Skip to content
Syndik8

Usage photo privacy

What it is

Section titled “What it is”

A member can attach a meter photo (a Hobbs or tacho reading) to a usage log, and a receipt to an expense claim. Both are stored privately. Whether somebody else can open one depends on:

  1. Who they are. The pilot on the log, an admin, or an ordinary member.
  2. The syndicate’s “Share usage photos” setting. It covers meter photos only, never receipts.
  3. Whether they are still a member. Anyone who has left the syndicate loses access.

Who can use it

Section titled “Who can use it”
  • Any member can upload a photo to their own log or a receipt to their own claim.
  • Admins see every meter photo and every receipt in their syndicate.
  • Members see the photos on their own logs, and other members’ photos only when “Share usage photos” is on.
  • Receipts are seen by the member who made the claim and by admins. Other members never see them, whatever the sharing setting says.
  • Former members see none of the syndicate’s photos, including the ones on their own logs. The one thing they keep is the receipt on a claim they made themselves, because the claim itself is still theirs to see.

Where to find it

Section titled “Where to find it”
  • The setting lives under the Admin tab, then Privacy & Visibility, in the Photo Sharing section, labelled Share usage photos with all members.

Fields / options

Section titled “Fields / options”
Field Type Default Who can change
Share usage photos with all members Toggle Off Admins

Changing the toggle takes effect only when you tap Save Settings, which saves it together with the screen’s other privacy settings. Leaving the screen without saving keeps the setting as it was.

Behaviour rules

Section titled “Behaviour rules”

A current member can open a meter photo when any of these is true:

  1. They are the pilot the log is recorded against. This holds even when an admin took the photo and logged the flight on their behalf.
  2. They are an admin of the syndicate.
  3. The syndicate’s Share usage photos setting is on.

A receipt can be opened by anyone who can see the expense it belongs to: the member who made the claim, and admins.

Otherwise the photo is hidden from that member (the slot renders empty, not a locked icon).

Implementation detail:

  • Photos and receipts live in a private storage bucket.
  • The storage server enforces the same rules as the app. Every member’s device holds the details of every flight log, including where its photo is stored, but knowing where the photo is does not get anyone the file. The storage server checks who is asking against the log or claim the photo belongs to.
  • While a photo is uploading and not yet saved against its log or claim, only the person who took it can open it.
  • The app generates a short-lived signed URL (15 minutes) at display time, not a permanent public URL.
  • The signed URL is only generated when the viewer is allowed to see the photo. A viewer who is not allowed never receives a URL, not even a hidden one.
  • Signed URLs cannot usefully be shared; they expire after 15 minutes.
  • A photo is removed with its record. Deleting a usage log or an expense claim removes its photo or receipt from storage, and so does replacing or removing the photo on a record that stays.

Changes to the setting, and a member leaving, take effect immediately for the next signed URL. Already-open photo viewers in other sessions still show the image until their 15-minute URL expires.

See also

Section titled “See also”