Privacy Policy

1. About This Policy

AIVIATION LLC ("AIVIATION," "we," "us") develops iOS applications for pilots: RegBrief, WilcoAI, Checkride.bot, and Clearance AI. This policy describes how we handle information collected through the aiviation.dev website, including the partner flight-school landing pages hosted under aiviation.dev (together, the "Website").

Each app has its own privacy policy, linked in Section 7. Those policies are the authoritative description of what each app collects. Where this policy and an app's policy differ about that app, the app's policy controls.

Our apps and this Website are offered in the United States, and the information described here is processed in the United States. Under the California Consumer Privacy Act, AIVIATION LLC is the "business" responsible for the personal information described in this policy.

2. Information We Collect From Website Visitors

The Website is informational. It describes our apps and links to them on the App Store. There is no account to create, and we do not ask you for your name, address, or payment details on the Website. We collect the following:

• Website usage events. Pages on the Website send an analytics event to our own servers when a page loads and when you click a link to the App Store. A page-load event records the path of the page you viewed, the hostname of the site that referred you (the hostname only, not the full referring address), and any campaign parameters in the link you followed. An App Store click event records the path of the page, which link you clicked, and any campaign tag carried in that link. We use these events to understand which pages and referral sources lead people to our apps.
• Server request logs. The servers we operate record the requests they receive, including the Internet Protocol (IP) address the request came from, the time of the request, the route requested, and the response status. Our hosting provider also necessarily receives your IP address in order to deliver the pages you request. We use these records to operate, troubleshoot, and secure the Website.
• Email correspondence. If you email us, we receive your email address and whatever you put in the message, and we keep the correspondence so we can respond and keep a record of the request.

The Website sets no cookies, writes nothing to your browser's storage, and does not create or store any identifier for you or your browser. Our servers do not return an identifier to your browser. The usage events described above carry no identifier that would let us connect one page view to another, or to you.

3. Tracking and Other Technologies

• No cookies, no browser storage, no visitor identifier. As stated in Section 2, the Website uses none of these. This section serves as our cookie notice; we have no separate one because we set no cookies.
• Do Not Track and Global Privacy Control are honored. Before sending anything, the Website checks your browser for a Do Not Track or Global Privacy Control signal. If either signal is set, the Website sends no usage event at all.
• No third-party analytics or advertising. We do not use third-party analytics services, advertising networks, pixels, or advertising identifiers, and we do not track you across other companies' websites or apps. The usage events described in Section 2 go only to our own servers.
• Third-party files some pages load. Our home page loads web fonts from Google Fonts, and our partner flight-school landing pages load a QR-code library from jsDelivr, a public code-hosting network. Your browser requests those files directly from those providers, which reveals your IP address and the fact that you are visiting our site to them. Those providers are not analytics services, receive nothing else from us, and handle the request under their own terms.

Our apps use their own separate technologies, described in each app's privacy policy.

4. How We Use Website Information

• To operate, troubleshoot, and secure the Website.
• To understand which pages and referral sources lead people to our apps, and to improve the Website and our marketing.
• To respond to messages you send us.
• To comply with law and legal process, to enforce our Terms of Use, to prevent abuse of our systems, and to establish, exercise, or defend legal claims.

5. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose information as follows:

• Service providers. Amazon Web Services hosts the Website and the servers that receive the usage events and request logs described in Section 2, and processes that information on our behalf as our service provider.
• Professional advisors. Lawyers, accountants, auditors, and insurers, in the course of the services they provide to us.
• Authorities and legal process. Law enforcement, regulators, courts, and other parties, where we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, safety, or property of AIVIATION, our users, or others.
• Business transferees. In connection with an actual or prospective merger, acquisition, financing, sale of assets, insolvency, bankruptcy, or receivership, personal information may be disclosed to the counterparty, successor, or assignee as one of our business assets.

6. How Long We Keep Information

• Website usage events: one year, then automatically deleted.
• Request logs containing IP addresses: on the servers we operate, 30 days, then automatically deleted. As Section 2 explains, our hosting provider also receives your IP address in order to deliver the pages you request. Any logs that provider keeps of those requests are held under its own terms, for a period we do not set and do not control.
• Email correspondence: for as long as we need it to handle your request and keep a record of it.

Usage-analytics events sent by our apps are kept on the same one-year schedule. Each app's privacy policy describes what its events contain and how long that app's other data is kept.

Where we do not state a fixed period, we keep information for as long as we need it for the purpose we collected it for. In deciding how long that is, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, whether we can achieve the purpose by other means, and any legal, accounting, or reporting requirement that applies. When we no longer need information, we delete it or de-identify it.

7. Our Apps

Each app has its own privacy policy, which is the authoritative description of that app's data practices. The summaries below are short and do not replace them. None of our apps has an account: we do not collect your name, email address, or Apple ID in any of them.

8. Security

We use technical and organizational safeguards designed to protect the information we hold, including encryption of information in transit and at rest and access controls that limit who can reach it. Security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your information.

9. Aggregated Information and AI Training

We may create aggregated or de-identified information from the data described in this policy and use it for our lawful business purposes, such as measuring and improving the Website. We do not attempt to re-identify information we hold in de-identified form, except to test that our de-identification works.

We do not use Website-visitor information to train artificial-intelligence models. Some of our apps do use data you provide to improve their own models — Clearance AI, for example, uses the cockpit recordings you contribute, under a setting you can turn off, to improve its speech and clearance-extraction accuracy. Each app's privacy policy states what that app does and what choice you have.

10. Other Sites and Services

The Website links to sites and services operated by third parties, including the App Store, our partner flight schools' websites, and our social-media pages. A link is not an endorsement, and it does not mean we are affiliated with the third party. We do not control those sites and are not responsible for their content or their privacy practices. Read their policies before giving them information.

11. International Data Transfer

We are based in the United States, and the information described in this policy is stored and processed in the United States. If you access the Website from outside the United States, you do so on your own initiative, and your information will be processed in the United States, where privacy laws may differ from those where you live.

12. Your U.S. State Privacy Rights

This section applies to residents of U.S. states whose privacy laws apply to us, including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Nevada (NRS Chapter 603A). Not every right below is available under every state's law, and we may decline a request where the law allows.

What we collect from Website visitors. In the categories used by the CCPA:

• Identifiers — the IP address recorded in our access logs (Section 2), and your email address if you write to us.
• Internet or other electronic network activity information — the page path, referring hostname, campaign parameters, and App Store link clicks described in Section 2.
• Other information you choose to give us — anything you put in an email to us.

We collect this information from you and from your browser as you use the Website. We use it for the purposes in Section 4 and disclose it to the categories of recipients in Section 5. We do not collect sensitive personal information through the Website, we do not use it to profile you or make automated decisions about you, and we do not process it for targeted advertising. What each app collects is described in that app's privacy policy.

Your rights. Depending on your state, you may have the right to:

• Know what personal information we collect, the sources, the purposes, and the categories of recipients.
• Access a copy of the personal information we hold about you, in a portable form where the law requires it.
• Correct inaccurate personal information.
• Delete personal information we collected from you.
• Opt out of the sale or sharing of personal information, of targeted advertising, and of profiling that produces legal or similarly significant effects. We do none of these, so there is nothing to opt out of.
• Limit the use of sensitive personal information. We do not collect it through the Website.
• Appeal a decision in which we deny your request.
• Be free from discrimination for exercising any of these rights. We will not deny you service, charge you a different price, or give you a lower quality of service because you exercised them.

How to make a request. Email privacy@aiviation.dev and tell us which right you want to exercise and which state you live in. You may use an authorized agent; we may ask the agent for proof that you authorized them, and we may ask you to verify your identity with us directly.

Verification, and its limits. Before we act on a request we have to be reasonably sure the request is yours. Because the Website uses no cookies and no visitor identifier, and because our apps have no accounts, we usually hold no information that identifies you, and we often cannot confirm that a particular record relates to you. We do not keep information in an identifiable form solely so that we can answer requests, and we are not required to collect more information about you in order to do so. Where we cannot verify a request, we will tell you and explain why.

Appeals. If we deny your request, you may appeal by emailing privacy@aiviation.dev with "Appeal" in the subject line. We will respond in writing within the period your state's law allows, and if we deny the appeal we will tell you how to contact your state attorney general.

California Shine the Light. California Civil Code Section 1798.83 lets California residents ask whether we disclosed personal information to third parties for those third parties' own direct marketing purposes. We do not. To make a request anyway, email privacy@aiviation.dev with "Shine the Light Request" in the subject line, and include your name, mailing address, and a statement that you are a California resident.

Nevada. Nevada residents may direct a business not to sell certain personal information under Nevada Revised Statutes Chapter 603A. We do not sell personal information. Our designated address for these requests is privacy@aiviation.dev.

Residents of other states may have similar rights under their own laws. Contact us at privacy@aiviation.dev and we will honor the rights that apply to you.

13. Children

The Website and our apps are intended for pilots and student pilots and are not directed to anyone under 16. We do not knowingly collect personal information from anyone under 16. If we learn that we have collected personal information from someone under 16, we will delete it. If you believe a child has given us information, contact privacy@aiviation.dev.

14. Changes to This Policy

We may update this policy. When we do, we will change the "Last Updated" date above and post the revised policy on this page. If the changes are material, we will give more prominent notice. Your continued use of the Website after a revised policy takes effect means you accept it.

15. Contact