Privacy

Last updated 23 September 2026. PilotPathway.ai is a project of Equity Engine, a 501(c)(3) nonprofit, which is the organisation accountable for the information described here.

This is written to be read, not to be survived. If anything here is unclear, ask us at demetrius@pilotpathway.ai and we will answer in plain words.

What we hold about you

• Your account: email address, first name if you give one, and date of birth. Date of birth is required because some parts of this app work differently for people under 18, and we cannot protect a minor we cannot identify as one.
• Your learning: which lessons you have opened and marked complete, and your answers to quiz questions — including whether each answer was right.
• Your conversations with Captain Path, the AI ground instructor, so the tutor remembers what you have discussed and you do not start from nothing each time.
• Guardian links, if a parent or guardian is connected to your account, and a record of anything they do on your behalf.
• Usage records — how many tutor messages you have sent and what they cost us to answer. This is how we keep the app free and within budget.

What we never do

• We do not sell your information. Not to anyone, for any price.
• We do not show advertising, so nothing is profiled to target you.
• We do not share your conversations with the tutor with your school, your sponsor, or anyone else. Those are yours.

Who else sees it

We use a small number of companies to run the service. They process information on our behalf and are not permitted to use it for their own purposes:

• Supabase — stores your account and everything above.
• Vercel — runs the website and keeps short-lived technical logs.
• Anthropic — provides the AI model. Your messages to the tutor, and the lesson you are on, are sent there to generate each reply.
• Resend — sends our emails, so it holds the addresses we send to.

Your school, and only if you say so

If you are enrolled at a school or programme that uses PilotPathway, their staff can see your lesson progress and quiz results only if you choose to share them, and only with the organisation you chose. You can stop at any time on your profile, and it takes effect immediately. If you are under 18, a verified parent or guardian can also make that choice for you — and you can still stop it yourself.

Your conversations with the tutor are never included in what a school can see.

If you are under 18

You must be at least 13 to have an account. Some things — like live sessions with an instructor, when we build them — will need a parent or guardian to agree first. A verified guardian can also see that your account exists, share your progress with your school, download your data, and delete your account. We record who did what and when.

What you can do about it

• Download everything we hold about you, from your profile page, as a file you can keep.
• Delete your account, from your profile page. This removes your account, your progress, your quiz answers, and your conversations with the tutor.
• Stop sharing with a school at any time, without losing any of your own progress.

What deleting does not reach

Deleting your account removes your records from our database, but some copies live outside it for a while and are not ours to reach into: short-lived technical logs at Vercel, our email provider's record that a message was sent, our sign-in provider's logs, and the conversations that were sent to Anthropic to generate replies. A record that a guardian deleted a student's account is also kept, because a third party acting on a minor's data should leave a trace that outlives the account.

Two things we are still deciding

We would rather tell you what is unsettled than write something reassuring and vague:

• Whether a record that consent was given should survive deleting an account. Today it does not — deleting your account erases it. A school may later need proof that permission existed, and we are taking advice on how to hold both.
• Whether the record of a guardian's action should name the student. Today it does not: it keeps the guardian's email and the student's account number, deliberately not the deleted student's details.

When either is settled, this page changes and the date at the top changes with it.

Security

Access to your records is enforced by the database itself, not only by the app — so a mistake in our code is not enough to expose one student's data to another. Guardian invite links are stored hashed, expire, and work once.

Asking us something

Write to demetrius@pilotpathway.ai. If you are a parent, guardian, or school with a question about a student's data, say so and we will treat it as urgent. See also our terms.