Privacy Policy
Draft dated October 14, 2026
This policy explains what Cleared 2 Checkride ([legal entity]) collects, why, who processes it, and your choices.
What we collect
- Account: your email address and a login session cookie.
- Logbook photos and data: the page images you upload and the data we extract from them. That can include flight dates, aircraft tail numbers, airports, flight times, remarks, instructor names, instructor certificate numbers, signatures and endorsement text. Photos may also show anything else in the frame.
- Report inputs: the planned checkride date, the endorsement checklist you enter, and your edits.
- Payments: Stripe processes your payment. We receive the payment status, amount and a Stripe session ID, never your full card number.
- Waitlist: your email and role, if you join it.
- Technical: basic server logs (IP address, browser and request times) for security and debugging.
How we use it
Only to provide the Service: transcribing your pages, generating reports and CSV exports, processing payment, securing your account, providing support, and [with your consent] product updates. We do not sell your data and do not use your logbook to train AI models. [Confirm the provider's data-use terms before launch.]
Service providers (processors)
- xAI (AI image processing): page images and text prompts are sent to the xAI API to read your handwriting. [Lawyer/ops: confirm xAI API retention period and no-training terms; link their policy.]
- Stripe: payment processing (stripe.com/privacy).
- Supabase: database, file storage and email login (hosting region: [region]).
- Vercel: application hosting.
- [Email delivery provider, if separate from Supabase.]
Retention and deletion
We keep your audits and photos until you delete them, or [24 months] after your last login, whichever comes first. You can delete any audit, and all its photos, at any time from My account. Deletion removes them from our active storage immediately and from backups within [30] days. To delete your whole account or ask for a copy of your data, email [privacy@cleared2checkride.com]. We will respond within [30] days. We keep payment records as required by tax law.
Security
Photos are stored in private storage that only the account owner can access through our app. Data is encrypted in transit (HTTPS). No system is perfectly secure, so please don't upload more than your logbook pages.
Your rights
Depending on where you live (for example California under the CCPA/CPRA, or the EU/UK under GDPR), you may have the right to access, correct, delete or port your data, and to object to certain processing. Contact us to exercise them. [Lawyer: add region-specific sections as needed.]
Children
The Service is not directed to children under 13. [Student pilots can solo at 16 (14 in gliders/balloons); confirm the age policy.]
Changes and contact
We will post changes here and notify you of material changes. Contact: [privacy@cleared2checkride.com, mailing address].