Duty Plan Toolkit for Airline Crew
Last updated: April 21, 2026
CrewLine is developed and operated by:
Marius Hoppmann
E-Mail: [email protected]
Website: homgsa.de/crewline
If you have any questions about this privacy policy or the handling of your personal data, please contact the address above.
CrewLine is a mobile application for iOS and Android that allows airline crew members to download, view, and manage their duty schedules (rosters). The app authenticates against your airline's crew management portal, stores your credentials locally on your device, and can optionally synchronise your duties with your device's calendar.
The following data is stored only on your device and is never transmitted to our servers:
| Data | Storage | Purpose |
|---|---|---|
| Airline login credentials (username, password, session cookies, tokens) | Encrypted secure storage (iOS Keychain / Android Keystore) | Automatic login to your airline's crew portal |
| Name, surname, employee ID / 3-letter code | Encrypted app storage | Display and calendar event generation |
| Selected airline (IATA code) | App preferences | Configure correct crew portal |
| Downloaded roster PDF files | App documents directory | Offline access to your duty plans |
| Calendar settings (calendar ID, export preferences) | App preferences | Control how duties are written to your calendar |
| In-app purchase / donation history | App preferences | Track voluntary donations made within the app |
| App settings (theme, timezone, notification preferences) | App preferences | Personalise the app |
| Debug log messages | App memory (not persisted to disk) | Troubleshooting; only transmitted if you manually trigger a bug report |
The following data may be transmitted to external services under the conditions described:
| Service | Data Transmitted | When | Opt-out |
|---|---|---|---|
| Firebase Crashlytics (Google LLC) |
Crash logs, device model, OS version, app version, an anonymous identifier combining your selected airline and user ID (e.g. "EW - ABC123") | Only when the app crashes and only if crash reporting is enabled | Can be disabled in app Settings → Crash Reports |
| Firebase Analytics (Google LLC) |
Anonymised usage events (e.g. roster downloaded, calendar synced), app version, device type | Continuously while the app is in use, only if analytics is enabled | Can be disabled in app Settings → Analytics |
| HOMGSA Notification Server (homgsa.de) |
No personal data. Only a version check request is made. | On app launch, to check for in-app notifications and version updates | Not applicable (no personal data sent) |
| HOMGSA Bug Report Server (homgsa.de) |
Debug log, your selected airline, your user ID (employee number) | Only when you manually tap "Submit Bug Report" in the app | You initiate this explicitly; no automatic transmission |
| DienstPlanKonverter (crewline.dienstplankonverter.de) |
Your roster PDF file | Only when you use the DienstPlanKonverter import feature to convert a PDF roster | Feature is opt-in; simply do not use it to avoid any transmission |
| Airline Crew Portals (various, see §4) |
Your airline login credentials, entered via an embedded browser within the app | When you log in or the app refreshes your session automatically | Required for core app functionality |
| Apple App Store / Google Play (in-app purchases) |
Purchase transactions are handled entirely by Apple / Google. CrewLine receives only a purchase confirmation token. | When you make a voluntary donation in-app | Only when you choose to make a purchase |
CrewLine connects to your airline's official crew management system on your behalf using the credentials you provide. These portals are operated by the airlines themselves and are not controlled by CrewLine. The following systems are supported:
Your credentials are only ever transmitted directly to your airline's own portal. CrewLine never receives, stores, or forwards your credentials to any third-party server. Please refer to your airline's own privacy policy for how they handle your authentication data.
If you choose to use the calendar synchronisation feature, CrewLine will request read and write access to your device's calendar. The app uses this access solely to create, update, and delete duty events corresponding to your roster. No calendar data is transmitted to any server. You can revoke calendar access at any time in your device's system settings, and you can disable the feature within the app.
CrewLine does not collect, process, or transmit your location. The app does not use location services for any purpose.
CrewLine uses Firebase services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Both Firebase services are disabled by default on first launch. You are asked to opt in during initial setup. You can change your preference at any time under Settings in the app.
Google's privacy policy: policies.google.com/privacy
Firebase data processing terms: firebase.google.com/terms/data-processing-terms
CrewLine offers a voluntary "Thank You" donation via the App Store (Apple) or Google Play (Google). All payment processing is handled exclusively by Apple or Google respectively. CrewLine only receives a confirmation that a purchase occurred and the purchased item identifier. No payment card data, billing addresses, or other financial details are accessible to or stored by CrewLine.
| Processing Activity | Legal Basis |
|---|---|
| Storing credentials locally to provide core app functionality | Performance of a contract / legitimate interest (Art. 6(1)(b),(f) GDPR) |
| Transmitting credentials to airline portals on your behalf | Performance of a contract / your explicit instruction (Art. 6(1)(b) GDPR) |
| Calendar read/write access | Your explicit consent (Art. 6(1)(a) GDPR) |
| Firebase Crashlytics & Analytics | Your explicit consent (Art. 6(1)(a) GDPR); can be withdrawn at any time |
| Uploading roster PDF to DienstPlanKonverter | Your explicit action / consent (Art. 6(1)(a) GDPR) |
| Submitting a bug report | Your explicit action / consent (Art. 6(1)(a) GDPR) |
If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:
To exercise any of these rights, please contact: [email protected]
Since most personal data in CrewLine is stored exclusively on your device, you can also exercise many of these rights directly by clearing the app data or deleting the app.
You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority competent for Germany is:
Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
Graurheindorfer Str. 153, 53117 Bonn
www.bfdi.bund.de
CrewLine is intended for use by adult airline crew members. The app is not directed at children under the age of 16. We do not knowingly collect personal data from children.
Login credentials (usernames, passwords, session tokens) are stored using the platform's secure credential storage (iOS Keychain / Android Keystore) with hardware-backed encryption where available. Sensitive data is never stored in plain text on the device.
All communication with external services uses HTTPS. Some legacy airline portals may only support older TLS configurations or HTTP on internal networks; in those cases the app applies the minimum exceptions required for connectivity to that specific airline's internal system.
We may update this privacy policy from time to time. The current version is always available at homgsa.de/crewline/privacy_policy.html. Significant changes will be communicated via an in-app notification.