Privacy Policy

1. Information We Collect

Information You Provide Directly

• Account information: Name, email address, phone number, profile photo
• Role-specific information: FAA certificate numbers, ratings, endorsements (CFIs); medical certificate information (students); aircraft registration and maintenance details (flight schools and organizations that manage aircraft)
• Identity verification documents: Government-issued ID uploaded for verification purposes
• Emergency contact information: Name, relationship, and contact details for designated emergency contacts
• Payment information: The public wallet address you connect, and the transaction signatures of payments made through the platform. RUDDR never holds your private keys and does not accept card payments, so no card details exist for RUDDR to store. If you buy USDC with a card, that purchase happens at MoonPay, which collects the card and identity details it needs under its own privacy policy. RUDDR is not a recipient of an invoice payment — those settle directly between users — and holds only the record of one. Note that a Solana transaction is a public, permanent record on a network RUDDR does not control and cannot erase
• Communications: Messages sent through the in-app messaging system

Information Collected Automatically

• Usage data: Pages visited, features used, time spent on the platform
• Device information: Browser type, operating system, IP address
• Push notification tokens: Device identifiers for delivering push notifications (if you opt in)

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the RUDDR platform
• Prepare and record invoices, and record subscription payments, receipts, and refunds
• Connect CFIs with their students and with the flight schools and organizations they belong to
• Facilitate flight instruction scheduling and grade tracking
• Send push notifications and emails (based on your preferences)
• Verify identity and credentials as required by aviation regulations
• Improve our services and develop new features
• Comply with legal obligations
• Detect and prevent fraud or abuse

3. Information Sharing and Disclosure

We share your information only in the following circumstances:

• With other users: Profile information visible to connected CFIs, students, or organization staff as required for the service (e.g., a CFI can view their student's profile)
• Service providers: Clerk (authentication), Convex (database and file storage), Vercel (hosting), Resend (email delivery), Sentry (error monitoring), PostHog (product analytics), a Solana RPC provider used to read and submit on-chain transactions, and MoonPay (card-to-USDC purchases, only if you use it) — each bound by data processing agreements
• Legal requirements: When required by law, court order, or government authority
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: For any other purpose with your explicit consent

We do not sell your personal information to third parties.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

Flight training records and endorsements may be retained for longer periods to comply with FAA record-keeping requirements.

Financial records — subscription receipts, refund requests, and the audit trail of who approved a refund — are retained after an account is deleted, for as long as tax, accounting, and anti-fraud obligations require. A receipt is immutable by design: it is never edited, and a correction is recorded as an additional entry rather than a change to the original.

Payments that settle on the Solana network are recorded on a public blockchain. That record is outside RUDDR's systems and cannot be altered or deleted by RUDDR, or by anyone.

5. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data, subject to the retention requirements in section 4 — and noting that an on-chain payment record cannot be deleted by anyone, RUDDR included
• Data portability: Export your data in a machine-readable format via account settings
• Opt-out: Manage notification preferences in account settings; unsubscribe from marketing emails
• GDPR rights (EEA users): Right to restrict processing, right to object, right to lodge a complaint with a supervisory authority

To exercise these rights, use the data export and account deletion features in Settings, or contact us at support@flyruddr.app.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The RUDDR platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the platform. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

9. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: