Last Updated: February 20, 2026
Privacy Policy
1. Introduction
Welcome to Aviio AI. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
2. Information We Collect
We collect information that you provide directly to us, information collected automatically, and information from third-party services.
Account Information
- Username
- Email address (optional, for OAuth sign-in)
- Display name and profile photo (from Google/Apple sign-in)
- Password (encrypted, never stored in plain text)
Study Progress Data
- Quiz results and scores
- Study session history
- Flashcard progress
- Achievement data
- Certificate selections (PPL, IFR, Commercial, etc.)
Device & Usage Information
- Device type and operating system
- App version and language settings
- Features used and screen views
- PDF books accessed
- Crash reports (via Firebase Crashlytics)
Payment Information
Payment data is processed by Stripe (our payment processor). We do NOT store credit card numbers. We only store Stripe customer IDs for subscription management.
3. How We Use Your Information
We use your information to provide and maintain the service, track your study progress, process subscription payments, improve the app, fix bugs, communicate important updates, and ensure security.
4. How We Share Your Information
We do NOT sell your personal information to third parties.
Service Providers
We share data with trusted third-party service providers:
- Firebase Firestore — Stores your account and study data
- Stripe — Processes subscription payments
- Firebase Analytics — Usage analytics (anonymized)
- Firebase Crashlytics — Crash reporting
- Railway — Backend API hosting
Legal Requirements
We may disclose your information if required by law, to comply with legal processes, protect our rights, prevent fraud, or protect user safety.
5. Data Security
We implement industry-standard security measures including:
- TLS/HTTPS encryption for all data transmission
- Bcrypt password hashing
- Encrypted database connections
- Rate limiting to prevent brute force attacks
- Regular security audits and monitoring
6. Data Retention
We retain your information while your account is active. When you delete your account:
- Personal information deleted within 30 days
- Study progress permanently deleted
- Payment records retained for 7 years (tax compliance)
- Database backups retained for 7 days (disaster recovery)
7. Your Privacy Rights
You have the right to:
- Access your personal data
- Request correction of your data
- Request deletion of your account
- Opt-out of marketing emails
- Export your data in machine-readable format
California Residents (CCPA)
California residents have additional rights including the right to know what personal information is collected and the right to non-discrimination for exercising privacy rights.
EU/EEA Residents (GDPR)
EU/EEA residents have additional rights including the right to rectification, erasure ("right to be forgotten"), data portability, and the right to object to processing.
8. Children's Privacy
Aviio AI is intended for users aged 13 and older. We do NOT knowingly collect information from children under 13. If you believe your child has provided us with personal information, please contact us immediately.
9. International Data Transfers
Our servers are located in the United States. If you access Aviio AI from outside the United States, your information may be transferred to and stored in the United States.
10. Third-Party Links
Our app may contain links to third-party websites (FAA publications, YouTube videos, study resources). We are NOT responsible for the privacy practices of these third parties.
11. Analytics and Tracking
We use Firebase Analytics to understand how users interact with our app. You can opt-out of analytics tracking in your device settings:
- iOS: Settings → Privacy → Tracking → Disable for Aviio AI
- Android: Settings → Google → Ads → Opt out of Ads Personalization
12. Changes to Privacy Policy
We may update this Privacy Policy from time to time. When we make changes:
- We will update the "Last Updated" date
- We will notify you in-app or via email
- Continued use of the app constitutes acceptance
13. Contact Us
If you have questions about this Privacy Policy:
- Email: support@aviioai.com
- Website: www.aviioai.com
We aim to respond within 48 hours.
14. Compliance
Aviio AI is compliant with:
- GDPR (EU General Data Protection Regulation)
- CCPA (California Consumer Privacy Act)
- COPPA (Children's Online Privacy Protection Act)
- Apple App Store Privacy Requirements
- Google Play Store Privacy Requirements
15. Data We Collect Summary
| Category | Data Collected |
|---|---|
| Account | Username, email, password |
| OAuth | Google/Apple ID, name, photo |
| Study Progress | Quiz scores, session data |
| Subscription | Stripe customer ID |
| Device | OS, version, device ID |
| Usage | Screen views, events |
| Crashes | Stack traces, device info |