Privacy Policy – BXI Mobile

Last updated: 7 November 2026

This notice describes how personal data is processed through the BXI Mobile mobile application (the "App"), distributed by Future Multimedia S.r.l. ("we", "Provider") as part of the BXI platform.

1. Nature of the App and roles

BXI Mobile is a professional tool reserved for flight crew (pilots and cabin crew) of airlines that are customers of the BXI platform. The App is multi-tenant: each airline ("Organization") has its own environment reachable at https://{organization}.belevensoftware.com.

For operational and duty-related data of the personnel, the Data Controller is the airline (Organization) that employs the user; Future Multimedia S.r.l. acts as Data Processor on behalf of the Organization. For any request concerning their data, users may contact their Organization or the contacts listed in section 9.

2. Personal data processed

CategoryExamplesPurpose
Credentials and identityOrganization identifier (tenant), username/email, passwordAuthentication and secure access
Session tokensAuthentication tokens (JWT) stored in encrypted storage on the deviceMaintaining the session and automatic refresh
Notification identifiersPush notification device token/identifierSending alerts about flights, duties and changes
CalendarWriting events (duties/flights) to the device calendarExporting duties, only upon the user's action. The App does not read the calendar.
Operational and duty dataRoster and duties, flight details, FTL limitations, passenger lists (including travel documents) and crew lists, certificates and expiries, logbook counters, cabin reports, flight feedback, fatigue self-assessments, requests and surveysProviding operational features on behalf of the Organization
Technical and log dataDevice type, operating system, App version, diagnostic and error logs, performance dataSecurity, operation and troubleshooting
Error contextCrew identifier, username, email, first name, surname, rank and Organization, attached to error reports and performance data from released versions of the AppFinding and fixing errors
Weather requestsRequested airport codes and the device's IP addressObtaining METAR and TAF data
Data stored on the deviceCopy of the duties for months opened, flight checklist status and App preferencesConsultation when the connection is lost and operation of the App

3. Purposes and legal bases

4. Disclosure and recipients

Data is transmitted to the Organization's backend (https://{organization}.belevensoftware.com) and processed by the Provider as Data Processor. For push notifications the App relies on OneSignal (a third-party service); a device identifier necessary to deliver notifications may be transmitted to that provider. For error reporting and performance monitoring the App relies on Sentry (Functional Software, Inc.), which receives the data listed under "Error context". METAR and TAF data is requested directly by the device from the public aviationweather.gov service of the United States National Weather Service, which receives the requested airport codes and the device's IP address. We do not sell personal data and do not use it for advertising.

5. Transfers outside the EU

Where a service provider (e.g. push notifications or error reporting) processes data outside the European Economic Area, the transfer is based on appropriate safeguards under the GDPR (e.g. Standard Contractual Clauses). Weather requests are sent directly by the device to a public United States service, only when the user opens weather data.

6. Retention

Operational data is retained for as long as necessary for the purposes described above and in accordance with the Organization's instructions and legal obligations. Session tokens remain on the device until logout or uninstallation of the App. The copy of the duties may stay on the device after logout, until the App is uninstalled or its data is cleared. Checklist status and preferences remain until uninstallation.

7. Security

Access is performed through credentials and encrypted tokens stored in the device's secure storage. Communications with the server take place over an encrypted connection (HTTPS).

8. Your rights

Users may exercise the rights of access, rectification, erasure, restriction, objection and portability (Articles 15–22 GDPR) by contacting their Organization or the Provider at the details below. Users may also lodge a complaint with the competent Data Protection Authority.

9. Contact

Future Multimedia S.r.l.
Via Leonardo da Vinci, 4 – 95014 Giarre (CT), Italy
Email: [email protected]

10. Children

The App is intended exclusively for authorized adult professional personnel and is not directed to children. Use of the App is governed by the Terms of Service.

11. Changes

This notice may be updated. The current version is the one published at this address, together with the date of last update.