Medical consent
What it is
Section titled “What it is”Medical consent is the one-screen step Syndik8 requires before you can record a medical for the first time, whether you are recording just its expiry date or uploading the certificate as well. Both share your expiry with your syndicate admins, so both need the consent moment. The screen sets out, in plain language, what will be stored (the wording flexes to match what you are actually storing), who can see what, and your continuing responsibility as pilot-in-command. Accepting records an Article 9(2)(a) “explicit consent” entry on your account. Declining aborts the action and stores nothing.
The consent is the lawful basis under UK GDPR for Syndik8 to process information about your medical. Without it, the server refuses the write.
Who can use it
Section titled “Who can use it”Every pilot, before their first medical action. Existing pilots are re-prompted if the consent wording is updated.
Where to find it
Section titled “Where to find it”The consent screen appears automatically when you tap Record expiry date or Upload certificate on the Medical tile of My documents and you do not yet have a current consent record. It cannot be reached any other way; there is no “view consent” route. If you want to read it without storing anything, you can decline at the end and nothing will be recorded.
What gets recorded when you accept
Section titled “What gets recorded when you accept”Two things are added to your account:
- When you consented: the moment you tapped Accept. Evidence that you consented.
- Which wording you consented to: the version of the consent text shown on the screen at the time. Evidence of what you consented to.
No personal data beyond this is captured by the consent step itself (your name, profile, etc. are already known to your Syndik8 account).
What the consent covers
Section titled “What the consent covers”The consent screen sets out three things Syndik8 will do on Accept:
- Store your medical data. The wording matches the path you took: recording the date only stores just the expiry date (the certificate is not uploaded); uploading stores the certificate and its expiry so you can open it from any of your devices, including offline. Either way you receive reminders before it expires (at 60, 30, and 7 days, and on the day it lapses).
- Share a redacted summary with your syndicate admins: that you have a medical recorded and its expiry date. Your certificate is never shared with anyone but you.
- Leave your pilot-in-command responsibility unchanged: whether your medical is current is your responsibility, not Syndik8’s. You remain solely responsible for your fitness to fly under Air Navigation Order Article 86.
The two wordings are presentations of the same consent scope and record the same version: consenting on the date-only screen also covers a later certificate upload. The screen also notes what will not be done: Syndik8 will not interpret medical content, will not share the certificate file with any third party, and will not relax pilot-in-command responsibility.
The version stamp
Section titled “The version stamp”The consent screen carries a version. When the wording is materially updated in a future release, the version string increments. The first time you start a medical action after that:
- If your existing consent’s version is current, nothing changes. You proceed straight to the form.
- If your existing consent’s version is older than the current version, you are shown the new consent screen. Your previously-recorded medical is unaffected and stays on file. You can either accept the new version (your consent record is refreshed) or decline (the action is aborted; your existing medical remains accessible to you, and you’ll be re-prompted on the next attempt).
The current version is 2026-07-03.
Withdrawal
Section titled “Withdrawal”There is no separate “Withdraw medical consent” control. To withdraw, open your medical (via Settings > Pilot documents > My licences and medicals), tap Delete, and choose Delete everything on the screen that opens. That outcome:
- Deletes the medical certificate file from storage and from your devices (where one was uploaded).
- Deletes the title and expiry that went with it.
- Clears the record of when and what you consented to.
The other outcome on that screen, Delete the file, keep the date, is not a withdrawal: it removes only the certificate, and your expiry date stays shared with your admins under your existing consent.
Withdrawal has no effect on your pilot licence (different lawful basis, different document) or on any other part of your Syndik8 account.
Should you choose to record a medical again, the consent screen will appear at the start of that action.
Behaviour rules
Section titled “Behaviour rules”- The gate is server-side. Consent is checked on the server, not just in the app, and it applies to a date-only record exactly as it applies to an upload. There is no way to bypass the consent screen by going around the app; the server will reject the write with a clear error referring back to this consent flow.
- Per-pilot, not per-syndicate. Consent is tied to your account, not to any syndicate. Joining or leaving a syndicate doesn’t reset it. Recording a single medical covers every syndicate you’re in now or join later.
- Consent ≠ legal basis for everything. The consent here covers the medical certificate. Other personal data Syndik8 processes (your booking history, your usage logs, your email address) sits on different lawful bases; see the privacy policy.
- Account closure clears your consent. When you close your account, your consent record, your medical, and your licence are removed within 30 days. There is no archival copy.
Wonder why Syndik8 treats the medical this way? See Why medicals need explicit consent and Who sees what pilot documents.