CyberPilot Privacy Policy

CyberPilot ("we", "our") is a cybersecurity learning mobile app (com.cyberpilot.app).

1. Information we collect

• Account: display name, email address, password (stored hashed), Google account ID if you use Google Sign-In

• Profile: optional profile photo

• Learning data: lesson progress, quiz scores, exam results, certificates, XP, streaks, achievements

• Game data: gems, daily quests, arena/PvP stats, leaderboard ranking

• Social: users you follow

• Device: device name, app version, session IP address, push notification token

• Advertising: Google AdMob may collect device identifiers and ad interaction data

2. How we use information

• Provide and operate the app (authentication, progress, duels, notifications)

• Send email verification codes (OTP)

• Send push notifications (duels, security intel, followers)

• Show rewarded ads (optional)

• Prevent abuse (rate limits, login security)

3. Third-party services

• Google Sign-In (authentication)

• Google AdMob (advertising)

• Expo / Firebase Cloud Messaging (push notifications)

• Email delivery (SMTP) for verification codes

4. Data sharing

We do not sell your personal data. Data may be processed by service providers listed above only to operate the app.

5. Data retention

Account data is kept while your account is active. You may delete your account in the app (Settings → Security → Delete account). Backups may retain data up to 30 days.

6. Security

We use industry-standard measures including password hashing and access tokens. Data is transmitted over encrypted connections when HTTPS is enabled.

7. Children

CyberPilot is intended for users 13 years and older.

8. Your rights

You may access, update, or delete your account data through the app or by contacting us.

9. Contact

Email: support@cyberpilot.app

10. Changes

We may update this policy. Continued use of the app means you accept the updated policy.