PRIVACY

Crewday privacy

Effective November 11, 2026 · CrewDay Labs

This notice covers the Crewday iPhone beta and this website. Crewday is independently developed and is not affiliated with American Airlines or APFA.

Your AA account and saved schedule

Your AA employee login, password, verification and session cookies are used with AA on your device. Crewday's shared service does not receive them. Optional automatic sign-in stores your login in this iPhone's device-only Keychain. Your saved schedule is encrypted on the iPhone and excluded from app backups. Disconnecting clears the saved AA account data, schedule and AA website state from Crewday on that device.

Optional Crew Circle

Opening Crew Circle creates a random device account with our service provider, Supabase. Joining creates a permanent random profile ID and a separate invitation code; no additional email or password is required. After you review your details, we store your first name, last-name initial, seniority number and base, plus friend requests, friendships, invitation-code records and connected-device information. We use this information to run Crew Circle. A code sends a request; an accepted friendship and your sharing permission are required before another person can read your calendar.

Calendar sharing is off until you turn it on. When enabled, we upload a limited last-synced calendar containing assignment categories, report/release times, dates and time-zone information. Full flight itineraries, crew lists, pay details and AA sessions are not included. Friends see read-only snapshots and when they were synced. They cannot edit your schedule or access your AA account. Someone who has already viewed information can retain a copy or screenshot.

Changing your invitation code keeps existing friends connected. Removing a friend prevents future calendar reads. Turning calendar sharing off deletes your shared calendar. You can remove another connected device, rotate a recovery key, or delete your Circle profile, friendships and shared calendars from Crew Circle. Recovery keys grant access to your Circle profile; keep them private. We store only a hash of a recovery key on the server. Your device retains its own key in the Keychain.

Optional automatic error reports

More → Share diagnostics is a separate, optional control. Reporting starts only after you enable it. Reports contain a random event ID, app build, operating-system major version, platform, fixed error code, component, failure stage, optional HTTP status and occurrence count. Reports are associated with a separate random device account so we can deduplicate errors and delete your reports. They do not contain AA credentials, employee IDs, names, schedules, screenshots, raw responses or free-text error messages.

Reports help us find and fix reliability problems. They are queued locally when offline and retried while the app is active. Turning reporting off clears the local queue and requests deletion of uploaded reports when a connection is available. You can use the app without enabling reports.

Storage, security and retention

Supabase hosts the shared service and database in the United States. Connections use HTTPS. Shared calendar entries are encrypted with AES-256-GCM before database storage; profile and relationship records are protected by database access controls and the hosting provider's storage encryption. Calendar encryption is server-side, not end-to-end: the authorized service and privileged administrators can access the information needed to operate the service. No system provides absolute security.

Automatic reports expire after 30 days and are removed by a daily job, so deletion may occur up to approximately one day after that threshold. Pending friend requests expire after 30 days. Shared calendars outside the recent-month window are removed by daily cleanup. Profiles and accepted friendships remain until you delete them. Removed device accounts are queued for cleanup, normally every 15 minutes, with retries on failure; application access is revoked immediately. Infrastructure backups and security logs have separate provider retention and may not disappear immediately when app data is deleted.

Providers and website requests

We use Supabase for device authentication, shared calendars and error reporting, Cloudflare for this website, and Apple for iOS distribution. These providers may process network metadata such as IP addresses, request times and device/browser information for delivery, security and reliability. We do not sell your personal information or use your Circle calendar or error reports for advertising. Crewday+ purchasing and Contract AI are not active in this beta. Any future feature that changes these practices will have updated disclosures before activation.

Your choices and contact

Review and edit your Circle profile, approve or decline requests, disable sharing, remove friends or devices, delete your Circle profile, or turn off and delete diagnostics in the app. Uninstalling the app alone does not delete a server profile. For privacy questions, access/correction/deletion requests, or help if you cannot access your profile, email support@crewdaylabs.com. Do not send AA passwords, tokens, cookies or recovery keys. We may need to verify your request using information appropriate to your Crewday profile.

Crewday is intended for adult flight attendants. Updates to this notice will be published here with a new effective date.