Sirena LogbookPrivacy Policy
Sirena Logbook for iPhone and iPad. Effective 29 October 2026 (version 1.1). Replaces the version of 10 October 2026.
1. Who we are
Sirena Logbook is published by Anton Dimitrov, a sole trader established in Varna, Bulgaria ("we", "us"), who also runs Sirena.Club. For any privacy question or request, write to [email protected]. The EU General Data Protection Regulation (GDPR) applies.
2. The short version
Sirena Logbook has no account of its own. Your documents, scans, document details, contracts, hours of rest and boat records are stored only on your iPhone or iPad. We never receive them, we cannot read them, and we cannot recover them for you.
The one exception is optional: if you link Sirena.Club, the app sends the club the App Store transaction ID of your Logbook Pro purchase and keeps asking the club what your membership includes, and the club keeps a small record of the link. Section 6a describes exactly what is sent and kept.
3. What the app keeps on your iPhone or iPad
| Data | Why | Where |
|---|---|---|
| Scanned pages of your documents | So you can see and show your documents | Your iPhone or iPad, in files iOS keeps encrypted and unreadable while the device is locked |
| Document details: type, name, number, issuer, issue and expiry dates, your notes | To list your documents and remind you before they expire | Your iPhone or iPad |
| Contracts: vessel, IMO number, flag, rank, dates, day split | To count your sea service and make the PDF | Your iPhone or iPad |
| Your boat: name, registration, MMSI, engine hours, safety gear dates, maintenance and service history | Reminders, maintenance due dates and the service history PDF | Your iPhone or iPad |
| Hours of rest: which half hours of each day you worked or rested, and your watch pattern | To check the rest rules and make the monthly record PDF | Your iPhone or iPad |
| Settings, such as the Face ID lock and whether you work on ships, yachts or both | To remember your choices | Your iPhone or iPad |
| Only if you link Sirena.Club: a random device token, and the club's last answer (your first name, your tier and what your membership includes) with the time it was given | To ask the club what your membership includes, and to keep Logbook Pro open for up to 45 days without signal | The token in this device's keychain; the last answer in the app's settings |
Text on your documents is read by Apple's on-device text recognition. The images are not sent to us or to anyone else for this.
Like other app data, this data is part of your device backup if you back up your iPhone or iPad to iCloud or to a computer, so a new device restored from that backup keeps it. The Sirena.Club device token is the exception: it stays on this device only and is not restored, so a restored device has to be linked again. Those backups belong to you and are handled by Apple or your computer, not by us.
3a. Apple Intelligence, on your iPhone or iPad
On an iPhone or iPad with Apple Intelligence (iOS or iPadOS 26 or later), two features use Apple's on-device language model: Ask Logbook, which answers a question from a short summary of your records made on the device, and the reading of a scan, which turns its recognised text into the document's fields. Both run entirely on your iPhone or iPad. Nothing is sent to us, to Apple or to anyone else; the app does not use Apple's Private Cloud Compute. Without Apple Intelligence these features are simply not there.
4. Permissions
Camera: only to scan documents when you tap Scan. Face ID: to unlock the app; iOS checks your face and only tells the app yes or no. Notifications: to remind you about expiry dates; reminders are scheduled on your iPhone or iPad.
5. Purchases
Logbook Pro is sold by Apple through the App Store. Apple is the merchant and handles payment, taxes and refunds under its own privacy policy. As long as you do not link Sirena.Club, the app only asks Apple, through the App Store on your device, whether you have an active subscription, and nothing about your purchase reaches us. If you link Sirena.Club, the app sends the club the App Store original transaction ID of your Logbook Pro purchase, and the club asks Apple about that transaction (section 6a). We never receive your payment details.
6. Sea days from Sirena Seafarer (optional)
If you also use Sirena Seafarer and turn on "Share sea days with Sirena Logbook" there, Seafarer leaves a short summary for each day on the same device: hours under way, at anchor and moored, miles, the rounded start and end position, and the time Seafarer counted as ashore and left out of those hours. Sirena Logbook reads it on the device to suggest your sea service. The track itself is never shared, and nothing leaves the device. Turning the option off in Seafarer deletes the summaries.
6a. Linking Sirena.Club (optional)
Linking starts only when you enter, or confirm, the six-character code that the Sirena.Club app makes for you. All link traffic goes to sirena.club over an encrypted connection.
When you link, the app sends the code and, if this Apple Account has Logbook Pro, the App Store original transaction ID of that purchase: the number Apple gives the first purchase of a subscription and keeps for all its renewals. The club asks Apple's App Store Server API about that transaction to confirm it is your own active Logbook Pro (one shared with you through Family Sharing does not count). The app receives a random device token, which it keeps in this device's keychain.
After you link, each time you open the app or return to it, the app sends the device token and asks the club what your membership includes. Until a Logbook Pro purchase is linked to your Club account, the app also sends the original transaction ID of the Logbook Pro on this Apple Account automatically: when the app starts, each time you return to it, and whenever that purchase changes, including a Logbook Pro you buy after linking. Once a purchase is linked, the app stops sending it. While the linked purchase gives access, the club asks Apple about it again up to once a day, when this app or the Club app checks in, to learn of renewals, expiry and refunds.
What the app receives: your first name, your tier (Platinum, Gold or Silver), which Sirena apps your membership unlocks, and whether a Logbook Pro purchase is linked. The app keeps the last answer on the device for up to 45 days, so Logbook Pro stays open at sea without signal.
What the club keeps, tied to your Sirena.Club member account: for each linked iPhone or iPad, a hash of its device token (never the token itself), which app it is, and when it was linked and last used; for a linked Logbook Pro purchase, its original transaction ID, the product, until when it gives access, whether it was a test (sandbox) purchase, when it was linked and when Apple was last asked. The club's server also uses the IP address of these requests, only to limit how many tries can be made per minute; that counter is deleted after 120 seconds.
Any Sirena.Club membership you bought yourself, or a Sirena Seafarer subscription, includes Logbook Pro; Logbook Pro opens a Silver seat in the club where Sirena.Club is available. Nothing else leaves your iPhone or iPad: no documents, scans, document details, contracts, sea time, hours of rest or boat records.
Unlinking (in You) deletes this device's token record at the club and the stored answer on the device. It does not remove the purchase link: the linked Logbook Pro purchase stays with your Club account, and so does the Silver seat it opened for as long as the subscription is active, until that Club account is deleted. You can delete the Club account in the Sirena.Club app (You, then Delete account), or ask us to remove the link at [email protected]. The Sirena.Club Privacy Policy describes what the club keeps, why and for how long.
6b. Where the apps are offered
The Sirena apps are built for the whole world, and which of them, and which features, are offered in your country is decided per App Store country (see the terms, "Worldwide by design"). Where an app is not offered, it receives nothing from you: the apps share data with each other only when you link them, as this policy describes.
7. What we do not do
No analytics, no advertising, no tracking across apps or websites, no data brokers, no sale or sharing of personal data.
The app connects to the internet only for these: Apple, for purchases; the optional Sirena.Club link (section 6a); and web pages you choose to open. From You, those are this policy, the terms and the App Store pages of the other Sirena apps. From a document's screen, the "Verify with" links open the online certificate check of one of 14 maritime administrations. These pages open in your browser and the app sends them nothing; if you type your details into one of them, that administration's own terms and privacy policy apply. A PDF you share (sea service, hours of rest, service history) goes only where you send it with the iOS share sheet.
8. Deleting your data
Delete a document or a contract inside the app, and it is removed from your iPhone or iPad together with its scans. Deleting the app deletes everything it stored on the device, except that iOS may keep the Sirena.Club device token in the keychain, so the app can still be linked if you install it again on the same device. Sirena Logbook has no account of its own to close.
If you linked Sirena.Club, deleting the app does not delete the club's records described in section 6a. Unlink in You first to delete this device's token record. The purchase link stays until your Club account is deleted, or until you ask us to remove it.
9. Your rights
If you never link Sirena.Club, we hold no personal data about you, so there is usually nothing for us to give, correct or erase. If you link it, we hold the records described in section 6a, tied to your Sirena.Club account, and you may ask for a copy of them, have them corrected or have them erased. You have every right under the GDPR and may write to [email protected], and you may complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the authority where you live.
10. Children
Sirena Logbook is meant for working seafarers and is not directed at children.
11. Changes
If a future version starts to handle data differently, for example an optional encrypted backup, we will update this policy before that version is released and show the new date above.