Last updated: 1 November 2026
The short version. We collect what DILO needs to manifest you and keep you safe at the drop zone. We don't sell your data, show ads or use tracking cookies. Staff at drop zones you join can see your profile, including emergency contacts and any medical notes you choose to add. You can ask us for a copy of your data or to erase it at any time.
DILO is operated by DILOTIKO LLC, a North Carolina limited liability company ("DILOTIKO", "we", "us"). You can reach us at support@dilo.one. This policy covers dilo.one, app.dilo.one, and every drop zone address on dilo.one.
| Category | Examples |
|---|---|
| Account | Name, email address, alias, password (stored only as a one-way hash). |
| Profile details you choose to add | Phone number, date of birth, gender, nationality, passport number and expiry, licence type and number, jump count, tunnel time, disciplines, home drop zone, canopy and wing loading, exit weight, shirt size, profile photo, insurance details, emergency contacts, medical conditions. |
| Activity at drop zones | DZs you've joined and your role there, loads and jump groups you're manifested on, jump types and video packages, invoices and balances, rig and reserve pack records, equipment loans, friends list. |
| Logbook | Jumps, notes, photos and signatures you record. |
| DZ billing | DZ name, billing contact, plan and payment history. Card payments are handled by Stripe. We see only the card brand, last four digits and expiry date, never the full card number. |
| Technical | IP address, browser and device information (type, screen size, platform), a random device ID used for live updates, and server, error and performance logs. |
Medical conditions are health information. The field is optional: fill it in only if you want staff at your drop zones to know about it in an emergency. By filling it in, you consent to us storing it and showing it to those staff. You can change or delete it from your profile at any time, which withdraws that consent. Passport details are also optional. Some international events need them for permits or insurance.
| Purpose | Legal basis (where the GDPR applies) |
|---|---|
| Running DILO: accounts, manifesting, load boards, logbook, invoices, pack records | Performing our contract with you |
| Safety at the drop zone: showing your emergency contacts, weight, licence and any medical notes to DZ staff | Contract; your explicit consent for medical information |
| Billing DZ subscriptions | Contract |
| Service emails: verification, password resets, invoices, billing and trial notices | Contract |
| Security, preventing abuse, fixing bugs and keeping DILO running | Our legitimate interest in a secure, working service |
| Keeping financial and safety records | Legal obligation; legitimate interest |
We don't sell personal information, show ads, or build advertising profiles. We don't send marketing emails.
DILO is hosted in the United States. If you use DILO from outside the US, including from the EEA or UK, your information is transferred to and processed in the US. Our providers protect these transfers with recognized safeguards, such as the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework. Where those don't apply, the transfer is necessary to provide the service you've asked for.
When you ask us to erase your account, we remove your name, email and profile, and delete your logbook. Where you appear in a DZ's records, you're shown as "Former member" with a random reference number. A few records are kept because the law or safety requires them:
DILO uses only cookies that are strictly necessary for signing in:
| Name | Purpose | Lifetime |
|---|---|---|
| dilo_token, dilo_tenant_token | Keep you signed in to DILO and to a DZ | 30 minutes, renewed while you use DILO |
| dilo_refresh | Keeps your session going between visits | Up to 30 days of inactivity (1 day for staff), 90 days at most |
The app also uses your browser's local storage for your theme, the DZ you last picked, a random device ID for live updates, and an offline copy of loads. There are no analytics, advertising or third-party tracking cookies. If you open the Stripe billing portal, Stripe sets its own cookies there.
DILO is served over HTTPS only. Passwords are hashed, sign-in cookies can't be read by scripts, and access is limited by your role at each DZ. Signing out or changing your password ends your sessions immediately. No system is perfectly secure. If a breach affects your information, we'll notify you and the relevant authorities as the law requires.
Depending on where you live, you may have the right to:
To make a request, email support@dilo.one. We'll reply within 30 days and may need to confirm your identity first. If your request concerns data a DZ controls, we'll pass it to the DZ and help them respond. We won't treat you differently for exercising your rights.
DILO isn't intended for anyone under 16, and we don't knowingly create accounts for them. If a DZ records a minor, for example as a tandem passenger, the DZ is responsible for having a parent's or guardian's permission. If you believe a child has given us personal information, contact us and we'll delete it.
We'll post updates here with a new date. If a change materially affects how we use your information, we'll tell you by email or in the app before it takes effect.
DILOTIKO LLC · North Carolina, USA · support@dilo.one