Privacy Policy

1. Overview

MyFlightCareer ("we," "us," or "our") is operated by Iron Spark Labs LLC. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website and mobile application (collectively, the "Service"). By using the Service, you agree to the practices described in this policy. See also our Terms of Use and Data Disclaimer.

2. Information We Collect

Information you provide directly:

• Email address (used for account creation and authentication)
• Employee ID and hire date (used to verify pilot status during signup)
• Display name (optional, used to personalize your account)
• Payment information (processed by Stripe, Apple, or Google; we do not store card numbers)
• Profile preferences (base, aircraft, seat position, division, and similar career data you choose to enter)

Information collected automatically:

• Session authentication cookies (used to keep you signed in securely)
• Device push-notification tokens, when you enable push notifications, so we can deliver alerts to your device. You can disable push notifications at any time in the app or in your device settings.
• Subscription identifiers from Apple or Google (such as original transaction ID and product ID) when you subscribe through the App Store or Google Play. Used to determine your subscription status.
• Anonymous usage data via Vercel Web Analytics: pageviews, referrers, and approximate country. Vercel Web Analytics is cookieless and does not identify individual users.
• Device type and browser information (used for compatibility and security)

Information we do not collect:

• We do not collect precise geolocation data
• We do not access your contacts, photos, camera, or microphone
• We do not use advertising cookies or sell your data to advertisers
• We do not collect data from children under 13 and the Service is not directed at children

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account, including pilot eligibility verification
• Provide seniority, pay, PBS award, and career projection features
• Process subscription payments via Stripe (web), Apple In-App Purchase (iOS), or Google Play Billing (Android)
• Determine and maintain your subscription status
• Send account-related communications (e.g., subscription receipts, security notices)
• Deliver push notifications when you opt in, such as data release announcements and feature updates
• Improve the Service through aggregated, non-identifiable usage analysis
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

4. How We Share Your Information

We share information only in the following limited circumstances:

• Stripe — payment processing for web subscriptions. Stripe receives your payment information directly and is subject to its own privacy policy. We receive only a customer ID and subscription status.
• Apple Inc. — In-App Purchase processing for iOS subscriptions. Apple handles billing under its own privacy policy; we receive a signed transaction payload (JWS) containing the product ID, transaction ID, and expiration date so we can grant you access.
• Google LLC — Google Play Billing for Android subscriptions, and Google Sign-In (if you choose that login option). Google handles billing and authentication under its own privacy policy; we receive a purchase token and product ID for billing, or your name and email for sign-in.
• Sign in with Apple — if you choose this login option, Apple may share a relay or private email address with us. We receive only the information you authorize.
• Supabase — database and authentication infrastructure. Your account data and preferences are stored in Supabase-hosted databases with access controls in place.
• Vercel — hosting, edge network, and Web Analytics. Vercel processes requests to serve the application and aggregates anonymous usage statistics.
• Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) — transport for push notifications when you opt in. Tokens are routed through these services; the body of the notifications is composed by us.
• Legal requirements — we may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.

5. Data Storage and Security

Your data is stored in the United States on secured, access-controlled infrastructure. We use industry-standard measures including encrypted connections (HTTPS/TLS), signed session tokens, and role-based access controls to protect your information.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention and Deletion

We retain your account information for as long as your account is active or as needed to provide the Service. You may delete your account at any time via the in-app Delete Account flow on the Profile screen, or at https://myflightcareer.com/delete-account. Account deletion permanently removes your authentication record, profile preferences, and registered push devices.

Some information may be retained after deletion where required by law or for legitimate business purposes, including transaction records (typically 7 years for tax and accounting compliance) and records needed to prevent fraud or abuse. Stripe, Apple, and Google each retain payment records under their own data-retention policies; we do not control those records.

If you have an active App Store or Google Play subscription, please cancel it through Settings → Apple ID → Subscriptions or Play Store → Subscriptions before or alongside your deletion request to avoid further charges. We cannot cancel App Store or Google Play subscriptions on your behalf.

7. Your Rights and Choices

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate information via your Profile page
• Deletion — delete your account in-app or at /delete-account
• Portability — request your data in a portable format
• Push notification opt-out — disable push notifications in the app or in your device settings at any time
• Opt-out of communications — unsubscribe from non-essential emails at any time

To exercise any of these rights, contact us at info@myflightcareer.com. We will respond within 30 days.

8. Cookies and Local Storage

Web cookies. We use a session cookie to keep you authenticated. This cookie is essential for the Service to function and does not track you across other websites. We do not use advertising cookies. Vercel Web Analytics, which we use for anonymous pageview statistics, is cookieless.

Browser local storage. Some features (such as 401(k) year-to-date inputs you enter for pay projections) use your browser's local storage to save your preferences between sessions. This data remains on your device and is not transmitted to our servers.

Native device storage. The mobile app uses Capacitor Preferences (an on-device key/ value store) for: (a) cached dashboard data so you can view your last-known seniority information without a network connection; (b) the encrypted refresh token used by the optional Face ID / Touch ID fast-login feature; and (c) your push notification opt-in choice. This data lives on your device and is removed when you sign out, delete the app, or delete your account.

9. Third-Party Links

The Service may contain links to third-party websites or resources. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To submit a request, contact us at info@myflightcareer.com.

11. International Users

The Service is operated in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you via email or in-app notice. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact:

Iron Spark Labs LLC
info@myflightcareer.com