Privacy Policy

1. Who we are

boringpilot is an educational application that helps pilots and aviation students study for theory exams, proficiency checks, and interviews. The App is operated by Boring Pilot, based in Indonesia. For any privacy-related questions, contact us at: support@boringpilot.com.

2. Information we collect

We collect only the information necessary to provide the App's features:

• Account information — your email address, display name, and password (which is stored securely as a salted hash by our authentication provider), plus a profile avatar that you choose from a built-in preset set. We use this to create and secure your account.
• Learning activity — your quiz attempts and answers, scores, study progress, and spaced-repetition review schedule. We use this to track your progress and power your personalized study.
• Diagnostic data — crash reports and error logs, collected through Firebase Crashlytics in released versions of the App only. These reports include a device identifier and basic device and app information that the crash-reporting service uses to group and diagnose crashes. We use this to detect and fix problems.

We do not collect your location, contacts, photos, camera, microphone, or any advertising identifiers. We do not use third-party advertising, behavioral tracking, or analytics.

3. How we use your information

Your information is used solely to: create and manage your account; provide and personalize study features (progress tracking, spaced repetition); sync your data across your devices; diagnose and fix technical problems; and communicate essential account messages (such as email verification and password reset). We do not sell, rent, or trade your personal information, and we do not share it with third parties for advertising.

4. Who can see your data

Your account and learning data are private to your account. Other users of the App cannot see your answers, scores, or progress. Access is enforced at the database level so that each account can only reach its own data. A limited number of our administrators may access account and learning records where necessary to operate and support the service.

5. Notifications

With your permission, the App can send you push notifications as daily study reminders (for example, when spaced-repetition reviews are due). These reminders are optional — you can turn them off at any time in the App's settings or in your device's notification settings. We do not use notifications for advertising.

6. Where your data is stored

Your account and learning data are stored on secure cloud infrastructure provided by Supabase. Crash diagnostics are processed by Google Firebase (Crashlytics). Data in transit is encrypted using industry-standard TLS/HTTPS.

7. Third-party services

The App relies on the following third-party processors, each governed by their own privacy policies:

• Supabase — backend database and authentication. supabase.com/privacy
• Google Firebase (Crashlytics) — crash reporting. firebase.google.com/support/privacy

8. Data retention

We retain your account and learning data for as long as your account is active. If you delete your account, your personal data is permanently removed from our systems (see Section 9).

9. Your rights & deleting your account

You can access and update your profile information within the App at any time. You can permanently delete your account and all associated learning data directly in the App via Profile → Delete Account, or by following the instructions at our account deletion page. Deletion is immediate and permanent.

Depending on your jurisdiction, you may have additional rights (access, correction, deletion, portability). To exercise these, contact us at support@boringpilot.com.

10. Children's privacy

The App is intended for pilots and aviation students and is not directed at children under 13. We do not knowingly collect personal information from children under 13.

11. Security

We use reasonable technical and organizational measures to protect your data, including encrypted transmission (HTTPS), database-level access controls that isolate each account's data, and password hashing. No method of transmission or storage is completely secure, but we work to protect your information.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Effective date" above. Continued use of the App after changes constitutes acceptance.

13. Contact

Questions about this policy or your data: support@boringpilot.com.