check-ins (day, weight, gear rental).
- Manifest slots: the load, jump type, extras, price, weight, and payment status.
- Wallet balances and an append-only ledger of top-ups, holds, charges, refunds and staff pay; records of payments made through the dropzone’s own payment provider (amount, status and the provider’s reference).
- Signed waivers and indemnities: the form text you agreed to, your answers, your name and details as signed, signature images (and a guardian’s, for minors), and a tamper-evident hash of the signed record.
Tandem passengers and online bookings
Tandem passengers often have no account. When someone books a tandem or a dropzone captures a passenger, we store what the dropzone’s form asks for: name, email, phone, ID or passport number, gender, date of birth, nationality, height, weight, address, emergency contact details, guardian details for minors, the booking, extras, payments and the signed indemnity. The dropzone is the responsible party for this information.
Uploads
Profile photos, dropzone photos and logos, signature images, and files you upload to import (deleted within a day).
Technical information
- For each signed-in session: the IP address and browser user agent at sign-in, so you and we can spot sessions that aren’t yours.
- Our hosting provider’s request logs and our error logs, kept for a few days to keep the service running and secure.
- If you use “Near me” on the Dropzones page, your browser sends your location with that one request to sort the list. We don’t store it.
We don’t use advertising, analytics or tracking scripts, and we don’t sell or rent personal information to anyone.
Why, and on what basis
| Purpose | Basis under POPIA (section 11) |
|---|---|
| Creating and running your account, logbook and gear tracking | Needed to provide the service you signed up for |
| Manifest, check-in, wallets, payments, waivers and tandem bookings for a dropzone | The dropzone’s contract with you and its legal and financial record-keeping duties; we act on its instructions |
| Weight, licence and currency checks before a jump | Safety: needed for the dropzone to run loads within aircraft and gear limits |
| PASA membership verification, Jump Master import, linking a self-hosted dropzone account | Your request (consent); you can disconnect at any time |
| Service emails (password reset, invitations, booking confirmations) | Needed to provide the service |
| Marketing messages from your dropzones | Your opt-in on your profile; switch it off at any time |
| Security, fraud prevention and keeping the service working | Our legitimate interest in a safe, working service |
Data outside South Africa
The hosted service runs on Cloudflare’s global network, so your information is stored and processed on servers outside South Africa. Section 72 of POPIA allows this when the recipient is bound by law or a binding agreement that gives protection comparable to POPIA. Cloudflare processes data under its data processing terms, which include the EU Standard Contractual Clauses and commit it to security and confidentiality comparable to POPIA. Resend (email delivery; a United States company, sending our email from its EU region in Ireland) processes recipient addresses and message content under its data processing agreement on the same basis. Payment providers and the other services above process data under their own terms; the payment providers in use include South African companies.
By using the hosted service you understand that your information is transferred abroad for these purposes.
Security
- All traffic is encrypted with HTTPS (HSTS on); strict content-security and other security headers on every page.
- Passwords are salted and hashed (PBKDF2-SHA256); session and password-reset tokens are stored only as hashes; resets expire after an hour and sign out other sessions.
- Dropzones’ payment-provider keys are encrypted at rest (AES-GCM).
- Every staff action checks the person’s role at that dropzone; you only see other people’s data where your role needs it.
- Signed waivers carry a hash that shows if the record was changed after signing.
- Uploaded images are re-checked on the server and their location metadata (EXIF) is removed.
No system is perfectly secure. If a breach puts your information at risk, we will tell you and the Information Regulator as section 22 of POPIA requires.
How long we keep it
- Your account, logbook and gear: for as long as you have an account.
- Sessions: until they expire (30 days without use) or you sign out. Password-reset links: a day after use or expiry.
- Import uploads: deleted within a day.
- Dropzone records (waivers, manifest and load records, check-ins, wallet ledgers, payments, tandem bookings): as long as the dropzone needs them for its legal, insurance and financial duties. The dropzone decides; we keep them while it uses Log-Book.
When you delete your account
We remove what is yours alone:
- your profile details, photo, credentials, ratings and PASA check;
- your logbook (including sign-off signatures on your own jumps), gear and service history;
- your sessions, linked accounts, notifications, buddies, personal teams, dropzone memberships and follows, and import history.
What a dropzone must keep for its own legal and financial records stays with that dropzone: signed waivers, manifest slots, check-ins, wallet ledger entries, payments and tandem records. Those records keep the details as they were captured at the time (for example, the name on a signed waiver), but they are no longer linked to an account: your account is replaced by an anonymous placeholder, and your email address is freed so it can be used again. A sign-off you gave on someone else’s logbook stays in their logbook. To have dropzone records removed, ask the dropzone.
Deleted information can remain in our hosting provider’s encrypted database backups for up to 30 days before it is gone for good.
Your rights
Under POPIA you can:
- Access your information: Profile → Export your data downloads your logbook (CSV) and a full copy (JSON). Ask us for anything not in the export.
- Correct it: edit your profile, credentials, logbook and gear yourself. Ask us to change your email address.
- Delete it: Profile → Security → Delete account removes your account straight away, as described above. You can also email privacy@log-book.app.
- Object to processing based on our legitimate interests, and withdraw consent (unlink PASA, Jump Master or a self-hosted dropzone; switch off marketing) at any time.
Email privacy@log-book.app from the address on your account. We reply within 30 days. For records a dropzone keeps, contact the dropzone; if it doesn’t respond, tell us and we will help.
Complaints
Please tell us first at privacy@log-book.app so we can fix it. You also have the right to complain to the Information Regulator (South Africa): inforegulator.org.za, POPIAComplaints@inforegulator.org.za (complaints, POPIA Form 5) or enquiries@inforegulator.org.za.
Children
Under POPIA a child is anyone under 18. If you are under 18, a parent or guardian must agree to you having an account and to us processing your information. Dropzones book tandem passengers aged 12 to 17 only with a parent or guardian’s details and signature on the indemnity; under 12 can’t be booked. If you believe a child’s information is here without a guardian’s consent, email us and we will remove it.
Changes
We will update this page when what we collect or how we use it changes, and change the effective date at the top. For significant changes we will tell account holders by email or in the app before they take effect.
Contact
Information Officer: Marthinus Bosman, South Africa · privacy@log-book.app
General questions: hello@log-book.app · See also the Terms of use.