Privacy Policy

Effective date: 26 August 2026

This policy explains what data the ADA Flight Deck application (“ADA”) collects, why, where it is stored, and how you can have it removed. It covers the iOS application and the web panel used by instructors.

Who is responsible

ADA is developed and operated by Nikolay Tyan, an independent developer.

Contact for any question about your data, including deletion requests: support.ada@protonmail.com

How accounts work

ADA has no public sign-up. Accounts are created by the flight training department of the organisation that issues them, and handed to you with a temporary password that you must change on first sign-in. If you do not have an account, you cannot use the application and no data about you is collected.

If you forget your password, your training department issues you a new temporary one. Passwords are never recovered, only replaced — nobody, including us, can read your existing password.

What we collect and why

We collect only what the application needs to work. There is no advertising, no analytics SDK, no tracking of any kind.

Identity and access

• Your full name and, if your organisation uses one, your employee number.
• Your email address — it identifies your account and is how you sign in.
• Your role in the application: pilot or instructor.

Purpose: to sign you in, to show your name in the application, and to let your instructors see whose results they are looking at.

Practice results

• Each self-check you complete: mode (quiz or matching), the aircraft types you selected, how many questions you were asked and how many you answered correctly, a per-section breakdown, the identifiers of the items you missed, and the start and finish time of the run.
• A cumulative summary of these results, used to show which sections you should revise.
• Progress through study modules.

Practice is not graded. Only your three most recent practice runs per module are kept in detail; older ones are reduced to the cumulative summary.

Purpose: to show you what to revise, and to let instructors see how pilots are progressing.

Graded tests and assignments

A graded test is different from practice: it produces a pass-or-fail record about you, and it is kept.

• The assignment. An instructor decides that you are to take a graded test in a given module. We record which module, which pilot, when it was assigned, and the name and employee number of the instructor who assigned it. We also record when and why the assignment was closed — because you passed, or because an instructor withdrew it.
• The result of each graded test. The module, the start and finish time, how many items you were asked and how many you answered correctly, the resulting percentage, the pass mark in force at the time, whether you passed, an item-by-item breakdown of your answers, and the revision of the source documents (FCOM, SOP) you were tested against.
• Every graded attempt is kept, not only the most recent one. Your pass-or-fail status and its date are shown to you on the module card and to instructors in the module analytics.

Purpose: to record, in a way that can be checked later, that a pilot has or has not demonstrated the required knowledge of a module. This is a professional training record, not a performance profile.

How this data is used, and how it is not. All results — practice and graded — are used for professional training purposes only. They are never sold, never shared with advertisers, and never used to build profiles for any other purpose.

Who sees them. You always see your own results. Every instructor can see the results of every pilot, including the results of other instructors — instructors are pilots too and take the same training. There are no separate squads or groups in the application: visibility is not narrowed by unit.

Account changes

When an instructor creates an account, deletes an account, or issues a new temporary password for one, and when you delete your own account, we record the event: who did it, over whom, when, and a snapshot of the name, email, employee number and role at that moment.

Purpose: accountability. Deletion is permanent and cascading, and without such a record it would be impossible to establish later who removed an account and when. This record is kept for up to 12 months and then deleted.

What we do not collect

We do not collect your location, contacts, photos, calendar, health data or device identifiers used for tracking. We do not use advertising networks or analytics services. We do not track you across other applications or websites.

Where your data is stored, and who else can access it

Supabase hosts the database and the authentication service. Data is stored in the Frankfurt region (Germany, European Union). Supabase acts as our processor: it may process your data only on our instructions, and we do not permit it to use your data for its own purposes. This is governed by a data processing agreement which incorporates the standard contractual clauses adopted by the European Commission for the protection of personal data.

Cloudflare hosts the instructor web panel and this page as static files. Cloudflare does not store personal data for us; it serves the interface, while all data lives in Supabase.

Expo (Expo Application Services) delivers application updates to installed copies of the app. For this it receives technical information about the application version, not about you.

Apple distributes the application through the App Store under its own terms.

Your data is not transferred to any other third party. Because storage is in Germany, your data leaves the country in which you use the application; the protections described here apply regardless of where it is stored.

How your data is protected

All traffic between the application and the server is encrypted. Passwords are never stored in readable form — the authentication service keeps only a hash. Access to every table is enforced by the database itself, so a pilot can read only their own results, while instructors can see the results of all pilots. Graded tests are scored on the server, never in the application, so a result cannot be altered from a device. Administrative keys exist only on the server and are never included in the application.

How long we keep it

Your profile, roles, practice results, graded test results, assignments and progress are kept while your account exists. Graded results are not thinned out over time: every attempt remains for as long as the account does.

When the account is deleted — by you or by an instructor — all of it is deleted with it, permanently and immediately, including every graded test result and every assignment addressed to you. Only the account-change record described above remains, for up to 12 months.

Data cached on your device (so that the application works without a network) is removed when you sign out or delete the application.

Your choices

Delete your account yourself. In the application: Settings → Delete account. This removes your profile, roles, progress and training results permanently.

Ask us. Write to support.ada@protonmail.com to ask what data we hold about you, to have it corrected, or to have your account deleted. We reply within 30 days.

Correct your details. Your name and employee number are maintained by your training department; ask your instructor to correct them, or write to us.

Deleting your account ends your access to the application. Your organisation may issue you a new account later; it will not restore the previous results.

Children

The application is intended for professional pilots and is not directed to children.

Changes to this policy

If this policy changes, the new version will be published on this page with a new effective date. Material changes affecting how your data is used will be communicated through your training department.