Privacy Policy

We may collect the following categories of information:

a. Information you provide

• Name, email address, phone number, and ZIP code
• Account and profile information, including your role as a student or instructor and, for instructors, details such as your rate, ratings, aircraft, and availability
• Messages you exchange with other users through the Services
• Any information you submit through forms or communications

b. Automatically collected information

• IP address, browser type, device information
• Pages viewed, referring URLs, and usage data
• Cookies and similar tracking technologies

c. Payment information

Payment and subscription information processed through our payment provider, Stripe. We do not store full payment card details on our servers.

We use information to:

• Provide, operate, and improve the Services
• Connect students with flight instructors and enable messaging between them
• Communicate with you
• Process transactions and manage subscriptions
• Monitor and analyze usage
• Comply with legal obligations

Instructors can optionally connect their Google Calendar so the Services can schedule calls with students. This connection uses Google OAuth and is entirely optional. If you do not connect your Google account, none of the data described in this section is accessed.

a. What Google user data we access

When an instructor connects their Google Calendar, we request the following Google API scopes:

• calendar.readonly: read your free and busy availability across your calendars so the Services can show students your real open time slots.
• calendar.events: create and manage calendar events on your behalf so the Services can place a scheduled call (including a Google Meet video link) on your calendar and update or cancel it.

b. How we use Google user data

We use Google Calendar data only to provide the scheduling feature: to display your genuine availability to students and to create, update, or cancel the calendar event and Google Meet invite for a scheduled call. We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.

c. How we store Google user data

To keep the calendar connection working, we securely store an OAuth refresh token associated with your account. We do not retain copies of your calendar contents beyond what is needed to provide the feature. You can disconnect your Google Calendar at any time from your instructor profile. Disconnecting revokes our access and deletes the stored refresh token.

d. Limited Use disclosure

CFII's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use cookies and similar technologies to enhance user experience and analyze traffic. You can control cookies through your browser settings.

We may share information with:

• Service providers who perform services on our behalf, such as hosting, infrastructure, and authentication providers
• Stripe, for payment and subscription processing
• Other users where you choose to connect: students and instructors share profile and contact information with each other to arrange training
• Analytics and advertising partners, in accordance with this policy
• Legal authorities if required by law

We do not sell personal information.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the text message services.

We retain personal information only as long as necessary to fulfill the purposes described in this policy unless a longer retention period is required by law.

We implement reasonable administrative, technical, and physical safeguards to protect information. However, no method of transmission over the Internet is 100% secure.

Depending on your location, you may have rights to access, correct, or delete your personal information.

You can disconnect your Google Calendar at any time from your instructor profile, which revokes our access and deletes the stored OAuth refresh token. You can also revoke access directly from your Google account permissions page.

To request access to or deletion of your account and personal information, contact us at support@cfii.com. We will delete your data unless we are required to retain it by law.

The Services are not intended for children under 13, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

Some of our services, such as the instructor Sites and Ads product, are offered as recurring subscriptions billed through Stripe.

A subscription renews automatically until you cancel. You can cancel at any time, and your subscription remains active through the end of the current billing period. To manage or cancel a subscription, contact us at support@cfii.com.

If you have questions about this Privacy Policy, contact us at:

CFII
Email: support@cfii.com