Plain language, not legal boilerplate.
This page is a plain-language description of what ARYA actually does with your information, written by the site's builder — not a lawyer. It has not been reviewed by a legal professional. If you need this to be legally binding (e.g. for a business, or regulatory compliance), have it reviewed properly before relying on it.
If you create an ARYA account, you sign in using a 6-digit code sent to your email — no password is stored. Your account is managed by Supabase, ARYA's backend provider, and your email address is stored there to identify your account and deliver sign-in codes.
If you're signed in, the following is stored on ARYA's servers (via Supabase), not just your browser: your pilot profile (age, education, medical status, budget), your document checklist progress, and your financial planner entries. This lets your data sync across devices.
If you're not signed in, the same information is stored only in your browser's local storage — on this device, in this browser, and nowhere else. It is not visible to ARYA and not sent anywhere. Switching devices, browsers, or clearing browser data will lose it, since there's no account to recover it from.
If you subscribe to EATPL/DGCA Daily Practice, payment is processed by Razorpay — ARYA does not see or store your card/payment details directly. ARYA's servers record that a payment was verified, the amount, a Razorpay payment/order reference, and your subscription's active dates, linked to your account.
Supabase handles accounts, database and cloud storage. Resend delivers sign-in code emails. Razorpay processes payments. Cloudflare hosts the site. Each of these providers has its own privacy practices, separate from ARYA's.
Signing in sets a session token (via Supabase) so you stay signed in between visits. ARYA does not currently use advertising or tracking cookies.
From your Dashboard, "Clear my data" removes your profile, documents, and finance data from both ARYA's servers (if signed in) and this browser. To delete your account and email entirely, contact the site owner directly — there is currently no self-service full account deletion.