Privacy Policy

1. Who We Are

GRID is an aviation intelligence platform conceived, designed, and developed by CapricornDev for student pilots and licenced aviators ("the Platform", "we", "us", or "our"). We provide theoretical knowledge preparation, structured syllabi, assessments, progress analytics, interactive flight maps, aerodrome intelligence tools, and pilot social and communication features.

CapricornDev is GRID's originating development company. This Privacy Policy explains what personal data the Platform collects, why we collect it, and how we protect it. By creating an account or using any part of the Platform, you agree to these practices. If you do not agree, please do not use the Platform.

2. Information We Collect

We collect the following categories of information:

Account information — When you register, we collect your full name, username, and email address.

Study and assessment data — We record your quiz attempts, assessment scores, subject progress, syllabus completion, and time spent studying to power your progress dashboard.

User-generated content — Notes, annotations, saved study materials, direct messages, and other content you create or share within the Platform.

Pilot social data — Friend requests, friendships, blocked-user relationships, conversation membership, message status, and the profile, activity, academic progress, or flight statistics you choose to make visible to other pilots.

Shared aviation content — Questions, flight plots, routes, navlogs, and related information you send to pilot friends. Copies saved by a recipient may remain in that recipient's account after you remove your own copy or end the friendship.

Flight planning data — Routes, waypoints, aerodrome preferences, and map interactions saved during flight planning sessions.

Usage and device data — Pages visited, features used, browser type, operating system, device identifiers, and IP address, collected for security and service improvement.

Profile data — Profile picture and any optional information you choose to add to your account.

We do not collect payment card details directly. Any payment processing is handled by third-party providers subject to their own privacy policies.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform and its features • Create and manage your account and authenticate your identity • Track and display your study progress, performance trends, and completion statistics • Personalise your learning experience and surface relevant content • Power the flight planning and aerodrome intelligence tools • Help pilots find one another by username, manage friend requests, exchange messages, and share questions or flight-planning content • Apply your chosen visibility settings to pilot activity, academic progress, and flight statistics • Deliver unread-message, friend-request, and other service notifications • Respond to support requests and investigate complaints or misuse • Maintain the security and integrity of the Platform • Comply with applicable legal obligations

We will not use your data for unrelated purposes without your separate consent.

4. Legal Basis for Processing

Where applicable data protection law requires a legal basis, we rely on:

• Contract performance — Processing necessary to deliver the Platform services you have requested • Legitimate interests — Improving the Platform, preventing fraud, and ensuring security, where not overridden by your rights • Legal obligation — Processing required to comply with applicable law • Consent — Where we have obtained your explicit consent for specific activities, such as marketing communications

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide Platform services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required for legal, regulatory, or fraud-prevention purposes.

Study progress records and assessment data may be retained in anonymised, aggregated form for platform analytics after account deletion. This data cannot be linked back to you.

6. Sharing Your Information

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

Sharing with other pilots — Your username and public profile information may be discoverable by other registered pilots. Accepted friends can receive the messages and aviation content you send them. Activity, academic progress, and flight statistics are disclosed only according to your current privacy settings. You can change those settings within Pilot Comms; changes apply to future access but cannot retract information another user has already seen, copied, or saved.

We may also share your information with:

• Infrastructure providers — Cloud hosting, database, and CDN services operating on our behalf under data processing agreements • Analytics and monitoring tools — Error tracking and performance monitoring services that process anonymised or pseudonymised data • Legal authorities — Where required by law, court order, or governmental authority • Business transfers — In connection with a merger, acquisition, or sale of all or part of our business

All third-party processors are contractually required to handle your data in accordance with applicable data protection law and only for the purposes we specify.

7. Cookies, Local Storage & PWA

We use cookies and browser storage technologies to:

• Keep you signed in to your account (authentication tokens) • Remember your preferences and in-progress study sessions • Cache application assets for offline use as a Progressive Web App (PWA) • Understand how you navigate the Platform for performance improvements

As a PWA, GRID uses service workers and local storage to enable offline functionality. This data is stored on your device and is not transmitted to our servers unless you are connected.

You can clear this data at any time through your browser or device settings. Disabling cookies will affect sign-in and session functionality. We do not use cookies for third-party advertising.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you • Correction — Request correction of inaccurate or incomplete data • Deletion — Request deletion of your personal data ("right to be forgotten") • Restriction — Request that we restrict processing in certain circumstances • Portability — Receive your data in a structured, machine-readable format • Objection — Object to processing based on legitimate interests

To exercise any of these rights, contact us through the Platform's support channels. We will respond within the timeframes required by applicable law.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS/TLS) for all Platform communications • Hashed and salted password storage — we never store passwords in plain text • Access controls limiting data access to authorised personnel • Regular security reviews and vulnerability assessments

No method of internet transmission or electronic storage is 100% secure. While we apply commercially reasonable protections, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

10. Children's Privacy

The Platform is not directed at persons under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data without appropriate consent, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by updating the date at the top of this page and, where appropriate, by in-platform notification. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

For any questions, concerns, or data rights requests relating to this Privacy Policy, please contact us through the Platform's support channels or via the contact information provided in your account settings.