Privacy Policy

• Account information — your name, email address, and role (student, instructor, school admin, or aircraft owner). Passwords are stored only as a salted one-way hash; we never see or store your actual password.
• Training records — your enrollment, lessons completed, maneuver proficiency, flight hours, and logbook entries.
• Scheduling data — flight bookings, requested times, the aircraft and instructor assigned, and related notes.
• Billing data — account balances, charges, and statements maintained for your training. We do not collect or store payment-card numbers.
• Calendar connection data — if you connect a calendar (see below), we store an encrypted access/refresh token and an internal mapping between your bookings and the calendar events we create for them.
• Technical data — basic log information (such as IP address and timestamps) used to operate, secure, and rate-limit the service, plus a session cookie that keeps you signed in.

When you choose to connect your Google Calendar, Horizyn One requests thehttps://www.googleapis.com/auth/calendar.eventsscope. We use this access for a single purpose: to write, update, and remove calendar events that correspond to your Horizyn One flight bookings. The sync is one-way — we add your flights to your calendar. We do not read your existing events, your availability, or any other calendar content.

Horizyn One’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except where necessary for security or to comply with applicable law, or with your explicit consent.

You can disconnect at any time from Sync to calendar → Disconnect inside the app. Disconnecting deletes the stored tokens and removes the flight events Horizyn One created in your calendar.

• To provide and operate the service — scheduling, training records, dispatch, maintenance tracking, and billing.
• To send transactional messages such as booking confirmations, reminders, and account emails.
• To keep your flights in sync with a calendar you have connected.
• To secure the service, prevent abuse, and comply with legal obligations.

We do not sell your personal information. We share it only with:

• Your flight school — instructors and school administrators can see the training, scheduling, and billing data for their own students and aircraft. Other students’ identities are not exposed to you.
• Service providers that operate Horizyn One on our behalf, under contract: application and database hosting (Vercel) and transactional email delivery (Resend). When you connect a calendar, data is sent to that provider (Google, and Microsoft if you connect Outlook) solely to maintain the events described above. Microsoft does not offer a write-only calendar permission, so connecting Outlook grants read/write access; even then, we only write your Horizyn One flight events and never read your calendar.
• Legal and safety — when required by law or to protect the rights, safety, and security of our users and the service.

We keep your information for as long as your account is active or as needed to provide the service. Calendar tokens and the events we created are removed when you disconnect a calendar. You can request access to, correction of, or deletion of your personal information by contacting us at the address below; some records (such as a student’s training history) may be retained by the school as required for its own recordkeeping.

We protect your data with encryption in transit (HTTPS/TLS) and at rest for sensitive secrets — OAuth calendar tokens are encrypted with AES-256-GCM, and passwords are stored only as salted hashes. Access to data is restricted by role and scoped to your own flight school.

Horizyn One is intended for flight schools and their adult or supervised student pilots. It is not directed to children under 13, and we do not knowingly collect personal information from them.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you within the app.

Questions about this policy or your data? Email us at support@horizynone.com.