Last updated: 12 July 2026
This Privacy Policy explains how NOT FINAL GAMES (“we”, “us”, “our”) handles personal data in connection with the EU Drone License Wallet mobile app (the “App”). We are the data controller for the limited processing described below.
Contact: luna@not-final.com | PO Box 110, 8430 AC Oosterwolde
Our approach in short
The App is built to keep your data on your own device. Your drone license is stored locally and encrypted on your phone. You do not need an account, and we do not ask for your name, email, or any sign-up details to use the App. Data leaves your device only in the two specific situations described in “When data leaves your device” below.
What data the App handles
Your drone license details. When you import your EASA remote pilot certificate, the App stores the information you save — such as your name, certificate/registration number, license categories (e.g. A1/A3, A2, STS), issuing authority, issue and expiry dates, the certificate file, and the verification URL contained in its QR code. This is held only in encrypted storage on your device.
Camera input. When you scan a QR code, the camera image is processed on your device to read the code. It is not stored or transmitted by us.
NFC input. When you read an NFC card, the App reads a URL from the tag. It is not stored by us.
A scanned license’s verification URL. When you check another person’s license, the App uses the URL from its QR code or NFC tag to contact the issuing authority’s verification system (see below).
Device and diagnostic data. We do not operate our own analytics or advertising tracking. Apple and Google may collect standard technical data (such as crash and installation statistics) under their own policies when you download or run the App.
Data we do NOT collect
- No account, email, or password.
- No advertising identifiers, and no third-party advertising or tracking SDKs.
- No background location tracking.
- No drone license info.
- We do not sell or rent personal data, and we do not build profiles about you.
When data leaves your device
1. Adding your license to Apple Wallet. To create your Wallet pass, the App sends the specific fields shown on the pass (such as your name, categories, expiry date, and verification URL) to our pass-signing service, hosted by Vercel. That service uses these fields solely to generate and cryptographically sign your pass and does not retain them after the pass is created. Once added, the pass is stored in Apple Wallet and governed by Apple’s privacy policy.
2. Checking another license. When you scan someone else’s license, the App contacts the relevant national aviation authority’s verification system using the URL embedded in that license, in order to display whether it is valid. That request is handled by the authority and is subject to its own privacy practices. We do not store the scanned licenses you check.
Purposes and legal bases (GDPR)
- Storing and displaying your own license, and generating your Wallet pass — to provide the service you have requested. Legal basis: performance of a contract / your request (Art. 6(1)(b) GDPR), and your consent where applicable.
- Camera and NFC access — to scan and read licenses. Legal basis: your consent, given through your device’s permission prompts, which you can withdraw at any time in your device settings.
- Verification requests to national authorities — to let you confirm a license’s validity at your request. Legal basis: your request and our legitimate interest in providing the verification feature (Art. 6(1)(f) GDPR).
Sharing with third parties
We share data only as needed to provide the App’s features: with Apple (App Store and Apple Wallet) and Google (Google Play, and Google Wallet where offered) under their policies; with the national aviation authority whose verification system you query; and with our hosting provider Vercel for the pass-signing service. We do not share personal data with advertisers or data brokers.
When you add your license to Google Wallet, the pass content is transmitted to Google and stored in your Google account under Google’s privacy policy.
Expo (EAS Update): at app launch, the app contacts Expo’s update service to check for over-the-air updates. An anonymous installation identifier and app version are transmitted; no personal data is included. Expo processes this solely to deliver updates.
International transfers
Your license data stays on your device. Where the limited server-side processing above involves transferring data outside the European Economic Area, we rely on an appropriate safeguard such as the European Commission’s Standard Contractual Clauses.
Data retention
Your license data remains on your device until you delete it in the App or uninstall the App. Our pass-signing service does not retain pass data after signing; any operational logs are kept for 90 days and do not contain your license details.
Security
License data is stored in your device’s encrypted secure storage. Transfers to our pass-signing service use encrypted connections (HTTPS/TLS). No method of storage or transmission is completely secure, but we take reasonable measures to protect your data.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. Because your license data is stored on your device, you can exercise most of these rights directly by editing or deleting the data in the App. For any data we process on our servers, contact us at luna@not-final.com. You also have the right to lodge a complaint with your data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.
Children
The App is intended for certified or registered drone operators and is not directed to children under 16. We do not knowingly collect personal data from children under 16.
Permissions the App requests
- Camera — to scan license QR codes.
- NFC — to read license cards that contain a verification URL.
- Files — to import your certificate when you add your license.
You can review or revoke these permissions at any time in your device settings.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and change the “Last updated” date above. Material changes will be highlighted in the App or on our website where appropriate.
Contact
Questions about this policy or your data:
Not Final Games
PO Box 110, 8430 AC Oosterwolde
luna@not-final.com
+31853696103