Privacy Policy

1. Controller and contact

BEDENX OÜ, registry code 17523357, Tartu mnt 67/1-13b, 10115 Tallinn, Estonia, is responsible for personal data processed by AviationSpeak. Use Support & privacy inside the app for questions or rights requests. Support replies are delivered inside the app; no support emails are sent.

This notice describes this version of AviationSpeak. The wider BEDENX policy covers several products and providers; a provider mentioned there is not necessarily used by AviationSpeak.

• Support & privacy
• BEDENX company policy

2. Data this service processes

• Account: ChatGPT supplies a user identifier and, where available, name and email. We link your learning profile to that identifier. AviationSpeak does not receive your ChatGPT password. The app is available in English.
• Learning: your profile, selected track, lesson attempts and answers, completions, points, streaks, terminology reviews, study plans, and ATC conversations or feedback you choose to save.
• AI: text prompts and relevant conversation context are sent to OpenAI for requested responses or generated speech. We record credit use, request status, token counts and estimated costs. Generated audio is stored privately for your account; existing course recordings are shared learning content.
• Payment: Stripe processes payment details, name, billing address and information needed for payment and fraud prevention. We retain Stripe customer, checkout, subscription and invoice identifiers, plan and payment status, billing periods, and the time and version of plan terms accepted. Full payment-card numbers are not stored in our application database.
• Support: request text, category, reference, time, status and the support reply. Signed-in requests are linked to your account. A guest request uses a random recovery key; only its hash is stored in the database. Do not submit passwords, keys or full card numbers.
• Technical data: hosting providers receive connection details such as IP address and browser information. Operational records contain service failure categories and Stripe event identifiers. Browser storage supports sign-in, functional preferences, caches and guest-support recovery.

3. Purposes and legal bases

• Contract performance (GDPR Article 6(1)(b)): provide the learning service, preserve progress, answer requests, process purchases and administer subscriptions.
• Legitimate interests (Article 6(1)(f)): secure the service, prevent abuse, enforce usage limits, investigate failures and maintain recovery copies. You can object on grounds relating to your situation.
• Legal obligations (Article 6(1)(c)): comply with consumer, accounting and data-protection duties and respond to lawful requests.
• Consent (Article 6(1)(a)), when required for a future optional feature: we will ask separately and explain how to withdraw it. We do not use optional advertising or analytics cookies in this release.

4. AI and audio

The configured AI and speech provider is OpenAI. Microphone input, speech transcription and pronunciation scoring are disabled in this release. The app does not capture new microphone recordings. ATC practice uses typed messages and recorded or generated speech.

Saved text and AI feedback are learning aids. They do not determine legal rights, eligibility or official aviation qualifications. Do not submit confidential flight information or sensitive personal data. AI output may be incorrect and must never be used for real flight operations.

BEDENX does not train its own foundation models on your prompts. OpenAI processes API requests under its service terms and data controls. Provider retention is separate from deletion of records held by AviationSpeak.

• OpenAI API data controls

5. Recipients and international processing

We use ChatGPT Sites and Cloudflare for hosting, sign-in integration, the database and media storage; OpenAI for requested AI and voice features; and Stripe for paid checkout and subscription processing. Google Fonts receives connection information when your browser loads our typefaces. The present runtime does not use the former Lovable database or gateway.

These providers may process data outside the EEA. Applicable transfer arrangements may include adequacy decisions or standard contractual clauses. Ask through Support for details of the arrangements relevant to your request. Providers may act independently for their own security or legal obligations. We do not sell personal data or use it for cross-context advertising.

• Stripe privacy information

6. Retention and deletion

• Profile and learning records are retained while you use the account. You can download current records and request account deletion in Support. We verify requests, address active subscriptions and normally complete deletion within 30 days, subject to applicable rights and legal exceptions.
• Generated account audio is included in account-deletion processing. Imported historical records remain private and need identity verification before access or deletion; signing in with a matching name alone does not grant access to them.
• Operational failure records are scheduled for removal after 90 days; AI usage records after 26 months; support records after three years without interaction. Cleanup runs during daily maintenance when the service is in use. Required billing records and a minimal deletion record may be retained for legal or accounting purposes, including the applicable accounting retention period.
• Private database snapshots are scheduled for removal after 35 days at the next maintenance run. Recovery copies of generated audio are included in verified account deletion. Deletion records must be reapplied during recovery to avoid restoring erased learning data. A backup is not a guarantee that every historic version can be recovered.

7. Your rights

Subject to the conditions in law, you can request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You can withdraw any consent without affecting prior lawful processing. You may complain to your national supervisory authority; in Estonia this is the Estonian Data Protection Inspectorate.

Open Support & privacy to download your data, request deletion or send another privacy request. Each submitted request has a reference and a downloadable confirmation. Guests can submit a request without signing in, but we must verify identity before disclosing account data or making account changes. Keep your guest recovery key private and revisit Support for replies.

We respond without undue delay and within one month. If the law permits an extension for complex or numerous requests, we explain the reason within that first month. If we decline a request, we explain why and your options for complaint or review. Deleting an AviationSpeak account does not delete your ChatGPT account.

• Open Support & privacy
• Estonian Data Protection Inspectorate

8. Browser storage

This release uses functional storage for authentication, preferences, caches and guest-support access. It does not use advertising cookies or optional third-party analytics. Google Fonts loads typefaces from Google servers. If non-essential tracking is introduced, consent will be requested where required before it is enabled.

You can clear browser storage. Doing so can sign you out or remove your guest-support recovery key. Download your support confirmation first if you need to retain access from another browser.

9. Security, children and updates

The service uses authenticated access checks, account-scoped database operations, private generated media and server-side payment secrets. Staff access is restricted to the site owner. We record operational failures and maintain recovery procedures. No service can guarantee absolute security or uninterrupted availability.

AviationSpeak is not directed to children below the applicable age for using the service. A parent or guardian can contact Support to raise a concern. Material changes to this notice will be communicated inside the app as required.