Privacy Policy

Accounts are created by the flight school or by request and approval — this is not a consumer service you sign up for anonymously. Students, renters, instructors, mechanics, and staff all use the same application, with what each person can see governed by their assigned role.

• Account and contact details — name, email address, phone number, mailing address, and date of birth. Date of birth is collected because flight training eligibility and certificate issuance depend on it.
• Training records — reservations, flight times, lesson grades, maneuver and exam results, endorsements, and instructor notes.
• Documents you upload — pilot and medical certificates, government-issued identification, and similar records required to verify eligibility to fly.
• Billing records — invoices, payments, and account balances. Full payment card numbers are never stored on our servers; card details go directly to our payment processor, and we retain only a token plus the last four digits and card brand for display.
• Authentication data — a password hash (never the password itself), and, if you enable them, multi-factor authentication settings and a hashed sign-off PIN.
• Limited technical data — IP address at sign-up and timestamps of sign-in attempts, used to enforce rate limits and detect abuse.

Two optional Google integrations exist. Both are opt-in and neither is required to use the application.

• Sign in with Google requests only your basic profile and email address, and is used solely to identify your existing account.
• We request no calendar access of any kind. Reservations reach your calendar through a private subscribe link you add yourself, which works with Google Calendar, Apple Calendar and Outlook alike. We do not read, write to, or hold any credential for anybody's calendar.

Sign in with Google is the only Google permission this application asks for. You can review or revoke it at myaccount.google.com/permissions.

Plane Simple Schedule's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You may generate a private calendar subscription link (an ICS feed) to view your reservations in Google Calendar, Apple Calendar, Outlook, or another calendar application. Because calendar applications cannot sign in, the link itself is the credential: anyone holding the URL can see that schedule. Treat it as private, and regenerate or revoke it from your dashboard if it is ever shared. The feed exposes only your own reservations.

We use your information to operate the flight school: to schedule and dispatch aircraft, to track training progress and currency, to verify that pilots are legally eligible to fly, to bill for services rendered, and to contact you about your reservations and account. We do not sell personal information, and we do not use it for advertising.

Flight school staff can see the records their role requires — instructors see their students' training records, billing staff see invoices, maintenance staff see aircraft and squawk records. The flight schedule (who has an aircraft reserved and when) is visible to other users of the school, as it would be on a dispatch board. Your documents, date of birth, address, and account balance are not.

We share data with a small number of processors, only as needed to deliver the service:

• Stripe — payment processing. Card details are submitted directly to Stripe.
• Resend — transactional email (verification, invitations, notifications).
• Google — only if you enable Sign in with Google or Calendar sync.
• Render — application and database hosting.

The application also retrieves public aviation weather and publicly broadcast aircraft position data from third-party aviation services. No personal information is sent to them.

Traffic is encrypted in transit. Passwords and sign-off PINs are stored as one-way hashes, never in a recoverable form. Uploaded documents and stored Google credentials are encrypted at rest. Access within the application is governed by per-role permissions. No system is perfectly secure, but we treat identity documents and payment data as the most sensitive information we hold and handle them accordingly.

Training records, endorsements, and billing history are retained as long as the flight school needs them for operational, tax, and regulatory purposes — pilot training records in particular may need to be produced years later. If you close your account, contact us and we will delete information we are not required to keep.

• View and correct your profile information from your account at any time.
• Revoke a calendar subscription link, or generate a new one, from your dashboard.
• Request a copy of your data, or its deletion, by contacting the flight school.

Flight training is open to minors, and a student may be under 18. Accounts for minors are created with the involvement of the flight school and a parent or guardian. We do not knowingly collect information from children outside of that training relationship.

If this policy changes materially we will update the date above and notify account holders. For any privacy question, or to request access to or deletion of your data, contact the flight school through the contact details on your account or at the school's published address.