Privacy policy

Who we are

LaneApps Limited, trading as Airspace School, is registered in England and Wales with company number 08950053. Its registered office is Rockingham, Calf Hill Road, Thongsbridge, Holmfirth, HD9 3TG, United Kingdom. LaneApps Limited is the data controller for the personal information described here. Contact us about privacy at support@airspaceschool.com.

What we collect

• Account details. Your email address and authentication information, including password credentials handled by our sign-in provider if you use email sign-in. If you sign in with Google, Google also gives us your name and profile picture. We never see or store your Google password.
• Study activity. The lessons you open, the answers you give, your mock exam results, your bookmarks and any question reports you send us.
• Purchases. What you bought, when and for how much, along with the terms and checkout choices recorded for new purchases. We save withdrawal notices, the name and acknowledgement email you provide, the time received and our review history. Card payments are handled by Stripe; we do not receive your full payment-card number. Stripe and, for Managed Payments purchases, the reseller identified at checkout also handle payment, billing-address, tax, fraud-prevention and refund information under their own privacy notices.
• Technical information. Your IP address and basic browser details, which our hosting provider logs to keep the service secure and which we use to limit repeated sign-in attempts and abuse of the withdrawal form. The form’s rate counters use a keyed hash of your email or IP address rather than storing those details in the counter.

How we use it

• To sign you in and keep your account secure.
• To save your progress and show it to you on any device.
• To take payment and give you access to what you bought.
• To send service emails, such as sign-in codes and receipts.
• To fix problems and improve the course, including reviewing question reports.

Our lawful bases are performance of our contract for accounts, study progress, access and requested support; legal obligations for tax and accounting records; and legitimate interests in preventing abuse, maintaining security and understanding how our service is used. We balance these interests against your rights. Where consent is required for optional processing, we must obtain it separately. The information needed to create an account or fulfil an order is necessary to provide that service; optional information is not a condition of purchase. We do not sell your personal information, we do not use it for cross-site targeted advertising and we do not use advertising cookies. We do use Vercel Web Analytics, described below. Agreeing to our terms or reading this notice is not consent to marketing.

AI study coach

If you choose to ask the coach a question, we send your message, the recent conversation and relevant lesson or saved-answer context to OpenAI together with relevant passages from our stored course documents, to prepare an explanation. We do not send your account email or name as part of the coach request. Avoid including personal information in your messages.

The conversation stays in your browser memory for the current visit; Airspace does not save chat text in its database. We record your account ID, request time, model, success or failure and token counts to enforce allowances and monitor service usage. Requests use OpenAI’s API with response storage disabled; OpenAI’s own API data retention policies still apply. Read about OpenAI API data handling.

Each user can ask 50 questions per calendar month. The allowance resets on the first day of each month at midnight UTC. The coach is for study, not flight planning. AI can make mistakes, so check the sources provided with its answers.

Service statistics

Vercel Web Analytics measures page visits and public sample interactions, including starting or completing a free practice sample and following its course link. Data can include the page address, referrer, time, approximate location, and browser and device information. Vercel describes this as cookie-free analytics using a request-derived visitor hash whose session lifetime is up to 24 hours. That is not a claim that all statistics are deleted after 24 hours. We do not deliberately include your answers, scores, name or email in these custom events. See Vercel’s analytics privacy information. You can contact us to object to processing based on legitimate interests.

Google sign-in

If you choose Sign in with Google, we ask only for your basic profile: your name, email address and profile picture. We use them only to create and recognise your Airspace School account. We do not access your Gmail, Drive, contacts or any other Google data.

Cookies

We use sign-in and sample-session cookies and browser storage for study preferences and recovering unconfirmed saves. Our cookie and browser-storage notice explains their purposes and how to remove them. Cookie-free analytics is described above; third-party sign-in and payment pages have their own notices.

Who helps us run the service

We use the following service providers. Some act as processors under our instructions; Google and payment providers also process data for their own purposes, explained in their notices. We may disclose information when legally required or to establish or defend a legal claim:

• Supabase – account sign-in and our database, stored in London, United Kingdom.
• Vercel – website hosting.
• OpenAI – optional AI coach explanations.
• Google – sign-in, if you choose it.
• Stripe – card payments.
• Resend – sending service emails.
• Cloudflare – storing and delivering course images and video. We do not put learner profiles in the media library. Delivery and security systems may process request metadata such as IP addresses.

Some of these companies are based in the United States. Transfers must use a mechanism permitted by the law that applies to the data, such as an applicable adequacy decision or approved contractual safeguards (including EU standard contractual clauses and the UK addendum where applicable). The relevant mechanism depends on the provider, destination and service. Contact us for information about the safeguards for your data or a copy, subject to appropriate redactions.

How long we keep it

We keep your account and study activity while your account is open. If you ask for deletion, we assess and remove data we no longer need, subject to legal retention duties and necessary fraud-prevention or legal-claims records. Payment records are normally kept for six years from the relevant accounting period, longer if a legal requirement applies. Support, technical and coach-usage records are retained according to their purpose, investigation needs and the provider’s retention settings. Copies in backups expire through the backup cycle rather than disappearing immediately. We can explain the retention criteria for a particular record when you contact us.

Your rights

Depending on the law and the circumstances, you can request access, correction, deletion, restriction or a portable copy of your data; object to processing based on legitimate interests; and withdraw any consent without affecting earlier lawful processing. We may verify your identity using proportionate information. We do not use the study scores or coach to make decisions with legal or similarly significant effects about you. Study recommendations are suggestions, not official competence assessments. Email support@airspaceschool.com and we normally respond within one month for UK/EU data-rights requests. If an extension or exception is legally allowed, we will explain it within the required time. If you are unhappy with our answer, you can complain to the UK Information Commissioner’s Office at ico.org.uk.

If you are in the European Economic Area, you can also complain to the supervisory authority where you live, work or believe an infringement happened; see the EU data-protection authorities. You do not have to complain to us first. US state laws may give additional access, deletion, correction, portability, opt-out or appeal rights where applicable. We will explain any applicable appeal route if we refuse a request, and will not unlawfully discriminate against you for exercising your rights.

Children

Airspace School accounts are for people aged 16 or over; under-18s need a parent or guardian’s agreement. This is our account policy, not a statement about every country’s examination age. We do not knowingly collect information from anyone under 16. If you believe a child has provided information in breach of this rule, contact us so we can investigate and remove it where appropriate.

Changes to this policy

If we make a significant change, we will update this page and change the date at the top.