Privacy Policy

1. Who we are

Rotate ("Rotate", "we", "us") runs the Rotate mobile apps, the Rotate Bridge desktop app for Windows andflightrotate.com (together, the "Service"). We are the data controller for the personal data described in this policy. We process personal data in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and, where it applies to you, the EU and UK GDPR.

2. What we collect

AccountYour name, callsign, email, country and password. The password and the 6-digit PIN you use on Rotate Bridge and the app are stored only as Argon2id hashes, never in readable form.

Flight dataWhile a flight you started is running, the Bridge records simulator values once a second: position, altitude, speeds, attitude, engine and fuel values, gear, flaps, lights, touchdown data and simulator state such as pause or sim rate. It also sends the flight plan you loaded from SimBrief (route, fuel, load and weather) and the score sheet for the flight.

Game activityRosters, contracts, type ratings, credits, XP, ranks, scores, appeals, job applications, achievements, tours, events and share cards you create.

DevicesFor each phone: its name, model, operating system, app version, a device identifier and a push-notification token. For each PC: its machine name, a machine identifier, the Bridge version and the simulator it runs. We also keep the IP address and time of sign-ins and security events.

PaymentsThe plan, amount, currency, date, payment method type and status. Card numbers and bank details are handled by the payment processor, not by us.

Support & diagnosticsMessages you send us, crash reports from the phone app, and Bridge logs you choose to share. Logs never include passwords, PINs or tokens.

We do not read your files, other programs, keystrokes or anything outside the flight simulator. The Bridge only reads simulator variables exposed through Microsoft SimConnect, and it never writes to the simulator.

3. What stays on your PC

Some data is kept on your computer and is not sent to us unless noted:

Text and HTML flight reports in your Documents\RotateBridge folder.
A short-lived queue of flight data and finished flights waiting to upload, so nothing is lost when the internet drops. Queued live data older than six hours is discarded; the finished flight still uploads in full.
Your settings, and your signed-in session, which is encrypted with Windows data protection for your Windows user.
Update downloads, checked against their size, SHA-256 and signature before they install.

4. How we use it

To follow flights live, record scores, and show debriefs, rosters, career progress and your logbook.
To run your account: sign-in, one-time email codes, your PIN, trusted devices and paired phones.
To process subscriptions and one-time purchases, and to remind you before a plan or your free month ends.
To send the notifications you choose (push and email); security notices are always sent by email.
To detect cheating, for example sim-rate changes or slew during a scored flight, and keep leaderboards fair.
To fix bugs and improve the Service, using crash reports and aggregated usage data.
To contact you about your account, security and changes to these documents. Product news only if you opt in.

5. Legal basis

We process your data to perform our contract with you (providing the Service you signed up for), to meet legal obligations (for example tax records for payments), for our legitimate interests (security, fraud and cheat prevention, improving the product), and with your consent where we ask for it (marketing email, optional diagnostics). You can withdraw consent at any time.

We never sell personal data. We share it only with:

Payment processors, who handle Virtual Account, QRIS and card payments. We never see or store your full card number.
Apple and Google, when you buy through their stores, and to deliver push notifications.
Infrastructure providers for hosting, email delivery, crash reporting (Google Firebase) and the maps in the Bridge, under contracts that limit how they use your data.
SimBrief, which receives your SimBrief username when the Bridge loads your flight plan.
Other pilots, who see your name, callsign, country, rank and public flight stats on leaderboards, events and tours. Share cards are public only if you post them.
Authorities, when the law requires it.

7. Where your data is stored

Our main servers are in Singapore. If you use Rotate from another country, your data is transferred there. We use appropriate safeguards for these transfers, as required by the laws that apply to you.

8. How long we keep it

Account, logbook and flight results: for as long as your account is open.
Once-a-second flight samples: 90 days, after which your logbook keeps the flight's summary, score and track.
Payment records: 10 years, as required by Indonesian tax law.
Sign-in and security events: 12 months.

When you ask us to delete your account, we close it and erase or anonymise your personal data within 30 days, except where the law requires us to keep it.

9. Your rights

You can access, correct, download or delete your data, object to or restrict some processing, and withdraw consent. Your profile, notification choices and trusted devices are in the app and the Bridge under Settings. For anything else, email [email protected] and we'll reply within 14 days. You can also complain to your local data protection authority.

10. Security

Data is encrypted in transit (TLS) and at rest. Passwords and PINs are hashed with Argon2id, repeated wrong PINs lock the PIN for a while, and a new PC or phone needs a one-time code from your email before it is trusted. You can see every trusted PC and phone, remove any of them and sign out everywhere else in Settings → Security. On your phone, tokens are kept in the system's secure storage; on your PC, your session is encrypted with Windows data protection. No system is perfectly secure; if a breach affects you, we'll notify you and the authorities as the law requires.

11. This website

flightrotate.com uses no advertising or tracking cookies and no third-party analytics. It remembers your light or dark choice and your pricing region in your browser's local storage, which never leaves your device. Fonts are served from our own domain.

12. Children

Rotate is not intended for children under 13. Users aged 13 to 17 need permission from a parent or guardian, who is responsible for any purchases. If we learn we hold data from a child under 13 without that consent, we delete it.

13. Changes and contact

If we make material changes, we'll tell you in the app or by email at least 14 days before they take effect. Questions: [email protected].