Privacy Policy
MyAircraftAI ("we", "us", "our") operates the myaircraftai.com website and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
Account Information: When you register, we collect your name, email address, and a password (stored as a salted hash — we never store plaintext passwords).
Aircraft & Maintenance Data: Tail numbers, aircraft types, maintenance records, squawk reports, flight logs, engine trend data, oil change records, AD compliance records, and uploaded documents (PDFs, images) that you choose to enter.
Photos: You may upload aircraft photos and squawk-related photos. These are stored privately to your account and only shared via mechanic links you explicitly create.
Location: Optional. If you use the "find nearest airport" feature, your browser may ask permission to share your approximate location. We use it once to look up nearby airports and do not store it. You can decline and type an airport identifier manually instead.
Push Notifications: If you enable web push notifications, we store the browser-issued push subscription endpoint and keys so we can send maintenance reminders. This contains no personal identifying information beyond the routing endpoint.
Voice Dictation: Optional. When you tap a microphone "dictate" button, your browser records a short audio clip and uploads it to our servers, where it is transcribed to text for the field you are filling in. The audio is used only to produce that transcription; it is not used to identify you and not used for advertising.
Usage Data: Server logs may record IP addresses, browser type, pages visited, and timestamps for security and diagnostics.
Payment Information: Billing is processed by Stripe (web), Apple App Store In-App Purchase (iOS), or Google Play Billing (Android). We do not store your credit card number. The respective billing provider's privacy policy governs payment data.
2. How We Use Your Information
- To provide, maintain, and improve the Service
- To authenticate your account and enforce multi-tenant data isolation
- To process payments via Stripe
- To send transactional emails (password resets, critical account notices)
- To monitor for abuse and ensure security of the platform
We do not sell, rent, or share your personal information with third parties for marketing purposes.
3. AI-Powered Features
MyAircraftAI uses AI (powered by Anthropic's Claude) to assist with document search, maintenance summaries, and airworthiness analysis. When you use AI features, relevant portions of your uploaded documents and maintenance data may be sent to Anthropic's API for processing. Anthropic does not use this data to train models. See Anthropic's Privacy Policy for details.
4. Data Storage & Security
Your data is stored on servers located in the United States. We implement industry-standard security measures including HTTPS encryption, secure password hashing, session management with HttpOnly/Secure/SameSite cookies, and access controls. However, no method of electronic storage is 100% secure.
5. Data Sharing
We may share your data only in these circumstances:
- Mechanic Portal: If you generate a share link for a mechanic, they can view the aircraft data and contact email you explicitly share. You may revoke a mechanic link at any time.
- Service Providers (subprocessors): Stripe (payments, web), Apple (payments, iOS in-app purchase), Google (payments, Play Billing), Anthropic (AI features), Google Fonts (typography on public pages), Cloudflare (network edge / DDoS protection / TLS termination). These providers have their own privacy policies.
- Legal Requirements: If required by law, court order, or governmental authority.
We do not sell or rent personal information. California residents: we do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.
6. Your Rights
You may:
- Access and update your account information at any time from Account Settings
- Download a copy of your data (Account Settings → "Export My Data")
- Permanently delete your account and all associated data in-app (Account Settings → "Delete Account") — no email or contact required
- Sign out of all sessions at once (Account Settings → "Sign out all other devices")
- Withdraw consent for optional data processing at any time
For California residents (CCPA/CPRA) and EU/EEA residents (GDPR), additional rights may apply, including the right to know, delete, and correct personal information. The in-app controls above satisfy these requests; you may also contact us at [email protected].
7. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).
8. Cookies
We use a session cookie (HttpOnly, Secure, SameSite=Lax) to maintain your login state. We do not use third-party tracking cookies or analytics cookies.
9. Children's Privacy
The Service is intended for users 17 or older. We do not knowingly collect personal information from anyone under 13 (COPPA). If we learn that we have collected data from a child under 13, we will promptly delete it. We do not direct the Service to children under 16 and do not knowingly collect their data without verifiable parental consent.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or data requests, contact us at:
[email protected]