GalleyPrivacy policy
Effective 22 October 2026. Operator: Galley (the "app"), currently operated by its founder as an individual, based in Dubai, United Arab Emirates. This policy will be updated to name the operating company when it is incorporated. Contact: privacy@crewgalley.app.
This is written to be read. Where it is short it is because the app holds little.
What we collect and why
| Data | Why | Kept |
|---|---|---|
| Email and password (hashed) | Your account | Until you delete the account |
| Display name, up to five photos, airline, role (pilot or cabin crew), base city, interests, prompt answers, an optional "about" | Your profile, shown only to verified members who overlap your stays | Until you change or delete it |
| Optional gender | Only to decide who can see women-only events; never shown | Until you change or delete it |
| Stays: city plus arrival and departure dates; home base city | To show you who is in the same city on the same dates | Deleted automatically the day after departure |
| "Up for today" chips and a short note | Shown on the board that day | Deleted at midnight local time |
| Verification proof: company-email code, roster screenshot, or crew ID photo with the number covered plus a selfie | To confirm you are current airline crew | Images deleted when the decision is made; the decision, date and reason are kept. For company email only a fingerprint (hash) of the address is kept |
| Messages and meetup chats | Delivering them | DMs until either side deletes the thread; meetup chats 24 hours after the meetup; unanswered requests 30 days |
| Meetups, tips, votes | The features themselves | Meetups 7 days after they happen; tips until you delete them |
| Reports and blocks | Safety and moderation | Kept while the account exists |
| Invite code and who invited you | Inviter accountability | Until you delete the account |
| Analytics events (which screens and features were used, keyed to your account id) | Measuring whether the app works | 12 months |
We do not collect: hotel names or room numbers, flight numbers or duty times, staff or crew ID numbers, government IDs, passports, licences, nationality, religion, sexual orientation, health, political views, or precise location. There is no field for any of these and we ask you not to type them into free-text fields.
Who can see what
Your profile and stays are visible only to verified members who hold a stay or home base in the same city with overlapping dates, and only while that overlap lasts. There is no search, no directory and no public profile. Admins (a two-person team) can see profiles and verification proofs in order to verify accounts and handle reports. Nobody else, inside or outside the app, has access.
Where data lives
Databases and files: Supabase, hosted in the European Union. Analytics: PostHog, hosted in the European Union. Email delivery: Resend. App distribution and over-the-air updates: Expo, Apple and Google. Each is a processor acting on our instructions under a data-processing agreement.
Legal bases (GDPR)
Performance of the service you asked for (account, profile, board, messaging); our legitimate interest in keeping the service crew-only and safe (verification, reports, blocks, analytics); your consent for optional fields (photos, gender, about, prompts), which you can withdraw by removing them.
Your rights
Access, correction, deletion, portability, restriction and objection, under the GDPR, the UAE Personal Data Protection Law, and comparable laws where you live. Deletion is in the app: You → Settings → Delete my account, and removes everything listed above except records we must keep to handle an open report or legal obligation, which are then deleted when that ends. For a copy of your data or any other request, email privacy@crewgalley.app; we answer within 30 days. EU and UK residents may also complain to their data-protection authority.
Age
Galley is for people aged 18 and over. Verification as current airline crew implies this; we do not collect a date of birth.
Security
Row-level access rules are enforced in the database, not in the app, so a bug in the app cannot expose another member's data. Proof images and photos are in private storage with short-lived links. All traffic is encrypted. If a breach puts you at risk we will tell you and, where required, the relevant authority within 72 hours.
Changes
We will post changes here and, for anything material, ask you to accept the new version in the app before continuing.