Privacy Policy

Last updated: 20 March 2026

Lifyt Ltd ("Lifyt", "we", "us", "our") operates the Lifyt FuelTicket mobile application and associated web services. This Privacy Policy explains what data we collect, why we collect it, and how we protect it.

In short: we collect only what's needed to deliver fuel tickets. We never sell your data. Refuellers never see pricing data. All data is encrypted at rest and in transit.

1. Data We Collect

Category	Data	Purpose
Account	Name, email address, role	Authentication & access control
Fuel Delivery	Aircraft registration, fuel quantity, meter readings, airport code, timestamps	Core ticket creation
Signature	Pilot name, pilot ID, digital signature image	Delivery confirmation & non-repudiation
Device	Device ID, device name, public key	Device identity verification & sync
Location	GPS coordinates (when permitted)	Audit trail & delivery verification
Payment	Payment method, last 4 digits of card (if applicable)	Payment recording — we never store full card numbers

2. How We Use Your Data

Service delivery — Creating, storing, syncing, and generating PDFs of fuel delivery tickets.
Authentication — Verifying your identity and managing device access.
Audit & compliance — Maintaining tamper-proof records with timestamps, user IDs, and GPS coordinates for regulatory purposes.
Support — Responding to queries and troubleshooting sync or device issues.

We do not use your data for advertising, profiling, or sale to third parties.

3. Price Data Isolation

Fuel pricing is sensitive commercial information. Lifyt enforces strict role-based access:

Refuellers — Never see fuel prices. This is enforced at the code level, not just the UI. The refueller's data types physically cannot contain price fields.
Pilots — See pricing only during the review and signature step.
Admins — Full access to pricing and reporting within their tenant.

4. Data Storage & Encryption

On-device — All local data is stored in SQLCipher-encrypted SQLite (AES-256). The encryption key is derived from the device hardware ID and user credentials.
In transit — All communication uses TLS 1.2+ with certificate pinning. Sync requests are additionally signed with the device's Ed25519 private key.
Server-side — Data is stored in encrypted PostgreSQL databases. Backups are encrypted at rest.

5. Data Masking

Sensitive fields are masked based on the viewer's role:

Field	Refueller sees	Admin sees
Pilot name	J. S****	John Smith
Pilot ID	****XX	AB1234XX
Signature	"Captured" ✓	Full image
Fuel price	Never shown	Full price
Card digits	****	Last 4 digits

6. Data Retention

Fuel delivery records are retained for the duration required by applicable aviation fuel supply regulations and your organisation's retention policy (configurable by tenant administrators). Signed tickets are immutable — they cannot be modified after signing. Amendments create new versioned records linked to the original.

7. Multi-Tenancy & Data Isolation

Every record is scoped to a tenant (your fuel company). Tenant data is isolated at the database level — queries always include tenant scoping. Users from one tenant cannot access another tenant's data. Each device is registered to a single tenant.

8. Third-Party Services

We use the following third-party services:

Cloud hosting — For API servers and database hosting (encrypted at rest).
OCR processing — When scanning paper tickets, images may be processed by an OCR provider to extract text. No images are retained by the OCR provider after processing.

We do not share your data with any other third parties.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data — request deletion here
Export your data in a machine-readable format
Withdraw consent for optional processing (e.g., location tracking)

To exercise any of these rights, contact us at privacy@lifyt.io.

10. Account & Data Deletion

You can request deletion of your account and all associated data at any time. Upon receiving your request, we will permanently delete your account, personal information, and any fuel delivery records not subject to regulatory retention requirements. Deletion is typically completed within 30 days.

→ Request Account & Data Deletion

11. Permissions We Request

Permission	Why	Optional?
Camera	Scanning paper fuel tickets for OCR	Yes — only needed for paper scanning
Location	GPS coordinates in audit entries	Yes — app works without it
Face ID / Touch ID	Quick biometric sign-in	Yes — PIN/password fallback available
Internet	Syncing tickets to the server	No — but app works fully offline

12. Children's Privacy

Lifyt is a business application for aviation fuel professionals. We do not knowingly collect data from children under 16. If you believe a child has provided data to us, contact privacy@lifyt.io.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the app or email. The "Last updated" date at the top reflects the most recent revision.

14. Contact Us

For any questions about this Privacy Policy or your data:

Email: privacy@lifyt.io
General: hello@lifyt.io