Privacy | CAVOK Life

Last updated: 21 August 2026.

Who we are

BluFlo Solutions Ltd, Office 17632, 182-184 High Street North, East Ham, London E6 2JA, company number 16412861 is the controller for personal data processed in CAVOK Life. CAVOK Life is the product name of the service.

Contact: info@cavoklife.com.

Account and profile

When you register we store your email, username, a hash of your password, and the display name you give. In your profile we may store airline, aircraft type, base, timezone, and licensing authority (UK CAA or EASA), plus related logbook display choices.

Logbook

We store the sectors and simulator entries you import or enter, plus any legal name, address, employer, and CAA or licence fields you add for exports. Owner signatures and countersignatures are stored when you use signed exports. We keep export PDFs you generate so you can retrieve what you already sent.

Roster and imports

We store roster duties, CSV and companion imports, and the change history of those duties. Import files are processed so we can show you a confirmation and apply the days you accept.

Social

Other signed-in users can search by username. Friend requests and, if accepted, viewing a friend's roster use the data you have already stored. We do not run a marketing mailing list.

Live roster share

If you turn on a live share, anyone with the passworded link /u/{username}/roster can request the stripped public view after a Cloudflare Turnstile check. We store the share settings you choose, including the password hash, not the password in plain text.

Chrome companion

CAVOK Life Companion is a Chrome extension. When you start an import it copies roster and logbook reports (usually CSV) from the airline site in your browser and sends them to your signed-in CAVOK Life account over HTTPS. We then store the duties and flights you confirm, as described under Roster and imports and Logbook.

Captures sit in the browser only while the import is running. The extension also stores your Automatic or Manual preference in Chrome sync storage. If you copy a diagnostic trace, that file stays on your device unless you send it to us; traces exclude cookies, credentials, URL queries, employee text, and report contents.

We do not store airline-portal usernames, passwords, or cookies. Those stay in the airline site. Starting Import in the side panel is your consent to that copy and transfer.

On-device OCR

Screenshot OCR runs on your device. The image is processed locally. We store the duties you confirm.

Billing

Stripe processes your card details, Checkout, and subscriptions. CAVOK Life does not receive or store your full card number or security code.

We store Stripe customer, Checkout, subscription, price, invoice-event, and access status identifiers needed to provide and secure your subscription.

To enforce one trial per account and payment credential, we store a one-way keyed digest derived from Stripe's card fingerprint. The raw fingerprint is not stored in the app database and the digest is not used for payment processing.

Cloudflare

Cloudflare hosts the app, holds the database (D1), sends transactional email, runs the Turnstile bot check, and provides analytics. Session cookies and Turnstile are necessary for the service. We do not use non-essential cookies today, so there is no separate cookie banner.

Why we use the data

We use this data to provide the account, logbook, roster, social, sharing, companion import, and billing features you ask for; to keep the service secure (including one trial per credential and bot checks); to send transactional email such as verification and password reset; and to meet accounting and legal obligations.

The lawful bases we rely on are performance of the contract (providing the service you signed up for), legitimate interests (security, abuse prevention, and operating the site), and legal obligation where records must be kept.

Your rights

Under UK GDPR you can ask for access, correction, deletion, restriction, objection, and portability, and you can withdraw consent where we rely on it. Email us at the contact above. You can also complain to the Information Commissioner's Office (ICO) if you are unhappy with how we handle your data.

Retention

We keep account, logbook, roster, and related records while the account is open. After you close it, we keep what we still need for tax, accounting, and disputes, then delete or anonymise the rest.

Transfers

Personal data is processed on Cloudflare's network and in Stripe's systems. That can involve processing outside the UK. Those providers use their published transfer tools (such as standard contractual clauses) where required.

Children

CAVOK Life is for people aged 18 and over. We do not knowingly hold accounts for children.

Contact

Write to info@cavoklife.com or to the address above.