Legal
Privacy Policy
Effective July 24, 2026
Pilotage collects the minimum it needs to teach you aviation and remember where you left off. No ads, no trackers, no analytics brokers, no selling data — ever. Here's the complete picture.
1. Who we are
Pilotage is made by Art of Sullivan, Inc. This policy covers the Pilotage mobile app and this website. For anything privacy-related — questions, requests, complaints — email greg@pilotageapp.com.
2. What we collect, and why
| Data | What it is | Why we have it |
|---|---|---|
| Account | Your email address and a display name. If you sign in with Apple or Google, we receive your email (or Apple's private relay address) and, from Apple, your first name if you share it. Passwords are hashed by our authentication provider; we never see them. | Signing you in, syncing across devices, password resets. |
| Learning progress | Which concepts you've studied, whether each answer was right or wrong, your review schedule, streaks and daily-checklist state, and the local calendar date of your last completed lesson. | Spaced-repetition scheduling — the app plans tomorrow's review from today's answers — plus streaks and progress screens. |
| Onboarding answers | Your answer to the short getting-started poll (for example, why you're learning). | Tuning what the app shows you first. |
| Subscription status | Whether your account has an active Pilotage Premium subscription, via app-store receipts. We never receive your payment card details — Apple and Google keep those. | Unlocking what you've paid for. |
| Product events | A very small set of in-app events (currently: dismissing the welcome screen and picking a motivation). No behavioral tracking. | Understanding whether onboarding works. |
| Crash and error reports | When the app crashes or hits an error, it sends a diagnostic report: what went wrong and where in our code, the app version and build, your device model and OS version, and the screens and taps just before it. These reports carry no account ID, no email, and no IP address — we can see that a crash happened, not who it happened to. | Finding and fixing bugs. This is the only way a one-person shop hears about a crash that happened on someone else's phone. |
| Reports you file | If you flag a question as wrong, confusing, broken, or a typo, we store what you flagged and why: the exercise and the exact values it generated, what you answered, what the app called correct, any optional note you type, and the app version, build, platform, OS version and device name. Your account ID rides along so we can ask a follow-up. | Fixing the content you told us was broken. |
| Notification token | If you turn on reminders or announcements, the anonymous push token your device's OS issues to this install. Not an advertising ID and not usable to identify you outside Pilotage. Practice reminders are scheduled entirely on your device and send nothing anywhere. | Delivering the notifications you asked for. |
Voice practice and your microphone
The radio-practice feature uses your microphone so you can speak aviation phraseology out loud. Your speech is transcribed by your device's built-in recognition service (Apple's on iOS, Google's on Android — depending on your device settings, those services may process audio on their servers under their own privacy terms). Pilotage never records, stores, receives, or transmits your audio or transcripts. The only thing saved is whether your radio call was right or wrong — the same as a tapped answer. Decline the microphone permission and everything except voice drills works normally.
Crash reports are not tracking — here's the difference
We want to be precise about this, because "we send crash reports" and "we track you" get lumped together and they are not the same thing. Tracking means following you around — linking what you do here to your identity elsewhere, for advertising or to sell to data brokers. Pilotage does none of that, and never will. A crash report is the opposite: a stack trace with the identity stripped out, sent so a bug that hit you doesn't hit the next person. We don't know whose phone it came from, and we can't use it for anything but fixing the app.
What we don't collect
No location. No contacts. No photos. No advertising identifiers or device fingerprints. No analytics SDKs, no attribution SDKs, no ad networks, no data brokers, no social-media pixels. No ads of any kind. We do not sell or share personal data for advertising, and we have no "tracking" as Apple's App Tracking Transparency defines it — which is why Pilotage never shows you that "allow tracking?" prompt.
3. Who processes it
We use a short list of service providers, each processing data only on our instructions to run Pilotage, and each committed to protections at least as strong as this policy:
- Supabase — hosts our database and authentication. Your account and learning data live here, encrypted in transit and at rest.
- RevenueCat — manages subscription state. Receives your account ID and app-store receipt data, nothing else.
- Sentry — receives the crash and error reports described above. Configured to send no user identifier and no IP address.
- Expo — relays push notifications to Apple's and Google's notification services. Receives your device's push token and the text of the notification, nothing else.
- Apple / Google — sign-in (if you choose it), payments, push delivery, and on-device speech recognition, under their own terms.
That's the whole list. Nobody else receives your personal data, except if the law compels us or in a corporate transaction (in which case this policy still applies to the data).
4. Security
All traffic between the app and our servers is encrypted (HTTPS). Database access is governed by row-level security — the server enforces that your account can only ever read and write its own rows. Session credentials are stored in your device's secure keychain.
5. Retention and deletion
We keep your data for as long as you have an account. When you delete your account:
- Everything tied to your identity is deleted — account, progress, streaks, answers, onboarding responses, subscription grants, and any push notification tokens.
- The small product-event records are anonymized (your ID is removed), not retained in identifiable form.
- Any content reports you filed are kept as a defect log with your ID removed — the bug you found outlives the account, but stops pointing at you. If a note you typed contains something you'd rather we drop entirely, email us and we'll delete the whole report.
- Crash reports contain no identifier to delete, so there is nothing in them to tie back to you. They age out on their own.
- If you're a flight instructor who issued content reviews in Pilotage, the certificate number stamped on those reviews is retained as part of the review record — an audit trail of who signed what.
- Apple or Google may retain purchase records under their own policies; deleting your account does not cancel an active subscription.
Delete your account in the app (Profile → Delete account) or follow the account deletion page if you no longer have the app installed. Deletion takes effect immediately.
6. Your rights
Wherever you live, we extend the same rights: ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it — and withdraw any consent you've given (for the microphone, revoke it in your device settings any time). Email greg@pilotageapp.com and we'll respond within 30 days. If you're in the EEA, UK, or California, these requests map to your GDPR / UK GDPR / CCPA rights, including the right to complain to your local supervisory authority. We don't sell personal information, so there's nothing to opt out of.
7. Children
Pilotage is not directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child under 13 has created an account, email us and we'll delete it.
8. Changes to this policy
If we make material changes — say, a new data category or a new processor — we'll post the update here with a new effective date and give you notice in the app before it takes effect.
9. Contact
Art of Sullivan, Inc. · greg@pilotageapp.com