Privacy Policy
Effective date: July 21, 2026
The short version
PilotTrack stores your account, training progress, logbook, and AI conversations so the app can teach you. Our AI features are powered by named partners: your messages go to Anthropic (Claude), and your microphone audio during voice sessions is processed by ElevenLabs. Payments run through Stripe — we never see your card number. We don't sell your personal data and we don't show ads. You can permanently delete your account any time in Settings → Danger Zone.
Who we are
PilotTrack (pilottrack.io) is an AI-powered aviation ground school for FAA ratings. This policy explains what data we collect, why, who processes it, and the controls you have. Questions or requests: pilottrack.launch@gmail.com.
What we collect
Account information. Your name, email address, and password. Passwords are handled by our authentication provider (Supabase) and stored only in hashed form — we never see them.
Training profile. The rating you're working toward, your experience level, training goals, rough flight hours, onboarding answers (including how you heard about us), and your timezone.
Learning activity. Lesson progress, quiz and practice-test results, identified weak areas, XP, streaks, and study plans.
AI conversations. Text transcripts of your AI CFI chats and records of voice sessions (duration, topics covered, scores, and assessment summaries for mock orals). We do not store your raw audio.
Logbook and documents. Flight entries you add (dates, aircraft, times, landings) and training-document dates you choose to track, such as medical or flight-review expirations.
Payment information. Handled by Stripe. We store your subscription status and Stripe reference IDs — never your card number.
CFI program data. For instructor accounts: your referral code, referred students' training progress (with the student's connection), a commission ledger, and a Stripe Connect account reference for payouts. Identity and bank details for payouts go directly to Stripe.
Feedback and support. Feedback you submit in-app and emails you send us.
Technical data. Server logs and aggregate page analytics from Vercel. We don't use cross-site advertising trackers.
AI features and the partners who power them
PilotTrack's core features are built on external AI services. When you use them, the data below leaves our infrastructure and is processed by the named provider under its own terms. We only send what the feature needs.
Anthropic (Claude) — AI tutoring
When you message the AI CFI, or speak with the voice tutor or AI DPE examiner, we send Anthropic your messages (or the transcript of what you said), plus the learning context needed for a useful answer: your first name, current rating, lesson content, training progress, quiz history, identified weak areas, and logbook summaries. Anthropic generates the responses. Per Anthropic's commercial API terms, this data is not used to train their models.
ElevenLabs — voice sessions
When you start a voice lesson or mock oral, your microphone audio is streamed to ElevenLabs, which transcribes your speech and generates the instructor's voice. ElevenLabs receives the session audio, the conversation transcript, and pseudonymous session identifiers (your account ID and the lesson ID). Voice sessions only run when you start one and grant microphone permission — you can end a session at any time. We don't store your audio on our servers; ElevenLabs processes and retains session data under its own privacy policy.
Voyage AI — search
To find relevant FAA source material for an answer, the text of your question is sent to Voyage AI to be converted into a search vector. No name, email, or account identifier is attached.
Stripe — payments
Checkout, billing, and CFI payouts run on Stripe. Stripe receives your email and your payment details (entered directly with Stripe — card numbers never touch our servers), and for instructors, the identity and bank information required for Connect payouts.
Supabase — database and sign-in
Our database and authentication run on Supabase, so the data described in this policy is stored on Supabase-managed infrastructure.
Vercel — hosting and analytics
The site is hosted on Vercel, which processes standard server logs and provides aggregate, cookie-free page analytics.
What we don't do
We do not sell your personal data. We do not show third-party advertising, and we don't use advertising trackers or share your data with data brokers.
Data retention and deleting your account
We keep your data while your account is active so your training history keeps working for you.
You can permanently delete your account in the app: Settings → Danger Zone → Delete Account. Deletion is immediate and cannot be undone. It cancels any active subscription right away and erases your profile, training progress, quiz history, logbook, tracked documents, AI conversation transcripts, and voice session records, and removes your sign-in so the email can be used to register again.
A few things survive deletion, deliberately and in minimal form: anonymized accounting records (instructor commission entries with your identity removed), a minimal deletion audit entry (a timestamp and non-identifying reference IDs, kept so we can verify billing was actually stopped), and transaction records retained by Stripe as required for financial compliance. Third-party processors (Anthropic, ElevenLabs, Stripe) retain or delete data they processed according to their own policies.
Your choices and rights
You can view and update most of your data directly in the app, and delete your account entirely as described above. Depending on where you live, you may also have legal rights to access, correct, export, or delete your personal data. For any of these requests — including a copy of your data — email pilottrack.launch@gmail.com and we'll respond as the law requires.
Children
PilotTrack is not directed to children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we'll delete it.
Security
Data is encrypted in transit, database access is restricted with row-level security, and payment and password handling are delegated to providers who specialize in them. No system is perfectly secure, but we work to keep your data safe and will notify you as required if a breach affects you.
Changes to this policy
If we change this policy in a meaningful way, we'll update the effective date above and, for significant changes, tell you in the app or by email.