CXRoster Privacy Policy

Last updated: September 18, 2026

Summary

CXRoster is provided by bulletproofMedia. It processes the roster files you import on your device to display duties, update your chosen calendars, and support exports you request. We do not operate a CXRoster account system, upload your roster or calendar contents to our servers, sell personal information, or use advertising trackers in the app.

Information processed by the app

• Imported roster files can contain flight numbers, routes, dates, duty times, locations, notes, and other information supplied by the roster provider. The app reads this information and may create a temporary local copy of the file.
• With your permission, the app reads calendar information and creates, updates, or removes roster events in the calendars you select.
• Settings, onboarding state, calendar and event identifiers, flight metadata, import history, and import allowance counters are stored locally to support app functionality.
• Flight identifiers and related mapping information may be stored in a shared on-device app container to coordinate compatible bulletproofMedia apps, including FlightCapture.

Calendars, backups, and exports

Events saved to an iCloud, Exchange, Google, or other synced calendar may be uploaded by that calendar service and become visible on other devices or to people with whom you share the calendar. Your device backups may also include local app data. These services operate according to your settings and their providers' privacy policies.

When you choose an export or sharing feature, the app passes the relevant flight, duty, or airport information to the destination you select, such as LogTen, CrewAlert, or AeroWeather. The receiving app or service handles that information under its own privacy policy. Check the destination before sharing operational or personal information.

External websites and company documents

Links may open external services, including Cathay or Microsoft SharePoint pages, flight information websites, maps, and our support website. The destination receives normal web-request information, such as your IP address, and may use cookies or request sign-in. Its own privacy policy applies.

Cathay reference PDFs are not included in the app download. Where a document link requires authentication, access is controlled by the document provider. CXRoster does not collect your Cathay or Microsoft password. Importing a roster file does not authenticate your identity or establish your entitlement to company documents.

Purchases

Apple processes in-app purchases through StoreKit and the App Store. CXRoster uses verified purchase information to enable Pro features and restore purchases. We do not receive your payment card details. Apple may provide transaction and sales information through its developer services under Apple's privacy policy.

Diagnostics

The app can generate device logs containing import details, event information, file paths, and error messages. It does not automatically send these logs to a bulletproofMedia server. Apple may make crash reports, diagnostics, and usage information available to developers through its services, subject to the applicable device and TestFlight settings and terms. Review and redact diagnostic material before sending it to support.

Support emails

If you email support, we receive your email address, message, and any attachments you include. We use them to respond to your request and investigate reported problems. They are processed by the email services used to deliver and store our correspondence, and retained only as needed for support and any applicable legal obligations. Redact roster files, names, staff numbers, company identifiers, and operational details before sending support material.

Your choices and deleting information

• You can revoke calendar permission in iOS Settings. Revoking permission does not delete events already saved.
• Deleting CXRoster removes its private local app data. Offloading the app preserves its data. Backups and data shared with another installed app may remain.
• Calendar events, original roster files in Files or email, and information exported to other apps remain until you delete them from those destinations. Delete only the roster events or dedicated calendars you intend to remove.
• Manage synced calendars and backups through the relevant provider. Shared app-container data may remain while another app using that container is installed.
• Contact us to request access to or deletion of support correspondence we hold about you. We cannot remotely access or delete your on-device roster data.

Children

This app is not directed to children under 13.

Changes to this policy

We may update this policy when the app or our practices change. The date above identifies the latest revision.

Contact

Privacy questions can be sent to [email protected].