Privacy notice

PilotAcademy operates PilotAcademy and is the data controller for the personal data described here. Contact: support@pilotacademy.app.

What we collect and why

• Account data (name, email, password credentials handled by our authentication provider) — to create and secure your account. Legal basis: performance of our contract with you.
• Profile data (country, pilot type, current licence, study goal) — to personalise study recommendations. Legal basis: contract and legitimate interest.
• Study data (answers, progress, favourites, exam attempts, sessions) — to deliver the service and show your statistics. Legal basis: contract.
• Usage and device data (IP address, device identifiers, page and feature events) — for security, fraud prevention and product improvement. Legal basis: legitimate interest.
• Support messages and bug or question reports — to answer you and fix content. Legal basis: contract and legitimate interest.

Payment card details never reach our servers: they are collected and processed by Paddle, our reseller and Merchant of Record.

Who we share data with

• Hosting, database and authentication providers that run the platform for us.
• Paddle, as Merchant of Record, for the sale of memberships, subscription management, tax compliance and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

Retention

We keep account and study data while your account exists and for up to 24 months afterwards, unless you ask us to delete it sooner. Billing records are kept as long as tax law requires. Data no longer needed is deleted or anonymised.

Your rights

You may request access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interest, and withdraw consent where processing relies on it. Write to support@pilotacademy.app and we will respond within one month. If you are in the UK or EEA you may also complain to your supervisory authority; where data is transferred outside your region we rely on adequacy decisions or standard contractual clauses.

Security and cookies

We use encryption in transit, access controls and least-privilege database rules to protect your data. We use essential cookies and local storage to keep you signed in and remember preferences; analytics data is limited to product events tied to your account. We do not run advertising cookies.