Pilotryx Privacy Policy
Effective Date: July 20, 2026
This Privacy Policy explains how personal information is collected, used, stored, and disclosed through the Pilotryx website, the PilotCheck mobile application, Pilotryx testing programs, communications, and related services.
1. Who is responsible for your information
Pilotryx is a trade name operated by an individual software developer.
The individual operating Pilotryx determines how personal information collected through the Pilotryx website, PilotCheck, and Pilotryx testing programs is processed.
In this Policy, “Pilotryx,” “we,” “us,” and “our” refer to that individual operator.
“PilotCheck” is the general-aviation pilot companion application published under the Pilotryx brand.
Privacy inquiries and requests may be sent to:
General product and support inquiries may be sent to:
2. Scope
This Policy applies when you:
- Visit the Pilotryx website;
- Join an early-access or beta-testing list;
- Complete a tester questionnaire or qualification form;
- Create or use a PilotCheck account;
- Use online features provided by PilotCheck;
- Contact Pilotryx or submit feedback; or
- Request support, access, correction, deletion, or an unsubscribe.
Third-party websites, app stores, operating systems, and services have their own privacy practices.
3. Information collected through the website and testing program
Early-access contact information
When you join the Pilotryx testing list, we collect your email address.
We may also collect a separate email address that you identify as the address associated with your Google Play account.
Tester qualification information
When you complete a testing or qualification form, we may collect information you choose to provide, including:
- Your pilot role or level of aviation experience;
- Your preferred or available mobile platform;
- Whether you are interested in Android closed testing;
- Testing availability or participation status;
- Answers to tester-selection questions;
- Product interests, feedback, and notes; and
- Communications relating to invitation, activation, testing, or follow-up.
Pilotryx does not require you to submit medical information, government-issued identification, copies of pilot licences, or sensitive aviation records through tester forms.
Campaign and source information
We may record how a submission reached us, including:
- Submission source;
- Referring page or website;
- Landing-page path;
- UTM source, medium, campaign, content, and term values; and
- Similar campaign-attribution information included in a link.
We use this information to understand which recruitment sources are effective. We do not currently use it to build advertising profiles or serve targeted advertisements.
Website analytics information
If you enable Analytics Cookies, Google Analytics may process online identifiers and page or activity information to provide aggregated website measurement. We use this information to understand and improve the website, not for targeted advertising.
Technical and security information
When you visit the website or submit a form, our systems and service providers may process:
- Browser and user-agent information;
- IP address;
- A cryptographic hash derived from the IP address;
- Submission date and time;
- reCAPTCHA tokens and verification responses;
- Security, confirmation, qualification, and unsubscribe tokens; and
- Technical logs needed to operate, secure, and troubleshoot the services.
A hashed IP address may still be treated as personal information where it remains capable of being associated with a person or device.
Workflow and communication records
We may maintain operational information relating to a testing application, including:
- Current application or participation status;
- Confirmation, qualification, invitation, activation, testing, completion, or unsubscribe dates;
- Last-contact and planned-follow-up dates;
- Follow-up count;
- Internal administrative notes; and
- Whether an automated workflow successfully processed the record.
4. PilotCheck account information
When account features are enabled, PilotCheck may collect:
- Name;
- Email address;
- Optional pilot-licence number;
- Account identifier;
- Authentication and session information;
- Account-creation and account-update information; and
- Password-reset and security events.
Authentication is provided using Supabase.
Password credentials are submitted to the authentication provider and are not stored by Pilotryx as readable plaintext.
Do not use another person’s licence number or account information.
5. Information stored locally in PilotCheck
The current PilotCheck beta stores aircraft and checklist information locally on your device using application storage.
This may include:
- Aircraft profiles;
- User-created or imported checklists;
- Checklist items, descriptions, and notes;
- Checklist categories, order, favourites, and related preferences;
- Theme and application preferences; and
- Metadata needed to maintain the local application database.
PilotCheck may temporarily process FRAT selections, timer values, conversion inputs, and similar tool inputs while you use the relevant feature.
Locally stored information is not automatically uploaded to Pilotryx unless a feature expressly tells you that synchronization or upload will occur, or you intentionally share the information through support, feedback, an export, or another user-initiated action.
Removing PilotCheck, clearing application storage, resetting your device, or replacing your device may delete locally stored information.
6. Files selected by you
PilotCheck may allow you to choose a file from your device to import checklist information.
The application accesses the file you select through the device’s file-selection interface. Imported checklist content is processed and stored locally unless you separately choose to share it.
You are responsible for ensuring that a selected file does not contain information you do not wish to store in PilotCheck.
7. Information not currently collected for Pilotryx’s own purposes
Pilotryx does not currently use PilotCheck or the website to collect for its own purposes:
- Precise or continuous device location;
- Contact lists;
- Call or SMS data;
- Microphone or camera recordings;
- Health or medical data;
- Payment-card or banking information;
- Advertising identifiers;
- Cross-site advertising profiles;
- Automated flight tracks or flight recordings; or
- Aircraft-maintenance or regulatory-compliance records.
A device platform, app store, or service provider may independently process information under its own policies.
This Policy must be updated before enabling a new crash-reporting tool, advertising technology, payment service, location feature, cloud-synchronization feature, or flight-recording feature. Google Analytics is described in this Policy and is activated only after Analytics Cookies are enabled.
8. How personal information is used
We use personal information to:
- Register and manage early-testing applications;
- Confirm email addresses and prevent duplicate or fraudulent submissions;
- Assess tester eligibility and platform compatibility;
- Send requested invitations, qualification forms, testing instructions, and product updates;
- Create, authenticate, secure, and support PilotCheck accounts;
- Respond to questions, feedback, privacy requests, and support requests;
- Operate, secure, troubleshoot, and improve the website and application;
- Measure recruitment sources and testing-program progress;
- Prevent spam, fraud, abuse, attacks, and unauthorized access;
- Maintain unsubscribe and suppression records;
- Establish, exercise, or defend legal claims;
- Comply with applicable legal obligations; and
- Protect users, Pilotryx, and third parties.
Pilotryx does not sell personal information.
Pilotryx does not currently use personal information for third-party targeted advertising.
9. Legal grounds for processing
Where applicable law requires a legal basis, we rely on one or more of the following.
Contract and requested actions
Processing may be necessary to provide requested account functionality, beta participation, support, or related services, or to take steps you request before providing those services.
Consent
We may rely on consent for early-access communications, optional product updates, tester communications, or optional technologies where consent is legally required.
You may withdraw consent or unsubscribe from optional communications at any time.
Legitimate interests
We may process information for legitimate interests including:
- Operating and improving Pilotryx;
- Recruiting and managing suitable beta testers;
- Securing systems and preventing abuse;
- Understanding recruitment-source effectiveness;
- Responding to users; and
- Maintaining records needed to operate the services.
We consider these interests against the rights and reasonable expectations of affected users.
Legal obligations and claims
We may process information where necessary to comply with applicable law or to establish, exercise, or defend legal rights.
10. Service providers and recipients
Pilotryx uses service providers that process information to help operate the services.
Confirmed categories and services currently include:
- Cloudflare: website hosting, content delivery, network security, and server-side website functions;
- Supabase: database hosting and PilotCheck account authentication;
- Google reCAPTCHA: spam, fraud, automated-abuse, and security-risk assessment;
- Google Analytics: aggregated website measurement after Analytics Cookies are enabled;
- Pilotryx-operated workflow automation: processing testing applications and triggering follow-up workflows;
- Email-delivery services: sending confirmation, qualification, invitation, support, and testing communications; and
- Apple and Google: application distribution, installation, app-store functions, and store-provided reporting under their respective policies.
We may also disclose information:
- To contractors or professional advisers who are subject to appropriate confidentiality obligations;
- Where required by applicable law, a court order, or a valid governmental request;
- To investigate fraud, abuse, security incidents, or threats;
- To protect legal rights, safety, systems, or users; or
- As part of a financing, reorganization, sale, or transfer of the relevant service, subject to applicable law.
Pilotryx does not authorize service providers to use personal information for their own targeted advertising.
11. reCAPTCHA
The Pilotryx testing form uses Google reCAPTCHA to distinguish legitimate activity from automated or abusive submissions.
When reCAPTCHA is executed, Google may process information such as IP address, browser and device characteristics, user interactions, and security signals.
reCAPTCHA may use necessary browser storage, including the _GRECAPTCHA cookie.
Pilotryx uses reCAPTCHA information for security, fraud prevention, spam prevention, and abuse prevention.
12. International processing
Pilotryx service providers may process information in jurisdictions other than the jurisdiction where you live.
Those jurisdictions may have different data-protection laws.
Where required, Pilotryx will rely on an appropriate legal transfer mechanism, contractual safeguards, an adequacy decision, or another lawful transfer ground.
You may contact privacy@pilotryx.com for additional information about applicable safeguards.
13. Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy.
The criteria generally applied include:
- Testing-list and qualification records: while recruitment or testing remains active and for a limited period afterward to administer participation, evaluate the program, and address disputes;
- Unsubscribe records: for as long as needed to ensure that an unsubscribe request continues to be respected;
- Account information: while the PilotCheck account remains active and for a limited period following deletion, subject to backup, security, and legal requirements;
- Communications and support records: while needed to resolve the relevant matter and maintain appropriate records;
- Security and technical logs: for a period appropriate to security, investigation, and troubleshooting needs;
- Legal records: for the period required by applicable law or needed to establish, exercise, or defend legal claims; and
- Local PilotCheck data: until you delete it, clear application storage, reset the device, or remove PilotCheck.
When information is no longer required, we delete it, anonymize it, or isolate it until deletion from backups is reasonably possible.
14. Account and data deletion
A PilotCheck user may request deletion of their account and server-side account information by emailing privacy@pilotryx.com from the account’s registered email address.
After reasonably verifying the request, Pilotryx will delete or anonymize the relevant account and associated server-side information unless retention is required or permitted for legal, security, fraud-prevention, or dispute-resolution purposes.
Deleting an account does not automatically erase information stored only on your device.
To remove locally stored PilotCheck information, delete the relevant records in PilotCheck, clear the application’s storage, or uninstall PilotCheck.
A minimal record of an unsubscribe or deletion request may be retained where necessary to demonstrate compliance and avoid contacting you again.
15. Your privacy rights
Depending on applicable law, you may have the right to:
- Request access to personal information;
- Correct inaccurate information;
- Request deletion;
- Restrict or object to certain processing;
- Withdraw consent;
- Request a portable copy of certain information;
- Opt out of optional or promotional communications;
- Complain to an appropriate privacy or data-protection authority; and
- Receive information about applicable international-transfer safeguards.
To exercise a privacy right, contact:
We may need to verify your identity and clarify your request. We will respond within the period required by applicable law.
Rights may be subject to lawful limitations or exceptions.
16. Security
Pilotryx uses technical and organizational safeguards designed to protect personal information.
Measures may include encrypted network transmission, authentication controls, restricted service credentials, access limitations, and hashing of IP addresses retained with testing-list records.
No application, database, transmission, or storage system can be guaranteed completely secure.
You are responsible for protecting your password, device, email account, and locally stored PilotCheck information.
Suspected security problems may be reported to:
17. Communications and unsubscribing
We may send operational messages relating to confirmation, qualification, invitations, account security, testing participation, support, and material service changes.
Where a communication is optional or promotional, you may unsubscribe using the link provided in the message or by contacting privacy@pilotryx.com.
Unsubscribing from optional updates may not prevent essential account, security, privacy, or active-testing communications.
18. Children
Pilotryx is designed for general-aviation pilots and aviation students and is not directed to children under 13.
We do not knowingly collect personal information from a child who cannot legally consent without the required parent or guardian authorization.
A parent or guardian who believes that a child submitted personal information without appropriate authorization should contact privacy@pilotryx.com.
19. Changes to this Policy
We may update this Policy when PilotCheck features, service providers, information practices, or legal requirements change.
We will post the revised Policy with an updated effective date. Where required, we will provide additional notice or request consent.
20. Contact
Privacy inquiries and requests:
General product and support inquiries: