AutoPilot · Flight School Operations
AutoPilot
AutoPilot is scheduling, dispatch, training-records, and billing software for flight schools, used through the web console at flywithautopilot.com and the AutoPilot iOS app. This page is the complete privacy policy for both, and the support contact for the app.
Effective 17 August 2026. AutoPilot is operated by Peter John-Jacob Herrmann, doing business as AutoPilot, in the State of Florida, United States. Privacy questions and requests: privacy@flywithautopilot.com.
The short version
- We collect what a flight school needs to run its operation — accounts, schedules, dispatch and maintenance records, training records, and billing — and nothing else.
- No advertising, no analytics, no usage tracking, no data brokers, and no sale of personal information. The website, the console, and the app run no analytics or advertising code at all.
- Your flight school controls the records it keeps in AutoPilot. We store and process them on the school's behalf to provide the service.
- Everything travels over encrypted connections and sits behind role-based access controls.
Whose data this is
AutoPilot is business software: a flight school, club, or operator signs up, invites its staff and students, and runs its operation on the platform. The operational records described below — schedules, dispatch entries, training folders, billing ledgers — are the school's records. The school decides who is enrolled, what is recorded, and how long records are kept; AutoPilot processes those records on the school's behalf. For your sign-in account itself, and for the public website, AutoPilot is directly responsible.
If you are a student or instructor with a question about a record your school keeps — a grade, a balance, an enrollment — your school's administrator is the right first contact. We support every such request the school passes to us.
What we collect
Everything below is provided directly by you or by your school. AutoPilot has no other sources: it buys no data, scrapes nothing, and receives nothing from data brokers or advertising networks.
Account information. Your name, email address, and the role your school assigns you (for example student, instructor, or staff). Sign-in uses your email address with a password or a one-time code; passwords are stored only in securely hashed form by our authentication provider.
Operational records. What you and your school enter to run the operation: reservations and scheduling requests, including preferred aircraft, instructor, time windows, and any notes; dispatch records such as routes and aircraft hobbs and tach readings at check-out and check-in; aircraft, maintenance status, and squawk reports; flight-training records, including enrollments in training courses, graded lesson folders, and instructor endorsements; billing records such as charges, credits, payments, and account balances; and qualification dates your school records to manage scheduling eligibility, such as a medical certificate expiration date.
Device and technical data. If you turn on notifications in the iOS app, your device's push token is registered with Apple's push service and with us so schedule updates can reach you. Our infrastructure providers keep standard server request logs — IP address, browser or device type, timestamps — for security and reliability. Your signed-in session is kept in your browser's local storage on the web, and in the system Keychain on iOS.
What we do not collect. No usage analytics or behavioral profiling. No advertising identifiers. No location. No access to your contacts, photos, camera, or microphone. No cookies used for advertising or analytics. If you use the app's optional App Lock, Face ID is evaluated by iOS on your device; biometric data never reaches the app or us — the app learns only whether the unlock succeeded.
The iOS app's App Store privacy label says the same thing: data linked to you is limited to contact info (your email address), identifiers (your account ID), and user content (the operational records you enter), all used solely for app functionality, and nothing is used to track you.
How we use it
- To run the service — showing the right schedules, records, and balances to the right people, according to the role your school assigned you.
- To send service messages — sign-in codes, invitations, and notices about your account — and, if you enable them, push notifications about your schedule.
- To keep the platform secure, prevent abuse, and debug problems.
- To answer support requests.
- To meet legal obligations.
We do not use personal information for advertising, do not sell or rent it, and make no automated decisions about you that carry legal or similarly significant effects.
Payments
Where a school enables online payments, they are processed by Stripe, Inc. Card details are entered into and handled by Stripe's own systems; AutoPilot never receives or stores full card numbers. We keep the resulting billing records — the charge, the amount, the balance — as part of the school's ledger. Stripe's processing is governed by Stripe's own privacy policy.
Who it is shared with
People at your school. Access is role-based. Instructors and staff see the records their role requires — an instructor sees their students' training folders, staff see the schedule and billing they administer — and students see their own records.
Service providers. Companies that host and run the platform for us, bound to process data only to provide their service: Supabase (database, authentication, and email delivery), Netlify (web hosting), Apple (push notification delivery), and, where payments are enabled, Stripe (payment processing). We may use additional providers of the same kinds; the current list is available on request.
Regulators and legal process. Flight-training records are federally regulated, and your school may be required to make them available to the FAA; we support that at the school's direction. We disclose information when required by law, subpoena, or court order, or to protect the safety and rights of users and of the platform.
Business transfers. If AutoPilot is acquired or its assets are transferred, records transfer with the service, with notice to affected schools and users.
We never sell personal information and never share it for cross-context behavioral advertising.
How long we keep it
Account data is kept while your account is active and deleted or de-identified within a reasonable period after closure. Operational and training records belong to the school, and aviation regulations require flight schools to retain certain training records — so records your school must keep are retained according to its instructions and legal obligations, and may persist after your own account closes. Server logs are short-lived and rotate automatically.
Security
All traffic is encrypted in transit, and data is encrypted at rest by our database provider. Access is limited by row-level security and role-based permissions, so each account can reach only the records its role allows. No internet service can promise perfect security, but the platform is built so that the shortest path to your data is through your own sign-in — keep it protected, and use the app's Face ID lock if others handle your device. Report suspected vulnerabilities or incidents to privacy@flywithautopilot.com.
Your rights and choices
You can request access to, correction of, export of, or deletion of your personal information by emailing privacy@flywithautopilot.com, or through your school. Where a record is controlled by your school — a training folder, a ledger — we refer the request to the school and support its response. Deletion has limits: records a school is legally required to retain, such as federally regulated training records, cannot be deleted while the retention obligation lasts.
Push notifications can be turned off at any time in iOS Settings. Service emails — sign-in codes, invitations, account notices — are part of operating your account; we send no marketing email without consent.
United States state privacy laws. Residents of California and other states with comprehensive privacy laws have rights to know, access, correct, delete, and port personal information, and to be free of discrimination for exercising those rights. The categories we collect, the purposes, and the recipients are exactly those described above. We do not sell personal information, do not share it for cross-context behavioral advertising, and do not use it for targeted advertising — there is no sale or sharing to opt out of, and browser opt-out signals such as Global Privacy Control are honored by default.
Outside the United States. AutoPilot is operated from the United States, and data is processed there and in other countries where our providers operate. Where the GDPR or UK GDPR applies, we process personal data to perform our contract with you and your school, to meet legal obligations, for our legitimate interests in running and securing the service, or with your consent — and you additionally have the rights to object, to restrict processing, and to lodge a complaint with your supervisory authority.
Children
AutoPilot is a tool for flight-training providers, and flight students can be minors. Accounts for users under 18 are created through their school's enrollment and require parental or guardian consent, as our Terms of Service state. The platform is not directed to children under 13, and we do not knowingly collect personal information from a child under 13; if we learn we hold such information, we will delete it.
Changes to this policy
Updates are posted at this address with a new effective date. Material changes are announced through the service or by email before they take effect. Earlier versions are available on request.
Support
This page is also the support contact for the AutoPilot iOS app. For help with your schedule, roster, balance, or any record your school keeps, start with your school's administrator — they run the operation and can fix most things directly. For everything else — bugs, sign-in trouble, privacy requests, or questions about this policy — email privacy@flywithautopilot.com. Mail there reaches the team that builds AutoPilot, and we answer as quickly as we can.
Effective and last updated 17 August 2026 · Covers the flywithautopilot.com web console and the AutoPilot iOS app · Privacy pages for other apps