Privacy policy

Who is responsible

[Operator name], [operator address or location], runs Glidepath and decides how your data is used. Contact: [contact email].

What we collect and why

Trying a lesson without an account creates no record of you beyond the short-lived technical logs described below. With an account, we keep:

• Your email address, to send you a one-time sign-in code and to tell your account apart from others.
• Your setup: console, controls, rudder, cockpit and display (flat screen or VR), plus your captions, sounds and vibration, and graphics preferences, so session plans and the player match your equipment.
• Lesson progress: when you watched, checked and practiced each lesson, and where you stopped, so Learn can show your next step and resume.
• Practice sessions: the plan, minutes, your own rating of each task and the focus note you write, so you have a log you can show an instructor. Ratings are yours; we never turn them into a score.
• Technical records our providers keep for a short time to run the service securely: IP address, browser type, request times and error messages.

Your theme choice and your saved offline lessons stay only on your device. The token that keeps you signed in is stored on your device and sent only to our own backend to identify you.

What we do not do

No ads, no trackers, no advertising or analytics cookies, no selling or sharing of your data for marketing, and no profiling. We do not read your email, and we do not use your data to train machine-learning models.

Who processes your data

We use a few service providers. Each one handles only what its job needs:

• WorkOS (United States): sign-in. It sends the one-time code to your email and keeps your email address and sign-in records.
• Convex (United States): the database that holds your setup, lesson progress and practice sessions.
• Cloudflare: hosting and delivery of the site and lesson files, with short-lived request logs on its global network.
• ElevenLabs: produces the narration when we build lessons. It never receives anything about you.

If we add error reporting later, we will name the provider here first and configure it to leave out personal details.

We do not transfer your data to anyone else unless the law requires it.

Cookies and browser storage

Glidepath sets no tracking cookies. Your browser keeps a sign-in token, your theme and your offline lessons in its own storage so the app works between visits and without a connection. Clearing site data in your browser removes them.

Where your data lives

Our database and sign-in provider store your data in the United States. If you use Glidepath from elsewhere, your data is transferred there. [Legal review: transfer mechanism and regional notices for the EU, UK and California.]

How long we keep it

For as long as your account exists. Technical records at our providers are kept briefly for security and then discarded. [Confirm the retention periods WorkOS, Convex and Cloudflare apply to logs and backups.]

Deleting your account

Open Profile and choose Delete account. We email you a code to confirm. Once confirmed, your profile, lesson progress and practice sessions are deleted from our database and your sign-in record is removed from WorkOS. Copies in provider backups clear on their schedule, within [30 days, to confirm].

You can also ask us at [contact email] and we will do it for you.

Your rights

Everything in your account is visible in the app: your setup in Profile, your progress in Learn and your sessions in Log. You can correct your setup there, and delete it all as described above; the short-lived technical logs at our providers are the only records outside the app. An export of your log is coming later; until then, ask at [contact email] and we will send it.

Depending on where you live, you may have further rights, such as to object to or restrict processing, or to complain to a data protection authority. [Legal review: legal bases (contract for your account, legitimate interest for security), GDPR and CCPA rights wording.]

Children

Glidepath is not aimed at children under [minimum age, suggested 13], and we do not knowingly keep accounts for them. If you think a child has created an account, tell us at [contact email] and we will delete it.

Changes to this policy

When this policy changes, the date at the top changes with it. If a change affects what we collect or who processes it, we will tell you in the app or by email before it applies.

Related pages

Sources and licenses for the lessons are on About and sources; the terms of use cover using the service and say plainly what Glidepath is and is not.