Privacy Policy

1. Scope and roles

This Policy applies to DualGiven services, including the public website, personal logbook, and authenticated instructor and student portals. It does not govern third-party websites or services that you choose to use with DualGiven.

Instructors and their organizations generally decide what student information is entered, imported, and shared in their workspace. For that information, the instructor or organization is responsible for its collection and use, and DualGiven processes it to provide the service. DualGiven is responsible for information used to operate accounts, subscriptions, security, support, and the service itself.

2. Information we collect

Account and workspace information

We collect account identifiers and profile information such as name, email address, profile image, authentication provider, workspace membership, instructor or student role, and account preferences. If you sign in with Google, we receive the basic profile information you approve.

Flight training and business records

Information users provide or import may include:

• Student contact details, training programs, lesson records, progress, quiz results, milestones, and notes.
• Logbook entries, aircraft information, certificates, ratings, endorsements, signatures, and qualification records.
• Schedules, appointment details, instructor-student assignments, availability, and calendar event identifiers.
• Documents and files, including training materials and identity or citizenship documentation uploaded for aviation compliance workflows.
• Rates, invoices, receipts, payment status, and other business records.

Payments

Stripe processes subscription and transaction payments. DualGiven may receive billing contact details, transaction identifiers, payment status, card or bank name, funding type, the last four digits of a payment method, and evidence that you authorized future use. We do not receive or store full card numbers, bank-account numbers, or bank routing numbers.

Device, usage, and support information

We collect information needed to operate and secure the service, including IP address, browser and device type, operating system, referring pages, timestamps, authentication events, feature usage, diagnostic logs, cookie or session identifiers, and communications with support. Google Analytics helps us understand visits and use of the public website and application, including pages viewed, approximate location, referral source, and device information.

Website measurement choices

Google Analytics and our Vercel usage and performance measurements are enabled by default. You can turn measurement off or change your preferences here at any time. Saved opt-outs and Global Privacy Control override the default. Google may receive limited cookieless signals when storage is denied. These choices do not disable necessary sign-in or security storage. Google processes measurement information under its privacy policy.

Information processed by assisted features

When an authorized user invokes or enables an AI-assisted feature, DualGiven may process the relevant record, document, calendar event, or redacted data sample to perform tasks such as matching appointments, mapping imported logbook columns, detecting likely duplicates, or suggesting classifications. These outputs can be inaccurate and should be reviewed by the user.

3. How we use information

We use information to:

• Provide, maintain, personalize, and improve instructor and student workspaces.
• Authenticate users, manage invitations and permissions, and protect workspace isolation.
• Store, organize, synchronize, export, and present training and business records.
• Connect calendars, files, payments, and email services at a user’s direction.
• Process subscriptions, invoices, payments, receipts, and account administration.
• Provide support, communicate service changes, and respond to requests.
• Monitor reliability, prevent fraud or misuse, troubleshoot problems, and enforce our Terms.
• Comply with law and protect the rights, safety, and security of users, DualGiven, and others.

We may create aggregated or de-identified information that cannot reasonably identify an individual and use it for service analytics, reliability, product planning, and research.

4. Google user data

Google account sign-in is separate from optional Google Calendar and Google Drive connections. DualGiven requests additional Google permissions only when an authorized instructor chooses to connect the applicable integration.

Data we access

• Google Sign-In: basic profile information, including name, email address, profile image, and Google account identifier.
• Google Calendar: the user’s calendar list and events on calendars the user selects or authorizes, including event titles, descriptions, times, locations, attendees, status, and durable Google event identifiers.
• Google Drive: files and folders created by DualGiven or specifically selected or shared with DualGiven, including their content and metadata.

How Google data is used

We use Google Calendar data to display schedules, synchronize appointments, suggest student matches, prevent duplicate appointments, and create or update events at the user’s direction. We use Google Drive data to create, organize, retrieve, and synchronize user-selected or DualGiven-managed training files and folders.

Consistent with those requirements:

• Google user data is used only to provide or improve user-facing features that are visible and relevant to the requesting user.
• We do not sell Google user data, use it for advertising, or use it to establish creditworthiness or lending decisions.
• We do not use Google Workspace data to train or improve generalized artificial-intelligence or machine-learning models.
• We do not transfer Google user data except to service providers acting for us as necessary to provide the requested feature, when required for security or legal reasons, or with the user’s affirmative consent.
• People do not read Google user data except with the user’s permission, when needed for security or abuse investigation, when required by law, or after aggregation or de-identification for internal operations.

Users can disconnect Google Calendar or Drive from DualGiven settings and can revoke access at any time from their Google Account connections. Disconnecting stops new access but does not automatically delete information previously imported into DualGiven; deletion options are described below.

5. How we share information

We may disclose information in the following circumstances:

• Personal logbook and student linking. If an instructor adds you as a student and you connect that student record using your verified account, your personal logbook flights become visible to your assigned instructor and authorized workspace administrators while your student relationship is active. Your personal entries remain yours to edit. Making the relationship inactive ends this sharing.
• Within a workspace. Instructors, students, staff, and invited collaborators can access information according to their assigned permissions.
• Service providers. Vendors help us host the application and database, deliver email, process payments, analyze service usage, monitor reliability, provide customer support, and operate user-requested AI features. These may include Vercel, Supabase, Resend, Stripe, Google Analytics, and AI model providers such as OpenAI.
• User-directed integrations. We transmit information when a user asks us to synchronize or export it to a connected service.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, legal process, enforceable government requests, protect rights or safety, investigate fraud or abuse, or secure the service.
• Business transfers. Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice where required.
• With consent. We may share information for another purpose when the relevant user or workspace administrator directs or consents to it.

DualGiven does not sell personal information for money or share it for cross-context behavioral advertising.

6. Retention and deletion

We retain information while an account or workspace is active and as reasonably necessary to provide the service, maintain security and backups, resolve disputes, enforce agreements, and meet legal, accounting, and compliance obligations. Retention periods vary by data type and context. Backup copies may remain for a limited period before being overwritten. A move from student workspace access to a free account does not delete the account's personal logbook or its read-only view of earlier student flights.

You can initiate account deletion in the iOS app from Account & security or, for a free account, from the personal logbook. We review the request and confirm completion by email. Workspace owners can delete many records through the service and may request workspace deletion by contacting us. Students may request access, correction, or deletion from their instructor or from DualGiven. We may need to coordinate a student request with the instructor who controls the relevant workspace.

Signed records may be locked or retain integrity metadata to preserve the meaning of an electronic signature. An instructor remains responsible for any independent FAA or business record-retention obligation and should export required records before closing an account.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted network transport, managed access controls, tenant-aware authorization, protected credential storage, logging, and restricted production access. No service can guarantee absolute security. Users are responsible for protecting their accounts, devices, and sign-in methods and for notifying us promptly of suspected unauthorized access.

8. Your choices and rights

Depending on where you live and subject to legal exceptions, you may have rights to:

• Access, correct, or obtain a portable copy of personal information.
• Request deletion or restriction of certain processing.
• Withdraw consent where processing is based on consent.
• Appeal a decision or complain to an applicable privacy regulator.
• Receive equal service and pricing when exercising a privacy right.

You can manage many records and integrations directly in DualGiven. For other requests, contact us using the information below. We may verify your identity and authority before completing a request. An authorized agent may submit a request where permitted by law.

9. International processing

DualGiven is operated from the United States. We and our service providers may process and store information in the United States and other countries, where data-protection laws may differ from those in your location. Where required, we use recognized safeguards for international transfers.

10. Children

DualGiven is not directed to children under 13, and we do not knowingly create accounts for them. A minor who is old enough to use the service may do so only through an authorized training relationship and with any consent required from a parent or legal guardian. Contact us if you believe information from a child under 13 has been provided without appropriate authorization.

11. Changes and contact

We may update this Policy as DualGiven changes. We will post the revised Policy with a new effective date and provide additional notice when a material change requires it. If we materially change how Google user data is used, we will provide notice and obtain consent where required before applying the new use.

Questions, privacy requests, and complaints can be sent to info@dualgiven.app. DualGiven is based in Los Angeles, California, United States.