Balloon Crew Call Privacy Policy
Effective October 3, 2026
Balloon Crew Call is owned and operated by Sagebrush Building Automation LLC.
This policy explains how Crew Call handles information in the iPhone app and the optional hosted recruiting service.
Information handled on your iPhone
With your permission, Crew Call can read the contacts you select so you can organize a local crew directory and prepare text messages. You may instead create local directory entries without granting Contacts access. Local crew groups, selected contact identifiers, manually entered directory records, message drafts, and app settings are stored on your iPhone. Crew Call does not upload your personal Apple Contacts directory to its hosted service.
Text messages are presented in Apple's Messages interface for your review and confirmation. Crew Call cannot send messages silently or in the background. Apple may process Contacts, Messages, subscription, device, and diagnostic information under Apple's own privacy terms.
Organizer account information
When an organizer creates an account, Crew Call stores the organization or group name and owner contact email with that account to support account setup and administration. Owners can update those details in Account Details. The contact email is not verified and does not serve as an account password or proof of ownership. Changing it does not change Apple billing details. The app stores its private account credential in the device Keychain; the service stores a hash of that credential.
Hosted recruiting information
The optional recruiting form collects information an applicant chooses to provide, including name, mobile phone number, home area, crew interests, availability, experience, and notes. An applicant may also provide an emergency contact and allergy or safety information. Adult applicants must accept the crew waiver and type their legal name as an electronic signature before submitting.
How information is used
The crew organizer uses hosted information only to review recruiting requests, organize balloon crews, maintain authorized crew records, respond to safety needs, document consent and waivers, and send crew-related messages. Hosted applicant information is not automatically added to the organizer's personal Apple Contacts.
Crew Call does not sell personal information, display third-party advertising, or track people across other companies' apps or websites.
Emergency information
Emergency-contact and allergy or safety information is optional. If provided, it is visible only to the subscription owner and authorized account administrators for that Crew Call account and may be used only if an emergency occurs while you are participating in crew operations. It is not included in text messages, group lists, or marketing.
The signed waiver record includes the exact waiver text, its version and text fingerprint, the signer's legal name, and the UTC date and time of acceptance. It is retained with the private application and member record so authorized account administrators can verify waiver status and reproduce what was signed.
Account administrators receive separate, revocable access. Their access is limited to the same subscription and never provides access to another pilot's or event's account.
Subscriptions and payments
Apple processes Crew Call subscriptions and payments. Crew Call receives Apple transaction identifiers, product and subscription status, expiration information, and an account-linking identifier so it can verify a purchase and apply it to the correct hosted account. Crew Call does not receive or store payment-card or bank-account details.
Service providers
Cloudflare provides the hosted website, computing, security, and database infrastructure used by the recruiting service. Apple provides App Store subscriptions and the iPhone system services described above. These providers may process information only as needed to provide their services and under their own legal terms. Crew Call requires service providers acting on its behalf to protect information consistently with this policy and applicable law.
Text messages
Checking the separate, optional SMS consent box gives Balloon Crew Call and the identified crew organizer permission to send recurring operational text messages. A person may submit a crew request without consenting to SMS. Message frequency varies according to crew operations and may increase around scheduled flights or events. Message and data rates may apply. Reply STOP to stop messages, START to resume, or HELP for help.
Mobile phone numbers, text-message consent records, and opt-in information are not sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except aggregators and providers of the text-message service. Service providers may process messages only as needed to deliver and support Balloon Crew Call.
Crew call responses
When an organizer requests attendance responses, Crew Call stores the name you enter and whether you choose Available, Maybe, or Unavailable. You can reopen the same private response link to update your selection.
Response notifications
If the subscription owner or an authorized account administrator enables notifications, Crew Call stores an app-specific Apple Push Notification device token with that person's Crew Call account. The token is used only to deliver a generic new-response alert and badge to that device. Reply names, availability choices, phone numbers, and message text are not included in the lock-screen notification. Revoking an administrator disables notification delivery to that administrator's registered devices.
Retention and deletion
Local iPhone information remains until you delete it in Crew Call, clear the app's configuration, or remove the app and its data from the device. Hosted recruiting information is retained while the organizer's account is active and while reasonably needed for crew operations, safety, legal compliance, fraud prevention, or dispute resolution.
An applicant or crew member may contact the organizer who shared the invitation to request access, correction, removal from a group, withdrawal of messaging consent, or deletion, including deletion of emergency information. Requests may also be sent to aura1311n@gmail.com. Verified deletion requests are processed from the active service within 30 days unless a record must be retained for a legal, safety, accounting, fraud-prevention, or dispute-resolution obligation. Residual copies may remain temporarily in protected service-provider backups until those backups expire under the provider's normal retention schedule.
Signed waiver records may be retained for the period reasonably necessary to document the agreement and address legal or insurance obligations, even after other optional profile information is deleted. When retention is no longer required, the record is deleted or de-identified.
Account separation
Applications are assigned only to the organizer account and invitation that received them. One organizer cannot browse another organizer’s roster or applications.
Security
Crew Call uses encrypted network connections, account-scoped access controls, separate revocable administrator credentials, and protected server credentials. No system can guarantee absolute security, but access is limited to the organizer account and authorized administrators responsible for the relevant crew records.
Children
The hosted recruiting form and electronic waiver are intended for adults age 18 or older. Crew Call does not knowingly invite children to submit hosted recruiting information.
Contact
For privacy questions or requests, contact the organizer who shared the invitation or email aura1311n@gmail.com.
SMS consent verification
View the public SMS opt-in and consent proof used for carrier review.