Privacy & Data

Wilco ("we", "our", or "us") is committed to processing personal data in accordance with the General Data Protection Regulation (GDPR). This privacy policy explains what data we collect, how we use it, and the rights you have regarding your personal information.

1. Data Controller

The data controller responsible for your information is:

Bartłomiej Woźniak
Email: support@wilco.technology

2. Categories of Personal Data Processed

We may collect and process the following categories of personal data:

• Identity Data: full name, email address.
• Operational Data: flight rosters, logbook entries (PIC, CoPilot, IFR, durations).
• App Usage Data: preferences, settings.

3. Lawful Basis for Processing

We process personal data only when:

• It is necessary for the performance of a contract or app functionality (Art. 6(1)(b) GDPR).
• It is required for our legitimate interests, such as service improvement and security (Art. 6(1)(f) GDPR).
• In specific cases, where required, with your consent (Art. 6(1)(a) GDPR).

4. Purpose of Processing

Your data is used strictly for the following purposes:

• To enable core app functionality such as synchronization, backup, and statistics.
• To personalize your experience and support app usage.
• To maintain the security, integrity, and performance of the services.

5. Data Storage and Transfers

All data is stored on secure infrastructure provided by Google Cloud. Data may be transferred to jurisdictions outside the EEA using legal mechanisms such as Standard Contractual Clauses (SCCs).

6. Data Security

We implement appropriate technical and organizational security measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no transmission or storage system can be guaranteed to be 100% secure.

7. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

8. Your GDPR Rights

You have the right to:

• Access your personal data (Art. 15).
• Rectify inaccurate or incomplete data (Art. 16).
• Erase your data ("right to be forgotten") (Art. 17).
• Restrict processing (Art. 18).
• Object to processing (Art. 21).
• Exercise data portability (Art. 20).
• Withdraw your consent at any time (Art. 7(3)).
• Lodge a complaint with a supervisory authority (Art. 77).

9. Limitation of Liability

While we take reasonable measures to ensure the security and lawful processing of your data, we disclaim any liability for indirect or consequential damages resulting from unauthorized access, technical failure, or user negligence, to the extent permitted by applicable law.

10. Automated Processing

We do not use your personal data for automated decision-making or profiling that would produce legal effects or similarly significant outcomes as described in Art. 22 GDPR.

11. Policy Updates

We may amend this Privacy Policy to reflect changes in legal requirements, processing activities, or technical infrastructure. Significant changes will be communicated via the application.

Last updated: April 8, 2025