Privacy policy

We’re glad you’re using SkyJoin. Here we explain in plain language which data we process, why, and what rights you have. SkyJoin includes the website skyjoin.de, the web app at app.skyjoin.de and the apps for Android and iOS.

1. Controller

PS Professional Solutions
Owner: Pankaj Mondjal
Lindenhorsterstr. 185
44339 Dortmund
Germany

Phone: +49 152 0759 5260
Email: info@skyjoin.de

2. In short

  • We only process what SkyJoin needs: account, profile, trips, requests and messages.
  • No ads, no tracking, no analytics tools, no sharing or selling of your data.
  • All data is stored on a server in Germany (IONOS).
  • You can delete your account completely in the app at any time.

3. Data we process

a) Account

Email address, password (only as a secure hash – we don’t know your password), the time you confirmed you are of age and accepted the terms of use, the time your email was confirmed, the time of your last use and your preferred language. To keep you logged in we store a random session key (on our server only as a hash, on your device in the app storage or the browser’s local storage).

b) Profile (voluntary information)

Display name, age, gender (“prefer not to say” possible), home town, “about me” text, Instagram name, vibe profile and profile photo. Other logged-in members can see this information. Nobody but you sees your email address.

c) Trips, requests and messages

Trips you start (title, start, destination, date, flight number, description, tags, spots), your crew requests including the message, your crew memberships and messages in crew and private chats.

d) Safety

Blocks and reports. When you report something, we store the reason, your description and an excerpt of the reported content so we can review it.

e) Technical data

When you access the website, web app or interface, our server processes technically necessary data (IP address, time, requested address, browser identifier). We use IP addresses only briefly in memory to slow down abuse such as mass login attempts. We do not keep access logs with IP addresses.

4. Purposes and legal bases

  • Providing SkyJoin (account, profile, trips, requests, chat, email codes): performance of contract, Art. 6(1)(b) GDPR.
  • Security and abuse prevention (limiting login attempts, handling reports, suspensions): legitimate interest in a safe platform, Art. 6(1)(f) GDPR.
  • Email notifications about crew requests: performance of contract; you can turn them off in the settings at any time.
  • Voluntary profile information, e.g. photo or gender: you decide whether to provide it (Art. 6(1)(a) and (b) GDPR) and can change or delete it at any time.

5. Recipients and processors

Our server and email delivery are operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, in data centres in Germany. We have a data processing agreement with IONOS pursuant to Art. 28 GDPR. Data is not transferred to countries outside the EU.

If you download the apps from the Google Play Store or Apple App Store, the privacy policies of Google or Apple apply to the download. We only receive anonymous statistics from them (e.g. number of installations).

6. Cookies, tracking and advertising

We use no tracking or advertising cookies and no analytics services. The web app only stores your login key and language choice in your browser’s local storage (technically necessary, § 25(2) TDDDG). Fonts are loaded from our own server.

7. App permissions

The app only uses the camera and photo library when you take or choose a profile photo yourself. The photo is resized before upload. We do not access your location or contacts.

8. Storage period and deletion

  • We store your data as long as your account exists.
  • When you delete your account, your profile, photo, trips, requests, memberships and messages are deleted immediately. They disappear automatically from our daily backups on the server within 14 days.
  • Email codes expire after 15 minutes, sessions after 90 days without use.
  • We keep reports as long as necessary for clarification, for no more than 12 months.
  • Unconfirmed accounts may be deleted after 30 days.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future. Simply write to info@skyjoin.de.

You can also lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

10. Minimum age

SkyJoin is intended exclusively for people aged 18 and over. We delete accounts of minors as soon as we become aware of them.

11. Security

All connections are encrypted (HTTPS). We store passwords, session keys and email codes only as hashes. Access to the server is restricted to the operator.

12. Changes

As SkyJoin evolves, we will update this policy. You will always find the current version here.

This is a translation for your convenience. In case of any discrepancy, the German version is legally binding.

Last updated: October 2026