Privacy policy.

DRAFT for review. This page is not final yet and may change before it takes effect.

Draft of October 25, 2026. UAV Campus Inc. runs uavcampus.com.

The short version

• We collect what we need to run your account, keep the free AI fair, and stop abuse: your name, your email, your study activity, and network details like your IP address.
• We do not sell your data, we show no ads, and we use no advertising or analytics trackers.
• The questions you ask the AI Flight Instructor go to an AI provider to be answered. Do not type personal details into them.
• You can ask for a copy of your data or ask us to delete your account at any time through Support.

What we collect

Your account. Your name and email address, when you joined, when you verified your email, your plan and credits, and whether you entered the Udemy course code (we keep a short fingerprint of the code, not the code itself). There are no passwords: you sign in with a 6-digit code or a link we email you. We store those codes only in scrambled (hashed) form, and they expire in 10 to 30 minutes.

Your study activity. The practice questions you answer and whether you got them right, your practice exam scores by topic, the credits you use, and the AI cost of your answers each day. This powers your dashboard and the weak-spot review.

Your questions to the AI. To answer a follow-up, the AI Flight Instructor remembers your last three questions and answers for a short time in the server's memory; they are not saved to our database. Separately, we count which questions get asked most so we can improve the course: that list keeps the wording of the question with any email addresses, phone numbers or links removed, and it is not linked to you. If our safety filter blocks a message, we record only that it happened and when, never what you typed.

Network details. When you join and when you sign in we record your IP address, its network range, your internet provider (its ASN number and name) and your country, which Cloudflare tells us. We use them to limit sign-ups (two a day per address), to spot automated or mass sign-ups from cloud servers, and to protect the free AI credits. VPNs are welcome: a VPN alone never blocks your account. Short-lived counters for rate limits are cleared after a day.

Support messages. If you write to us through the Support page we keep your name, email, topic and message, and email them to your instructor so they can reply.

Payments. When you buy credits, Stripe handles the payment. Your card details go to Stripe, never to us. We keep the Stripe customer reference, what you bought, and when.

Cookies and browser storage

We use one cookie for members: uavc_s, which keeps you signed in for up to 30 days. It is HttpOnly (page scripts cannot read it) and is only sent to uavcampus.com. Site admins get a second sign-in cookie that lasts 12 hours.

Your browser also stores three small settings for us (local storage, not cookies): a note that you are signed in, whether the instructor's voice is on or off, and how many free demo questions you have tried today on the home page.

Cloudflare Turnstile, the human check on the join, sign-in and support forms, may set its own cookies and look at your browser and connection to tell people from bots. Our pages load fonts from Google Fonts, so Google receives your IP address when the fonts load. We use no advertising, analytics or social media cookies.

How we use it

• To run your account: sign you in, show your progress, keep your credits and purchases straight.
• To answer your questions with the AI Flight Instructor and read answers aloud.
• To send the emails the service needs: sign-in codes and links, replies to your support messages, and occasional UAV Campus announcements. Every announcement has an unsubscribe link.
• To keep the site safe and the free tier fair: rate limits, sign-up limits, daily AI limits, and spotting abuse.
• To improve the course, using counts and totals rather than anything about you personally.

Who helps us run the site

We share data only with the services that run UAV Campus, and only what each one needs:

• DigitalOcean hosts our server and database in the United States.
• Cloudflare sits in front of the site: it delivers pages, blocks attacks, runs the Turnstile human check, and tells us your country and network provider.
• Resend sends our emails, so it receives your email address and the message.
• OpenRouter passes your question, the course material we found for it, and your last few questions and answers to the AI model that writes the reply (today models from OpenAI and Google). We do not send your name or email with them.
• Inworld turns the instructor's replies into speech. It receives the reply text only, not your questions or who you are.
• Stripe processes credit purchases.
• Google Fonts serves the fonts on our pages.

Each of these companies has its own privacy policy. The full video course is on Udemy; what you do there is covered by Udemy's privacy policy, not this one. We may also share information if the law requires it, or to protect UAV Campus and our members from fraud or abuse. We never sell your personal information.

How long we keep it

We keep your account and study history while your account is open, so your progress is there when you come back. Sign-in codes expire within minutes and rate-limit counters after a day. When you ask us to delete your account, we delete your account and the study history linked to it, except records we must keep for payments, taxes or to prevent abuse. [Chris to confirm: how long after an account goes quiet we delete it, and how long support messages and network records are kept.]

Your choices

• See or copy your data: ask through Support and we will send it to the email on your account.
• Fix it: ask us to correct your name or email.
• Delete it: ask us to delete your account.
• Stop announcements: use the unsubscribe link in any announcement email. Sign-in codes still arrive when you ask for one.

Depending on where you live (for example California or the EU), you may have more rights under your local law. We will honor those requests the same way. [Chris to confirm before publishing.]

Children

UAV Campus is for people studying for the FAA Remote Pilot test, which requires you to be at least 16 to hold the certificate. The site is not meant for children under 13, and we do not knowingly collect their information. If you think a child under 13 has an account, tell us through Support and we will delete it.

Security

The site runs on HTTPS only. There are no passwords to steal, sign-in codes are stored hashed and expire quickly, and only UAV Campus admins can see member records. No system is perfectly secure, but we work to keep yours safe.

Changes and contact

If we change this policy we will update the date at the top, and tell members by email when the change is important. Questions about your privacy? Reach us through Support. [Chris to confirm: a mailing address or privacy email to list here.]