RosterView — Privacy Policy

Last updated: 2 September 2026

The short version. Your roster is stored on your phone. Your airline password is never seen by RosterView. RosterView needs an account, because its point is comparing days off with your crew — but whether your roster is uploaded at all is your choice, and setting it to Private means it never leaves your phone.

Your airline login

RosterView has no airline built into it. You tell it the web address of the page where you read your roster (Profile & settings → My airline's roster page), and the app opens that page so you can sign in there yourself. Your airline username, password and any image or code verification are handled entirely by that website. RosterView does not read, record, store or transmit them, and they are never sent to our servers.

If you choose to save your airline sign-in details so the app can fill the form for you, they are stored in the iPhone's own Keychain on your device. They are never uploaded, and RosterView never submits the form for you — you always press Login yourself.

Your roster

When you import, your roster is read from the page and stored on your device. A copy of the original roster page is also saved on your device, under "Original", so you can check the app's times against the source. Both stay on the phone and are removed when you delete the app.

Sharing with other pilots

RosterView requires an account. When you create one, your roster is shared with other RosterView pilots by default, so you can compare days off and find swaps. You can change that whenever you like in Profile & settings, and your visibility setting controls everything — including the option for your roster never to be uploaded at all:

Private — your roster is not uploaded at all. It stays on your phone. If you were previously sharing and switch to Private, the copy on our server is deleted.
Favourites — your roster is stored on our server and can only be read by pilots whose request you have accepted.
Open (the default when you create an account) — your roster can be read by any signed-in RosterView pilot.

These rules are enforced by the database itself, not merely by the app.

What we store, and why

If you create an account, the following is held on our servers. Authentication and storage are provided by Supabase, acting as our processor.

What	Why	Who can see it
Email address	To sign you in and to send a password-reset code	Only you. Never shown to other pilots.
Password	To sign you in	Nobody — it is stored encrypted and we cannot read it.
Name, staff number, rank	So colleagues can find you and know whose roster they are looking at	Other signed-in pilots
Profile photo, if you add one	To show who is who when comparing rosters	Other signed-in pilots
Your roster	To let colleagues compare days off and find swaps	Per your visibility setting above
An account identifier	To link the above to your account	Not shown to anyone

None of it is used for advertising, profiling or tracking, and none of it is sold or shared with anyone else.

Other people's names

Airline rosters list the crew you are flying with. Those names are stored on your device as part of your roster, and are included if you choose to share your roster. Please treat colleagues' details with the same care you would the printed roster.

Face ID

You can require Face ID before RosterView will open. The check is performed by iOS on your device; RosterView is told only whether it succeeded, and never receives your face data or your passcode.

What we do not do

No analytics, tracking or advertising.
No third-party trackers or advertising SDKs, and no selling or sharing of data with anyone.
No location collection.
No access to your contacts or calendar (a photo is read only if you pick one).

Deleting your data

Account and shared rosters: in the app, tap your photo → Profile & settings → Delete my account. This permanently removes your account, any rosters you shared and your connections with other pilots.
Everything on the phone: delete the app.

Children

RosterView is intended for professional airline crew and is not directed at children.

Changes

If this policy changes, the date above will be updated.

Contact

Questions or a data request: inforosterview@gmail.com