Privacy Policy
Summary
- You don’t need an account. Your study progress is stored on your device.
- The app uses a random installation ID. It is not your name or e-mail, but it is still an identifier, so we treat it as personal data.
- No ads, no tracking across other companies’ apps or websites, and we don’t sell or share your data.
Who we are
Remote Pilot Ace is published by Javokhirbek Akbarov, an individual developer based in Uzbekistan (“we”, “us”). We are the controller of the personal data described here. Contact: support@waypoint107.com.
What we collect
The app sends data to our server automatically when it starts and registers, when you answer questions, and when you send a problem report. It uses HTTPS for every request.
| Data | Where it lives | Why |
|---|---|---|
| Study progress: answers, mock exam results, bookmarks, settings | On your device | To run the app. Your progress is not backed up to our server. |
| Installation ID (random), app version, platform, OS version and language setting | Device and our server | To deliver content updates, to keep the app working on your device, and to link problem reports and purchase status to an installation |
| Answer statistics: for each answered question, the option chosen, the study mode and the time, with the installation ID | Our server | To find questions that are unclear or wrong and to improve explanations |
| Approximate location: country, state or region, and city, derived from the IP address when the app registers | Our server (the IP address itself is not stored) | To understand where users come from, in aggregate |
| Purchase status: your subscription and store transaction information, linked to an anonymous RevenueCat user ID | App Store / Google Play, RevenueCat, our server | To unlock paid features and restore purchases. We never see your card or payment details. |
| Crash and error reports: device model, OS and app version, stack trace, and an approximate location (country and city) that Sentry derives from the IP address | Sentry (the IP address itself is not stored) | To find and fix bugs, and to see where they happen. We do not include your free-text input or your installation ID. |
| Problem reports you send: question ID, reason, optional text, content version | Our server | To review and fix content |
We don’t collect your name, e-mail address, contacts, photos, precise location or advertising ID. If you e-mail us, we receive your e-mail address and message and use them only to reply.
Why and on what basis
- To provide the app and your subscription (registration, content updates, purchase status, restoring purchases). Where the GDPR applies, the legal basis is performance of our contract with you (Art. 6(1)(b)).
- To improve the content and keep the app secure (answer statistics, approximate location in aggregate, problem reports). The legal basis is our legitimate interest in finding wrong or unclear questions and understanding usage in aggregate (Art. 6(1)(f)). You can object at any time; see “Your rights”.
- To meet legal obligations, for example tax and accounting rules for purchases (Art. 6(1)(c)).
We don’t use automated decision-making or profiling that has legal or similarly significant effects on you. Providing this data is not a legal requirement; the app needs the installation ID to deliver content updates and purchase status.
Service providers
We share data only with service providers that process it on our behalf to run the app. They may use it only to provide their services to us, under terms that require them to protect it.
- Apple (App Store) and Google (Google Play): payments and subscriptions. Privacy policy: www.apple.com, policies.google.com.
- RevenueCat: subscription status and restoring purchases. Privacy policy: www.revenuecat.com.
- InterServer: hosting of our server and database. Privacy policy: www.interserver.net.
- Cloudflare: network security, content delivery and e-mail forwarding; it handles IP addresses and request data while delivering traffic. Privacy policy: www.cloudflare.com.
- Sentry: crash reports.
We may also disclose data if the law requires it.
Where data is processed
Our server is in the United States, and our service providers operate in the United States and other countries, so your data may be processed outside your country, including outside the European Economic Area. Where a provider receives personal data from the EEA, the UK or Switzerland, we rely on the safeguards in its data processing terms, such as the European Commission’s Standard Contractual Clauses.
Security
All traffic between the app and our server uses HTTPS (TLS). The database is not reachable from the internet, and the admin area requires two-factor authentication. We don’t store IP addresses. No system is perfectly secure, but we limit what we collect so that there is little to expose.
Retention
On-device data stays until you reset progress or uninstall the app. Server-side data (installations, answer statistics, closed problem reports and purchase events) is deleted automatically after 3 years. If you ask us to delete your data, we delete your installation record and keep its answers only as anonymous counts that can no longer be linked to you.
Your rights
Depending on where you live, you can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. You don’t need an account:
- Open Settings → About in the app and copy your installation ID.
- E-mail it to support@waypoint107.com with your request.
We use the installation ID to find your data and reply within 30 days. Purchases are handled by Apple, Google and RevenueCat; deleting data with us does not cancel a subscription. You can also delete everything on your device: Settings → Reset local progress, or uninstall the app. If you are in the EEA, the UK or Switzerland, you can complain to your local data protection authority; the list of EU authorities is at edpb.europa.eu.
California residents
In the last 12 months we collected these categories of personal information: identifiers (installation ID, RevenueCat user ID); internet or other electronic activity (answer statistics); approximate geolocation (country, region, city); commercial information (subscription status); device information (app and OS version, language setting); and content you send us (problem reports). We collect them from you and your device, and purchase status from Apple, Google and RevenueCat, for the purposes described above. We disclose identifiers and commercial information to the service providers listed above for business purposes.
We have not sold or shared personal information, including for cross-context behavioral advertising, and we don’t knowingly sell or share the personal information of anyone under 16. We don’t collect sensitive personal information. Because we don’t sell or share data, there is nothing to opt out of, including through browser opt-out signals. You can ask to know, delete or correct your data as described in “Your rights”, or through an authorized agent, and we will not treat you differently for doing so.
What we don’t do
- No advertising and no ad SDKs.
- No tracking across other companies’ apps or websites, and no selling or sharing of data.
- No collection of your name, e-mail, contacts, precise location or photos in the app.
Children
Remote Pilot Ace is meant for people preparing for the FAA Part 107 remote pilot knowledge test; a remote pilot certificate requires being at least 16. The app is not directed to children under 13, and we don’t knowingly collect personal information from children under 13. If you believe a child has used the app, contact us and we will delete the data.
Changes
We review this policy at least once a year and update it, with a new “Last updated” date, whenever our data practices change, for example when a new SDK is added.