Privacy Policy

FlyRecap Privacy Policy

Effective date and last updated September 20, 2026

This Privacy Policy explains how FlyRecap LLC collects, uses, discloses, retains, and protects personal information when you use the FlyRecap application, website, accounts, subscriptions, and related services.

FlyRecap is designed around private flight-training reflection and controlled student-instructor sharing. We do not sell personal information, use it for cross-context behavioral advertising, or use voice recordings to create biometric voiceprints. Because recordings, transcripts, and training information can be sensitive, review the sharing controls carefully and record other people only with legally required permission.

1 Scope and Controller

This Policy applies to the FlyRecap mobile application, FlyRecap website, support, and related services (collectively, the Service). It applies to Students, CFIs, prospective users, and website visitors. It does not apply to third-party sites, services, flight schools, instructors, or organizations that process information under their own policies.

The Service is offered only to individuals located in the United States who are participating in or supporting U.S.-based flight training. It is not offered or directed to individuals outside the United States.

FlyRecap LLC is the controller or business responsible for the personal information described in this Policy, except when another party independently determines how it will use information it receives from you. FlyRecap is organized in Minnesota and may be contacted using Section 21.

This Policy is a disclosure of our practices and does not waive or limit rights that cannot be waived under applicable law. The Terms of Use govern use of the Service.

2 Information We Collect

Category	Examples
Account and identity	Name, email address, authentication identifiers, account role, age or age range where needed, account status, password-recovery events, and related security information.
Parent or guardian approval	For users age 16 or 17: parent or legal guardian name, email address, relationship to the user, approval or decline status, typed electronic signature, date and time, and versions of the Terms of Use, Privacy Policy, and consent form presented.
Profile	Optional profile photo, display name, biography, training stage, certificate or rating information, and preferences.
Training content	Lesson dates, aircraft or lesson details, skills practiced, CFI-confirmed or user-entered ACS-related statuses, progress history, goals, strengths, challenges, reflections, notes, recaps, milestones, saved training questions or reminders, and other training information.
Audio and transcripts	Student recordings, imported audio, CFI voice feedback, amendments, audio metadata, transcripts, and related summaries.
Connections and communications	User discovery and connection requests, Student-CFI connections, shared recaps, handoff data, CFI feedback, support messages, reports, blocks, and notification status.
Generated and inferred information	AI-assisted summaries, suggested categories, progress observations, recurring training themes, skill trends, milestone eligibility, Between Flights suggestions, CFI Pulse indicators, and continuity or handoff summaries.
Subscription and commercial data	Product and plan, purchase and renewal status, entitlement, storefront, transaction identifier, and limited purchase history. Payment credentials are generally handled by the app store or payment provider.
Device sync and usage	Device type, operating system, app version, language, time zone, IP address, approximate location derived from IP, session and login events, sync status, feature interactions, crash reports, and diagnostics.
Notification data	Push notification token and notification preferences.
Support safety and moderation	Information included in questions, bug reports, privacy requests, abuse reports, block records, security reports, and related correspondence.

2.1 Account and Profile Information

We collect the information needed to create, authenticate, recover, and administer your Account, including account role, age or age range where needed, and account status. Profile photos are stored privately and displayed only as the Service permits, such as to the user and Connected Users. If the Service lets a CFI enter certificate information, FlyRecap does not represent that the information is verified unless the interface expressly says so.

Passwords are managed by our authentication provider and are not available to FlyRecap in readable form. We may process authentication identifiers, recovery links or recovery events, session information, and security tokens needed to sign you in, reset a password, protect the Account, and prevent unauthorized access.

For a user age 16 or 17, the Account may remain pending or restricted until a parent or legal guardian completes FlyRecap's approval process. We may collect the guardian's name, email address, relationship to the user, approval or decline response, typed electronic signature, timestamps, and the versions of the Terms of Use, Privacy Policy, and consent form presented. We use this information to administer eligibility, document approval or withdrawal, activate or restrict the Account, and respond to support, privacy, security, or legal requests. Guardian approval information is not displayed to CFIs or other Connected Users.

2.2 Training and User Content

We collect information you enter, upload, record, import, receive, or create through the Service. Training content is not an official pilot logbook and should not be your only copy of required records, endorsements, authorizations, or other legally required aviation records.

A Connected User may provide information about you, including instructor feedback, skill status, lesson observations, voice notes, text, and amendments. We associate that content with the submitting user and the intended student or lesson.

Some convenience features may store limited information only on your device, such as a local Between Flights completion state or an unsent personal reminder, unless the interface indicates that the information is synced. Local-only information may not follow you to another device.

2.3 Information We Do Not Intend to Collect

FlyRecap does not need Social Security numbers, financial account credentials, medical records, health insurance information, or precise real-time location for its core features. Please do not include those items in recordings, notes, photos, reports, or support messages. If a recording incidentally contains sensitive information, it will be handled as User Content under this Policy, but you remain responsible for having authority to provide it.

FlyRecap does not use audio to create a voiceprint, identify a person by vocal characteristics, or authenticate an Account biometrically. Ordinary audio files and transcripts may still be personal information even though they are not used as biometric identifiers.

3 Sources of Information

From you. Registration, profile, permissions, recordings, imports, notes, training responses, milestones, support, and privacy requests.
From a parent or legal guardian. Contact, relationship, approval or decline, electronic-signature, and consent-record information submitted through the minor approval process.
From Connected Users. Invitations, CFI feedback, voice or text messages, shared training information, reports, and connection changes.
Automatically. Technical, usage, authentication, security, crash, and diagnostic events generated when the Service is used.
From platforms and providers. Subscription entitlements and limited transaction data from Apple, RevenueCat, or another billing provider; authentication and system events from our infrastructure providers.
Created by FlyRecap. Transcripts, summaries, milestone determinations, progress patterns, handoff summaries, and other outputs generated from the information above.

4 How We Use Information

We use personal information for the following purposes:

create, authenticate, recover, maintain, and secure Accounts;
determine age-based eligibility, send and administer parent or guardian approval requests, document approval or withdrawal, and activate or restrict Accounts for users age 16 or 17;
provide recording, import, transcription, recap, reflection, Between Flights, milestone, ACS progress, training-insight, connection, handoff, CFI feedback, notification, export, and subscription features;
sync and restore server-backed Account and training information across supported devices and reconcile local access with current server permissions;
display information to Connected Users only as directed or permitted by the applicable connection, sharing, handoff, or instructor feature;
identify shared recaps that may need instructor attention and surface recurring themes or progress supported by information the CFI is already authorized to view;
process purchases, verify entitlements, restore purchases, and administer paid access;
communicate about security, password recovery, account activity, feedback, connections, feature events, updates, and support;
process reports, enforce blocks, prevent blocked users from reconnecting through the Service, and investigate abuse, impersonation, harassment, fraud, unlawful recording, and security incidents;
personalize the Service using your training stage, preferences, and activity;
debug, maintain, analyze, and improve reliability, usability, accessibility, and product performance;
enforce the Terms of Use and protect FlyRecap, users, and others;
comply with law, legal process, tax, accounting, and regulatory obligations; and
create aggregate or deidentified information for analytics and product improvement, provided we do not attempt to reidentify it except to test our deidentification methods or as permitted by law.

Where applicable law requires a legal basis, we rely on performance of our contract with you, legitimate interests in operating and securing the Service, compliance with legal obligations, and consent for optional processing such as microphone access or AI processing where required.

5 Audio Transcription and Artificial Intelligence

When you use an audio, transcription, or AI-assisted feature, FlyRecap may collect or receive the audio or text and send the portion needed to a transcription or AI provider. The provider processes it on FlyRecap's behalf to return a transcript, summary, category, training insight, or other requested output.

Before personal information is sent to a third-party AI provider, FlyRecap will provide an in-app notice and obtain permission where required. If you decline microphone or AI processing permission, you may use any manual text alternative the Service makes available, but audio or automated features may not function.

We use business or API services and do not authorize providers to use FlyRecap Service Content to train their general-purpose models unless you separately and expressly opt in. Providers may retain limited content or metadata for security, abuse prevention, or legal compliance under their business terms. Authorized personnel may access content only when reasonably necessary for support, security, legal compliance, or quality control subject to confidentiality obligations.

AI and transcription outputs may be wrong. They do not determine legal rights or make decisions about solo eligibility, certification, checkride readiness, endorsements, employment, insurance, credit, housing, or another legal or similarly significant matter.

FlyRecap uses controlled connections and private sharing rather than public lesson posting. Where discovery or search is available, users may find limited profile information and send a connection request without already having an invitation. Discovery or a pending request does not grant access to private training content.

Information	Typical visibility
Basic profile role and connection status	May be visible to the user, prospective connection recipients, and Connected Users as needed to identify the correct person and administer a connection request.
Parent or guardian approval information	Not visible to CFIs or other Connected Users. Accessible only to FlyRecap and service providers as reasonably needed to administer approval, security, support, privacy requests, or legal obligations.
Student recaps and transcripts	Visible to the student; visible to a CFI only when shared or otherwise made available to that CFI under the applicable connection or handoff feature.
Original student audio	Private by default; shared only through a feature that expressly includes the audio.
CFI feedback text transcript and audio	Delivered to the intended student and available to the submitting CFI while the Service permits. If the CFI later disconnects or deletes the CFI Account, substantive delivered feedback and transcripts may remain in the student's training history, with the source deidentified as Former CFI when appropriate. Raw CFI audio may be removed according to the audio-retention and account-deletion rules in Sections 12 and 13.
Progress and CFI Pulse information	Student-facing progress may use the student's broader training history. CFI-facing pulse or insight information is limited to information the CFI is authorized to view, such as recaps shared with that CFI; a CFI does not receive access to private recaps merely because a pattern or progress feature exists.
Progress handoff	Visible to the receiving CFI only as permitted by the handoff. A handoff does not include a prior CFI's name, avatar, user identifier, or raw voice recording. Prior instructor feedback included in a handoff is labeled generically, such as Prior CFI Feedback.
Reports and blocks	Reports are available to FlyRecap and service providers as needed for review and are not disclosed to the reported user except where necessary or required by law. Block status is used to enforce access and connection restrictions and is not a public profile field.
Subscription and payment details	Not shared with Connected Users, except that the Service may show whether access is active when necessary to provide a feature.

Removing a connection, blocking a user, or otherwise revoking access stops future access as supported by the Service. On the next successful authenticated synchronization, CFI-facing cached data is intended to reconcile to current server permissions. Revoking access does not erase information a recipient already saw, exported, copied, or lawfully retained outside FlyRecap, and it does not erase delivered CFI feedback that forms part of the student's own training history. Users must not redistribute another person's private training content without authority.

7 Progress Handoffs Milestones and Inferences

FlyRecap may analyze lesson content, transcripts, CFI feedback, user-selected or CFI-confirmed skill statuses, and activity to create progress observations, milestones, recurring training themes, suggested focus areas, Between Flights activities, CFI Pulse indicators, or a continuity summary. Some milestones are created automatically from objective app events, while others are entered or confirmed by a user.

Between Flights may change the activity highlighted to a student according to calendar time since the most recent recap and the availability of real supporting data. It does not mean FlyRecap knows when the student's next flight or lesson is scheduled. CFI Pulse may surface new shared recaps, unanswered shared recaps, recurring themes, or progress based only on information the CFI is authorized to view.

ACS-related percentages, task statuses, and history are organizational training-progress features. Where a status is identified as CFI-confirmed, it reflects information submitted through the Service by an authorized CFI; it is not an FAA determination.

These outputs are inferences and organizational aids, not official evaluations. A label such as Meets ACS Standard reflects the input or criteria used in the Service and does not itself establish compliance with an Airman Certification Standard, legal proficiency, solo eligibility, endorsement, or checkride readiness.

We do not use these inferences for targeted advertising or for decisions producing legal or similarly significant effects. You may correct the underlying information where the Service permits, and generated outputs may change when the source data changes.

8 How We Disclose Information

We may disclose personal information in the following circumstances:

At your direction. To Connected Users or other recipients when you use a sharing, connection, export, or communication feature.
To service providers. To companies that perform hosting, authentication, private storage, transcription, AI, subscription management, crash reporting, notifications, email, support, security, or similar functions for FlyRecap.
For safety and integrity. When reasonably necessary to detect or respond to fraud, abuse, security threats, unlawful activity, violations of our Terms, or danger to a person.
For legal reasons. To comply with law, subpoena, court order, regulatory request, or other valid process; protect legal rights; or establish, exercise, or defend claims.
In a business transaction. In connection with due diligence, financing, merger, acquisition, reorganization, bankruptcy, receivership, or sale of assets, subject to confidentiality and applicable notice obligations.
With professional advisers. To attorneys, accountants, auditors, insurers, and similar advisers bound by duties of confidentiality.
In aggregate or deidentified form. For product, research, business, or reporting purposes where the information cannot reasonably be linked to an individual.

We do not make private lesson content public. We may disclose information to a flight school, employer, or organization only when the user directs the disclosure, the organization is a Connected User or account administrator under a clearly identified feature, or disclosure is otherwise lawful.

9 Service Providers

Providers used by FlyRecap may include:

Supabase for authentication, databases, backend services, and private file storage;
OpenAI or another disclosed AI or transcription provider for transcription, summarization, categorization, and related AI-assisted features;
RevenueCat for subscription entitlement and purchase-management services;
Apple for App Store distribution, purchases, billing, subscription administration, and platform services; and
Infrastructure and operations providers for email, notifications, analytics, crash reporting, customer support, security, and hosting as the Service develops.

Providers receive only the information reasonably necessary for their functions and are required by contract or applicable terms to protect it and process it for authorized purposes. Providers may process information in the United States or other locations where they or their subprocessors operate. We will update this Policy when a new provider materially changes how personal information is processed.

10 Sale Targeted Advertising and Profiling

FlyRecap does not sell personal information for money or other valuable consideration and does not share personal information for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws. We do not use third-party advertising networks in the Service and do not allow analytics providers to build cross-app or cross-site advertising profiles from FlyRecap data.

FlyRecap does not profile users in furtherance of decisions that produce legal or similarly significant effects. If these practices change, we will update this Policy, provide required notice, and offer required opt-out or consent controls before the new practice begins.

11 Device Permissions Cookies and Similar Technologies

11.1 Microphone Photos and Notifications

FlyRecap requests microphone access only when needed to record audio. It may request camera or photo-library access when you choose to add or change a profile photo or import supported content. It may request notification permission to alert you about account, connection, feedback, subscription, or training events. You can change these permissions in device settings, but disabling them may limit the related feature.

11.2 Cookies SDKs and Diagnostics

The website and app may use essential cookies, local storage, SDKs, and similar technologies for authentication, security, preferences, entitlement verification, diagnostics, and analytics. We do not use these technologies for third-party behavioral advertising. Browser Do Not Track signals do not have a single legal or technical standard; where law requires recognition of a universal opt-out signal, we honor a valid signal for the covered processing. Because we do not sell or share data for targeted advertising, such a signal generally does not change current practices.

11.3 Local Storage Sync and Caches

FlyRecap may keep encrypted or access-controlled local copies, sync metadata, downloaded audio, or other cached data on a device so the Service can load efficiently or continue limited functionality during temporary network interruptions. Server-backed Account information may be restored or merged when you sign in on a supported device. Some convenience information may remain device-only when the interface indicates or the feature is designed that way.

Server authorization is authoritative for Connected User access. After a successful synchronization shows that a CFI or other Connected User no longer has permission to view certain content, FlyRecap is designed to remove that content from the app's authorized local view or cache on that user's device. Copies independently exported outside FlyRecap are not controlled by this synchronization.

12 Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining user-directed training history, resolving disputes, protecting security, enforcing blocks, reviewing reports, and satisfying legal, tax, accounting, and contractual obligations. Retention depends on the type of information, your settings, whether the Account remains active, whether the information forms part of another user's independent training record, and legal or technical requirements.

Information	Typical retention approach
Account and profile	While the Account is active, then deleted or deidentified after an account-deletion request subject to legal, fraud-prevention, security, and backup exceptions.
Parent or guardian approval records	For as long as reasonably necessary to administer the minor Account, document approval or withdrawal, resolve disputes, protect security, and meet legal or contractual recordkeeping obligations; then deleted or deidentified when no longer needed, subject to backup and legal exceptions.
Student lesson recaps notes transcripts ACS progress and milestones	Until the student deletes the content, deletes the Account, or the information is no longer needed to provide the Service, subject to shared-recipient, integrity, dispute, and backup limitations.
Student audio recordings	According to the available audio-retention setting or feature. Audio may remain until deleted by the student or Account deletion, or may be removed after successful processing when the Service offers that option. Failed or temporary uploads may be kept briefly for retry and troubleshooting.
Delivered CFI feedback text transcripts statuses and amendments	May remain with the intended student's training history after disconnection or deletion of the CFI Account so the student can retain training continuity. The deleted CFI's identity may be removed or replaced with a generic Former CFI label. This retained content is used only for the student's record, authorized handoffs, security, disputes, or legal obligations.
Raw CFI voice feedback	May be retained while needed to provide playback and according to the applicable audio-retention settings, but may be deleted during the CFI's account deletion or later retention cycle. Removing raw voice does not necessarily remove the delivered text or transcript from the student's training history.
Handoffs	For the active handoff period and any limited period reasonably necessary for access control, integrity, security, dispute resolution, or legal obligations. Handoffs do not include prior-CFI identity information and may continue to contain deidentified Prior CFI Feedback even if that prior CFI deletes an Account.
Connection block and sharing records	While needed to manage access, prevent blocked reconnection, preserve the integrity of training history, respond to disputes, and document security-relevant events.
Reports and moderation records	For as long as reasonably necessary to review and resolve the report, detect repeat abuse or fraud, protect users, enforce the Terms, and meet legal obligations.
Local-only Between Flights completion or personal reminders	May remain only on the device until the app is removed, local data is cleared, or the feature replaces the information. Local-only information may not be restored on another device.
Subscription transactions	For the period required to administer entitlements and satisfy tax, accounting, fraud-prevention, and legal obligations.
Security logs and diagnostics	For a limited period reasonably necessary to secure, troubleshoot, and improve the Service, then deleted or aggregated unless needed for an incident or legal obligation.
Support privacy and legal requests	For as long as needed to respond, document compliance, resolve disputes, and meet recordkeeping obligations.
Backups	Deleted information may persist temporarily in restricted backups until overwritten under the backup cycle and is not restored to active use except for disaster recovery or security needs.

Local cached copies may exist on a device to support playback, sync, or performance. FlyRecap is designed to clear protected audio caches at sign-out and Account deletion and to reconcile CFI-visible caches after authorization changes, but exported files, device backups, screenshots, and copies outside FlyRecap remain under the control of the device owner or third party.

13 Account Deletion and Content Deletion

You may initiate Account deletion through the in-app deletion control, currently located in Settings under Legal and Privacy, or by contacting hello@flyrecap.com. We begin processing verified deletion requests promptly and ordinarily complete deletion from active systems within 30 days, unless additional time or retention is reasonably necessary and permitted by law.

13.1 Student Account Deletion

Student Account deletion is intended to remove or deidentify the student's Account, profile, owned training content, stored student audio, server-backed reminders, connections, and related personal information from active systems. CFI feedback delivered into that student's training history is generally removed with the student's record, except to the extent a limited copy must be retained for another user's independent record, security, dispute resolution, legal process, or another permitted reason.

13.2 CFI Account Deletion

CFI Account deletion is intended to remove or deidentify the CFI's Account, profile, authentication information, avatar, active connections, and other CFI-owned personal information from active systems. However, CFI feedback that was already delivered to a student may remain as part of that student's independent training history so the student does not lose training continuity merely because the instructor leaves FlyRecap.

When delivered feedback is retained after CFI Account deletion, FlyRecap may remove the former CFI's name, user identifier, avatar, and other unnecessary identifying information and display the source generically as Former CFI. The substantive feedback text, transcript, date, skill-status information, and amendments may remain where needed for the student's record. Raw CFI voice recordings may be deleted during account deletion or according to the applicable audio-retention cycle even when the text or transcript remains.

A valid student-controlled handoff does not depend on the prior CFI keeping an Account. If preserved prior feedback is included in a handoff, the receiving CFI sees it generically as Prior CFI Feedback; the handoff does not include the prior CFI's name, user identifier, avatar, or raw voice recording.

13.3 Deletion Exceptions

Some information may remain after an Account deletion request when:

a recipient already received or exported it;
it forms part of another user's independent record and law or the Service relationship permits retention, in which case we limit the retained information and may remove identifiers;
it is needed to maintain a valid deidentified handoff or training-continuity record;
it is held in a restricted backup awaiting overwrite;
retention is necessary for security, fraud prevention, enforcing a block, reviewing an abuse report, tax, accounting, legal process, dispute resolution, or enforcement; or
the information is aggregated or deidentified so it is no longer reasonably linked to you.

Deleting a FlyRecap Account does not cancel an App Store or other externally billed subscription. Cancel the subscription separately through the billing provider. Deleting the app from a device does not delete the Account.

14 Your Privacy Rights and Choices

Depending on where you live and subject to legal exceptions, you may have the right to:

confirm whether we process personal information and access categories or copies of it;
correct inaccurate personal information;
delete personal information, subject to permitted retention such as deidentified Delivered CFI Feedback that forms part of another user's independent training history;
obtain information you provided in a portable format where technically feasible;
obtain a list of specific third parties to which personal information was disclosed where applicable law requires it;
opt out of sale, targeted advertising, or qualifying profiling;
withdraw consent for future optional processing;
use available connection, block, report, notification, audio, and sharing controls;
appeal a refusal to act on a request; and
exercise rights without unlawful discrimination or retaliation.

Use available in-app settings or email hello@flyrecap.com with the subject Privacy Request. Identify the right you want to exercise and the Account email. We may verify identity using information already associated with the Account and may deny or limit a request where we cannot verify it or an exception applies. An authorized agent may submit a request where law permits, subject to proof of authority and identity verification.

For a user age 16 or 17, a parent or legal guardian may also contact hello@flyrecap.com to withdraw approval, request review or correction of guardian approval information, or assist with a privacy request, subject to reasonable identity and relationship verification and the teen user's rights under applicable law. Withdrawing approval may require restriction, suspension, or deletion of the teen user's Account, subject to Section 13 and permitted retention.

Where applicable, we respond within 45 days and may extend once when reasonably necessary after providing notice. Requests are generally free, although law may allow a reasonable charge or denial for manifestly unfounded, excessive, or repetitive requests.

To appeal, email hello@flyrecap.com with the subject Privacy Appeal within a reasonable period after our response. Include the original request and why you believe the decision should change. We will respond within the period required by applicable law and explain how to contact the appropriate regulator or state attorney general if the appeal is denied.

15 U S State Privacy Disclosures

U.S. state privacy laws apply only when their scope and thresholds are met. FlyRecap may voluntarily honor reasonable access, correction, deletion, and portability requests even when a particular law does not require it.

For Minnesota residents, the Minnesota Consumer Data Privacy Act provides qualifying consumers with rights that may include access to categories, correction, deletion, portability, opt-out rights, information about qualifying profiling, and a list of specific third parties. The statute generally applies only after specified processing or revenue thresholds and includes a small-business exclusion, but Section 14 describes how to submit a request regardless.

FlyRecap does not currently sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or conduct qualifying profiling. Therefore, there is no current sale, sharing, targeted-advertising, or significant-decision profiling activity to opt out of. If that changes, we will add required controls before beginning the activity.

16 California Notice at Collection

For California residents, the table below summarizes the categories of personal information collected during the preceding 12 months, the purposes, and categories of recipients. We have not sold or shared any category for cross-context behavioral advertising during that period. We do not use or disclose sensitive personal information for purposes that require a right to limit under California law.

California category	Examples and purposes	Recipient categories
Identifiers	Name, email, Account and device identifiers; for minor Accounts, parent or guardian name, email, typed electronic signature, and approval record; authentication, password recovery, support, security, and eligibility administration.	Infrastructure, authentication, email, support, and security providers.
Customer records	Profile, training stage, optional certificate or rating information; guardian relationship and legal-document acceptance or consent versions; connection, block, and account status; provide, personalize, and administer the Service.	Connected Users only as the feature permits; service providers. Guardian approval and block or report details are not shared as ordinary Connected User content.
Commercial information	Subscription product, transaction and entitlement status; billing and access administration.	Apple, RevenueCat, payment and accounting providers.
Internet or electronic activity	Feature interactions, login and recovery events, IP address, sync status, diagnostics; security, troubleshooting, access reconciliation, and improvement.	Infrastructure, security, analytics, and crash-reporting providers.
Audio visual and sensory data	Voice recordings and profile photo; recording, feedback, identity, transcription, recap, and continuity features.	AI or transcription and storage providers; Connected Users only when shared or delivered.
Professional or education-related information	Training stage, lesson information, CFI feedback, ACS-related progress, skill progress, milestones, handoff information; continuity and organization.	Connected Users as directed or authorized; service providers.
Inferences	Progress trends, recurring training themes, Between Flights suggestions, CFI Pulse indicators, suggested focus areas, milestone and handoff summaries; user-facing product features.	Connected Users only where the feature and access rules permit; AI and infrastructure providers.
Sensitive personal information where included by a user	Account credentials handled by authentication provider; contents of private communications, reports, recordings, or feedback; provide and secure requested features.	Authentication, storage, AI or transcription, moderation, and intended Connected Users as applicable.

California residents may request to know, correct, delete, or obtain a portable copy of qualifying information and may use an authorized agent. We do not discriminate for exercising rights. California Shine the Light: we do not disclose personal information to third parties for their own direct marketing purposes.

17 Children and Teen Users

FlyRecap is intended only for users age 16 and older. Users under 16 may not create or use a FlyRecap Account. We do not knowingly permit or maintain Accounts for users under 16. If we learn that an under-16 user created an Account or that we collected personal information from such a user contrary to this Policy, we will take reasonable steps to restrict or deactivate the Account and delete or deidentify the information as appropriate, subject to limited retention permitted or required by law.

Users age 16 or 17 may use FlyRecap only after a parent or legal guardian completes the approval process provided by the Service. FlyRecap generally uses an age range rather than an exact birth date where the Service allows. Until parent or guardian approval is completed, the Account may remain pending or restricted and may not use recording, training-content, connection, communication, or other protected features.

FlyRecap may send a secure approval request to the parent or legal guardian email provided for a 16- or 17-year-old user. The approval process may request the guardian's name, email address, relationship to the user, required confirmations, typed full name as an electronic signature, and an approval or decline response. We record the response, date and time, and the versions of the Terms of Use, Privacy Policy, and consent form presented so that we can administer and document the authorization.

Parent or guardian approval information is not shown to CFIs or other Connected Users. A parent or legal guardian may withdraw approval by contacting hello@flyrecap.com. Withdrawal may require restriction, suspension, or deletion of the teen user's Account. We may retain limited approval records as described in Section 12 when reasonably necessary for security, dispute resolution, or legal or contractual recordkeeping.

We do not sell or share minors' personal information for targeted advertising and do not use teen data for decisions producing legal or similarly significant effects. If you believe a user under 16 is using FlyRecap, contact us promptly at hello@flyrecap.com.

18 Security

FlyRecap uses administrative, technical, and organizational safeguards designed to protect personal information. Depending on the system, these may include authenticated access, encrypted network transmission, private object storage, access-control and database authorization rules, least-privilege practices, protected secrets, logging, password-recovery controls, server-authoritative sharing permissions, and deletion or reconciliation of protected local caches when an Account signs out, is deleted, or loses access after a successful synchronization.

No method of transmission, synchronization, authentication, or storage is completely secure. You are responsible for protecting your credentials, recovery links, and device, installing updates, reviewing recipients before sharing, and keeping exports secure. Notify us promptly at hello@flyrecap.com if you suspect unauthorized access or disclosure.

19 United States Only Service

FlyRecap is based in the United States and is intended solely for individuals located in the United States who are participating in or supporting U.S.-based flight training. FlyRecap is not offered or directed to individuals outside the United States.

Personal information is primarily processed in the United States. Certain service providers or their personnel may process information from other locations where they operate, subject to their contractual confidentiality, security, and data-protection obligations.

If FlyRecap expands outside the United States, we will update this Policy and implement any additional notices, contractual safeguards, representatives, consent mechanisms, or other measures required before offering the Service in those locations.

20 Changes to This Policy

We may update this Policy as the Service, providers, or law changes. We will post the updated Policy and revise the date above. If a change materially affects how we use previously collected personal information, we will provide additional notice and obtain consent where required before applying the change. We encourage you to review the Policy when the Service changes.

21 Contact Us

Questions, privacy requests, appeals, parental requests, or complaints may be sent to:

FlyRecap LLC
11575 E Laketowne Dr
Albertville, MN 55301-4348
United States
hello@flyrecap.com

How FlyRecap Works

Five steps, and none of them happen in the airplane.

Fly

Recap

Connect

Prepare

Build

Make every lesson build on the last.