Privacy Policy

This Privacy Policy explains how flight-club (Flight Club, we, us) collects, uses, and protects personal information when you use Flight Club Academy (the Service). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information we collect

• Account information — your name, email address, and password (stored in hashed form). If you sign in with Google, we receive basic profile information such as your name, email, and profile picture.
• Payment information — when you subscribe, payments are handled by Stripe. Stripe collects and processes your card details; we receive limited billing and subscription information (such as status and the last four digits) but do not store your full card number.
• Usage and progress data — modules you open, training activity, scores, and progress you generate while using the Service.
• Technical data — log and device information such as browser type, approximate location derived from IP, and cookies necessary to keep you signed in.

2. How we collect it

We collect information directly from you (when you register, subscribe, or use the Service), automatically as you use the Service, and from third parties you choose to connect, such as Google (sign-in) and Stripe (payments).

3. How we use your information

• to create and manage your account and provide the Service;
• to process payments, memberships, and renewals;
• to track and show your training progress;
• to communicate with you about your account, security, and service updates;
• to maintain security and prevent misuse or fraud;
• to improve the Service; and
• to meet our legal obligations.

4. Cookies and browser storage

We use essential cookies to keep you signed in and to operate the Service securely. These are required for the Service to function. We do not use them to build advertising profiles.

We also use your browser’s local storage for small conveniences that stay on your device — for example, a trainer remembering your progress or personal best, or the site remembering that you have already seen a prompt. Clearing your browser data removes it.

5. Who we share information with

We do not sell your personal information. We share it only with service providers who help us run the Service, under appropriate obligations:

• Supabase — authentication and database hosting;
• Stripe — payment processing and subscription billing;
• Google — optional Google sign-in;
• Vercel — application hosting and delivery;
• YouTube (Google) — embedded lesson videos.

We may also disclose information where required by law or to protect our rights, users, or the public.

6. Overseas storage and processing

Our database is hosted in Sydney, Australia. Some providers listed above (for example Stripe, Google, and Vercel) may store or process information outside Australia. Where that happens, we take reasonable steps to ensure your information is handled consistently with the APPs.

7. Data security

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for any period required to meet legal, accounting, or reporting obligations. You can ask us to delete your account and associated data (subject to those obligations).

9. Your rights

You may request access to, or correction of, the personal information we hold about you, and you may ask us to delete it. To make a request, contact us using the details below. We will respond within a reasonable time and in accordance with the APPs.

10. Children’s privacy

The Service is not directed at children. If you are under 18, you may only use it with the involvement and consent of a parent or guardian, consistent with our Terms of Use.

11. Third-party links

The Service may link to external trainers and websites we do not control. This Policy does not apply to those third parties; please review their own privacy policies.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and change the “last updated” date above. If we make a material change to how we handle your personal information, we will take reasonable steps to notify you before it takes effect.

13. Contact and complaints

For privacy questions or requests, contact us via our contact page or at flight-club.com.au/contact-us. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.