Privacy Policy

This Privacy Policy explains how ClassiFly(“we”, “us”) handles personal data in the ClassiFly platform — the ClassiFly mobile app for flight instructors and the ClassiFly web console for training managers. It applies to both surfaces.

ClassiFly is a business-to-business tool. Accounts are created for instructors and managers by their own airline or training organisation. There is no public sign-up — you can only use ClassiFly with credentials issued to you by your organisation.

Data we process

We process only the data needed to run the service:

• Account & identity — your name and email address, used to sign you in and identify you within your organisation.
• Professional profile — your rank and fleet (aircraft type), and your organisation, used to place your assessments in context.
• Assessment data — the competency grades and observation markings you submit during calibration sessions.

We do not collect location data, contacts, photos, health data, or device advertising identifiers. We do not use third-party advertising or analytics SDKs, and we do not track you across other apps or websites.

How we use it

Your data is used solely to provide the service: to

• authenticate you and keep your session secure;
• record your assessments and calculate competency grades and agreement against the calibration standard;
• let your training organisation’s administrator manage their instructors and sessions.

We never sell personal data, and we do not use it for advertising or automated decision-making that produces legal effects.

Where it is stored

Data is stored using Supabase, our hosting and database provider, which provides authentication and database services on our behalf. Access is restricted by row-level security so that you and your organisation can only see your own organisation’s data.

Retention

We keep your data for as long as your organisation maintains its ClassiFly account. Deactivating an account suspends access to it but does not delete the underlying records, because your organisation’s calibration history needs to remain intact.

Where an individual instructor is removed and either they or their organisation asks us to erase their personal data, we replace their name and email address with a non-identifying placeholder, so retained assessment records can no longer be linked to them through the service. Their submitted assessment records, and any calibration results already published, are otherwise kept as they are: calibration is a comparison across several people’s assessments, and a published result must not change after the fact just because one participant later left. We retain data only for as long as necessary for these purposes, except where we must keep it to meet a legal obligation.

Your rights

Depending on where you live (for example, under UK/EU GDPR), you have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Because your account is managed by your airline or training organisation, please raise these requests with them in the first instance, or contact us using the details below.

Because assessment records are comparative and shared with other participants in the same calibration session, we fulfil a deletion request for your personal identifiers by replacing them with a non-identifying placeholder (see Retention, above) rather than removing the underlying assessment data outright.

Children

ClassiFly is a professional tool intended for use by adults in a workplace. It is not directed at children and we do not knowingly collect data from anyone under 16.

Changes

We may update this policy from time to time. When we do, we will revise the “Last updated” date above.

Contact

For any privacy question or to exercise your rights, contact us at admin@humbolt.io.