Privacy Policy

Last updated: March 11, 2026

1. Information We Collect

We collect the following categories of information:

  • Account information: Name, email address, and password (hashed)
  • Usage data: Study progress, quiz scores, lesson completions, and study session activity
  • AI interaction data: Tutor conversation content used to provide personalized learning experiences
  • Payment data: Processed securely by Stripe; we do not store credit card numbers
  • Technical data: IP address, browser type, and device information for security and analytics

2. How We Use Your Information

  • Provide and improve the Service
  • Personalize your learning experience through AI tutoring
  • Process payments and manage subscriptions
  • Send transactional emails (verification, password reset, billing)
  • Monitor for security threats and prevent abuse
  • Provide progress reports to your flight school (if enrolled via a school)

3. Data Sharing

We do not sell your personal information. We share data only with:

  • Your flight school: If you are enrolled through a school, your school admins can view your progress and study activity
  • Service providers: Stripe (payments), Resend (email), AI providers (tutoring — no PII is sent to AI models)
  • Legal requirements: When required by law or to protect our rights

4. Multi-Tenant Data Isolation

FlightPrep is a multi-tenant platform. Each flight school’s data is logically isolated. Students from one school cannot access data from another school. School administrators can only view data for their own students.

5. Data Security

We implement industry-standard security measures including:

  • Encrypted data transmission (TLS/HTTPS)
  • Hashed passwords (bcrypt with salt)
  • Encrypted API keys at rest (AES-256-GCM)
  • Role-based access controls
  • CSRF protection and rate limiting
  • Regular security audits

6. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies may be used to understand how the Service is used and improve the experience. You can manage cookie preferences through your browser settings.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Anonymized usage statistics may be retained indefinitely.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access and download your personal data
  • Correct inaccurate information
  • Delete your account and associated data
  • Object to certain data processing activities
  • Data portability

To exercise any of these rights, contact us at privacy@flightprep.app.

9. Children’s Privacy

FlightPrep is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service. Your continued use after changes constitutes acceptance.

11. Contact Us

For privacy-related questions, contact: privacy@flightprep.app