Owner Account
Station Pilot is the digital notebook for gas station owners. Account-enabled versions use an Owner Account with email/password sign-in, email verification, and password recovery. Supabase Auth processes your account email, credentials, account identifier, and authentication/session information. Transactional verification and recovery emails are delivered through Resend.
Your notebook is linked to its verified owner. Another owner account cannot open that protected local notebook. Keep your credentials and email links private. Station Pilot support will not ask you to send a password or verification/reset link.
Local-first Digital Notebook and account backup
Notebook records save on your iPhone first so you can continue working offline. When signed in and connected, automatic account backup sends a recoverable notebook copy through Station Pilot’s Supabase-backed services. A completed backup can be restored on another iPhone using the same Owner Account. Changes that have not completed backup remain local until backup succeeds.
Version 1.1 Build 50 adds improved backup and synchronization between iPhones signed into the same Station Pilot account. It became available on the App Store on October 7, 2026. Notebook records and revision information are processed by the service to synchronize compatible changes and flag conflicts for review. Anyone signed into the same account can access that notebook. Separate team roles and invitations are not provided. Local-first does not mean device-only: notebook contents are processed and stored by the account backup service.
Information processed
Account services process your email, account/user identifier, session information, and an installation identifier used for backup and service operation. Depending on what you enter, notebook backups contain owner information, employee and payee names, station names, addresses and settings, sales and payment records, checks, fuel and delivery information, tank reconciliation, supplier activity, employee payment and payroll records, expenses, Other Income, optional lottery records, and saved history.
Backups also include user-entered notes, including Private Notes, saved categories, and workflow/audit history. Excluding Private Notes from ordinary Search does not exclude them from recovery backups. Do not enter information you do not want included in a notebook recovery copy.
How information is used and service providers
We use account and notebook information to provide sign-in, owner protection, notebook backup, recovery and synchronization where available, support, and service security. Supabase provides authentication, backend/database services, and backup storage. Resend processes recipient and message information to deliver transactional account emails. These services may also process operational and security information needed to provide their services.
Apple provides iOS, TestFlight/App Store distribution, and optional iCloud or Files destinations and sharing services. Our public website is hosted by Vercel. Copies sent to a different app, email service, or storage provider are also subject to that destination’s practices.
We do not sell personal information to advertisers or use notebook contents for advertising, resale, competitive benchmarking, or training shared artificial intelligence models. We do not use notebook financial values or note contents as product analytics. Information may be disclosed when needed to provide the service, respond to an authorized support request, protect the service, or meet legal obligations.
Usage analytics and diagnostics
The app has an optional usage-analytics setting, enabled by default. It sends allowlisted action counters, app/version information, and event metadata to Supabase. These events can be linked to your account and a random installation identifier; they are not described as anonymous. This analytics path does not send entered dollar amounts, gallons, employee names, report contents, note text, or Search queries.
You can turn off future usage-analytics sending in Data & Privacy. Turning analytics off clears pending activity but does not disable the separate notebook backup service or its installation identifier. Provider operational/security logs and information you choose to share through Apple/TestFlight or support are separate from these usage counters.
Website information
Our website uses Vercel hosting and limited website analytics. Technical information may include visited pages, browser/device type, referring page, and approximate region. Fixed interaction labels indicate actions such as selecting an App Store, workflow, pricing, or support link; they do not include station values, email addresses, support-message contents, or other user-entered text.
Before website analytics events are sent, URL credentials, query parameters, and page fragments are removed. Only named public page paths are retained; other paths are grouped as /other. App Store download buttons and legacy beta links use fixed-label links that redirect to Apple, allowing aggregate click-request counts from hosting logs without collecting notebook contents. The marketing website has no customer login portal and does not accept notebook uploads. This is separate from the iPhone app’s account backup services.
PDF sharing, manual files, and optional iCloud copies
You choose whether and where to export PDFs, share records, or save manual or optional iCloud recovery files. Full recovery files can contain the notebook’s notes and private business information. Protect these files and choose recipients carefully. Copies outside Station Pilot may remain with recipients, in Files/iCloud, or in other device backups after an account or local notebook is deleted.
Support
If you email support, we receive your message, contact details, and any screenshots or attachments you choose to send. We use that information to respond, protect the service, or meet legal obligations. Avoid including unnecessary business information. Never send passwords, session tokens, or verification/reset links.
Account deletion and retention
From My Stations, tap the account icon → Account & Settings → Account Management → Delete Account & All Data. The app requires deliberate DELETE confirmation and password verification. Cancel does not delete anything. Sign Out is a separate action and does not delete the account or notebook.
Confirmed deletion removes the account and account notebook backup/history through the deletion flow, and clears the notebook, pending backup queue, ownership marker, and saved session on that iPhone. It cannot remove independent screenshots, exported PDFs/files, shared copies, or offline copies on other devices while those devices remain offline.
Account deletion is not a promise that every service-provider log or infrastructure backup is immediately erased. Limited deletion receipts, operational/security records, and information needed for legal obligations may remain. Support information and service records are retained as needed for their stated purposes. Contact support with retention or deletion questions; no fixed provider retention period is promised here.
Security
Station Pilot uses account authentication, owner checks, and access controls to help protect notebook information. App lock and background privacy protection use the existing iOS/app security controls where applicable. Account backups are processed by service infrastructure; we do not claim end-to-end encryption or zero server access. No electronic storage or transmission method can be guaranteed completely secure.
Changes to this policy
We may update this policy as Station Pilot changes. The date above will be updated when material revisions are published.
Contact
Privacy questions can be sent to support@stationpilotapp.com.