Privacy Notice

1. Who we are

Pocket Type Rating SF50 is operated by One Dot Above LLC, which is the data controller for the personal data described in this notice. Contact: info@trainsf50.com.

2. What we collect

• Account data: name and email address, login credentials (hashed), and two-factor authentication settings (TOTP secrets and hashed recovery codes).
• Learning data: quiz answers and scores, module completion, audio briefing progress, and any documents or notes you edit in the app.
• Support and communications: messages you send us and records relating to your training voucher (voucher code, status, and confirmation records).
• Usage and device data: basic telemetry, device identifiers, and IP address used for security and fraud prevention.

Payment card details are collected and processed by Paddle (our Merchant of Record); we never see or store your full card number.

3. Why we use it (legal bases)

• Contract performance: creating your account, providing the Service, syncing your progress, and issuing your training voucher.
• Legitimate interests: security and fraud prevention, product improvement, and customer support.
• Consent: optional marketing communications, where applicable.
• Legal obligation: records we must keep for tax, accounting, or legal compliance.

4. Who we share it with

• Service providers/subprocessors: cloud hosting, database, and analytics providers that process data on our behalf.
• Merchant of Record (Paddle): for the sale of the product, subscription management, payments, tax compliance, and invoicing.
• Aero City Jets: your name, email, and voucher code are shared with Aero City Jets so they can verify and redeem your training voucher.
• Professional advisers (legal, accounting) and authorities where required by law.

5. International transfers

Our service providers may process data outside your country, including in the United States. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses or adequacy decisions.

6. Retention

We keep your data while your account is active. When it is no longer needed (for example after account deletion, subject to legal retention obligations), it is deleted or anonymised.

7. Your rights

Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict, or port your personal data, to object to processing, to withdraw consent, and to complain to a supervisory authority. We respond to verified requests within one month. Contact info@trainsf50.com to exercise your rights.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, access controls, and mandatory two-factor authentication for all accounts.

9. Cookies

We use essential cookies/storage only — for authentication sessions and security. We do not use analytics or marketing cookies. Essential cookies cannot be disabled because the Service will not function without them.