Introduction
Pilot is operated by an individual based in Italy. This policy explains what categories of information Pilot processes, why Pilot processes them, when information may be public, and what choices you have.
Pilot is designed for personal TV tracking and related app experiences. Pilot does not provide video streaming, does not sell personal data, and does not include advertising, analytics, attribution, crash-reporting, or runtime AI processing SDKs in the current app.
Information We Process
Account information may include your Pilot account identifier, authentication provider information from Apple or Google, email address if provided by the sign-in provider, display-name information if provided or created, and session information needed to keep you signed in.
App activity and content may include shows you add, tracking status, watched episodes, watched dates, private ratings, viewing plans, recent activity, timeline information, preferences, Pilot Games progress, Pilot Studio selections, and related app state.
Public profile and ratings information may include your public display name, username, public numeric show ratings, rating timestamps, and summary information shown on community rating or profile surfaces.
Subscription information may include Pilot Plus entitlement status, purchase status, product information, and purchase restoration information received through RevenueCat and the applicable app store.
Device, preference, import, and export information may include language, legal consent state, theme choices, notification preferences and local notification records, files you choose to import, and files or images you choose to generate, export, or share.
How We Use Information
Pilot uses information to provide and maintain the app, keep your account and preferences working, organize your TV archive, show progress and plans, provide personalization, operate public rating features, manage Pilot Plus access, deliver requested local notifications, support backup and restore, and protect the service.
Pilot also uses information you choose to import, export, or share only to perform the action you request, such as reviewing a CSV import or generating a local PDF or share image.
Public Information
Some Pilot features are intentionally public to other signed-in users. This may include your public display name, username, public show ratings, and associated public rating information.
Your private library, watch history, progress, viewing plans, private activity, timeline, Cloud Protection data, notification history, email address, and internal account identifiers are not presented as a public archive.
Reports, Blocks And Moderation
When you report a public profile, Pilot stores a report identifier, your account identifier, the reported account identifier, the selected reason, the submission timestamp and UTC day, and any review timestamp and outcome. Authorized moderators may keep limited notes about the investigation and action taken in a restricted support record. Reports do not attach your private Library, viewing plans or watch history.
When you block an account, Pilot stores your account identifier, the blocked account identifier and the creation timestamp to apply your block to the public profile and rating surfaces you can see.
Pilot uses this information to prevent abuse, investigate reports, take moderation action and enforce user blocks. Report and block records are processed and stored with Supabase. Reports are private and are not automatically disclosed to the reported user. Staff access to moderation records is restricted to authorized people who need it to investigate, act on reports or administer the service.
Unresolved reports are retained while investigation or action is pending. Closed reports and associated moderation notes are deleted during the first scheduled cleanup after 90 days from closure, and no later than 120 days from closure, unless retention is necessary for an active dispute, a legal obligation or a security or abuse investigation.
Blocks remain until you unblock the account or either associated account is deleted. When either associated Pilot account is deleted, linked report and block records are removed from the active Supabase database through the existing account-deletion process. Separately held moderation notes follow the retention rule above.
For questions about moderation data or to exercise your privacy rights, contact privacy@pilotapp.it.
Cloud Protection
Cloud Protection automatically stores a backup with Supabase for your signed-in Pilot account. Its scope is your Library (including Watchlist, show status, watched episode identifiers, recorded watched dates and provenance, private ratings and saved show information), Calendar viewing plans, Activity, and canonical Timeline history, including events and the migration records needed to preserve that history.
After supported changes are saved locally, Pilot schedules an automatic backup when connectivity and the service are available. Only a complete backup becomes a restore point. Each successful backup replaces the previous restore point; Pilot does not offer a history of previous backups.
Manual Restore replaces the included data on this device with the latest complete cloud snapshot for the same account. Local changes not present in that snapshot can be lost. Older backups that do not contain Timeline leave the device's existing Timeline unchanged. Pilot may also recover a cloud archive automatically on an empty device when it is safe to do so.
Pilot Games progress, Credits and rewards, Pilot Studio selections, themes, backgrounds, app icon choices, language and other preferences, notification records and generated or exported files are not included in Cloud Protection. Local-only data may be lost after reinstalling the app or replacing your device. Cloud Protection is not real-time synchronization or a merge of data across devices.
Authentication records, public profiles and ratings, reports and blocks are stored with Supabase independently of Cloud Protection. Subscription records are handled by RevenueCat and the app store independently of archive backup and restore. Restoring an archive does not roll back these records.
Third-Party Services
Pilot uses Supabase for authentication, account-related cloud storage, backup and restore, account deletion support, and public rating/profile features.
Pilot uses Apple and Google for sign-in, RevenueCat and the applicable app store for subscription status and billing infrastructure, TVMaze for TV metadata, and Expo or platform services for app functions such as local notifications, document selection, PDF generation, sharing, images, and local device capabilities.
Requests for TV metadata, including search queries and requested show information, are sent to TVMaze. Network service providers also receive ordinary connection information, such as your IP address, when the app connects to their services.
These providers may process information under their own terms and privacy policies. Pilot does not control their independent practices.
Subscriptions
Pilot Plus is optional. The app store handles subscription payments, renewals, cancellations and refunds. RevenueCat processes subscription and purchase-restoration information linked to your Pilot account identifier to manage Pilot Plus access.
Pilot does not directly process or store payment card details.
Notifications
Pilot may offer local notifications for app-related reminders, releases, activity, Pilot Games, Pilot Studio, and Pilot Plus information, depending on your system permission, account state, preferences, and app activity.
You can manage notification permission through your device settings and manage Pilot notification categories inside the app where available.
Imports, Exports, And Sharing
If you choose to import a CSV file, Pilot processes the selected file so you can review and confirm supported information before adding it to your archive.
If you generate, export, or share PDFs, images, or other content from Pilot, you choose where to send or save them. Pilot does not control copies kept by destination apps, recipients, cloud drives, printers, device backups, or other services after sharing.
Data Retention And Deletion
Pilot keeps information for as long as reasonably needed to provide the app, maintain your account, support the features you use, comply with legal obligations, resolve issues, and protect the service.
You can request account deletion from within Pilot. Confirmed server deletion removes the Pilot account and its linked data from the active Supabase database, including Cloud Protection snapshots, public profile and ratings, reports and blocks. Pilot then attempts to cancel scheduled local Pilot notifications, remove that account's local data on the device used for deletion, and clear its local session. Device cleanup can fail separately; follow any recovery message or contact support if it does. Pilot cannot directly erase local copies on other devices.
For an Apple-linked account, deletion requires Apple reauthorization. Pilot sends the authorization code to its server to exchange and revoke Apple's authorization before deleting the Pilot account. Cancelling Apple reauthorization stops deletion; a failed revocation or unconfirmed server deletion does not trigger local account-data cleanup.
Deletion from Pilot does not automatically delete information held by Apple, Google, RevenueCat, app stores, destination apps, device backups, system backups, or other third parties under their own policies or legal obligations. Deleting your Pilot account or the app also does not cancel an app-store subscription.
Data Security
Pilot uses reasonable technical and organizational measures to protect information, including account-based access and established service providers.
No method of storage or transmission can be guaranteed to be completely secure. You are responsible for keeping your device, sign-in provider account, app-store account, and Pilot session secure.
Children's Privacy And Age
Pilot is intended for users aged 16 and older.
Pilot does not knowingly provide accounts to users under 16. If you believe a user under 16 has provided information to Pilot, contact Pilot at the privacy address below.
Your Rights And Choices
Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information, and to lodge a complaint with a data protection authority.
You can update certain profile information, manage notification choices, control what you publish publicly, and request account deletion from within the app. For other privacy requests, contact Pilot at the privacy address below. Pilot may need to verify your request before acting on it.
International And Third-Party Processing
Pilot and its service providers may process information in countries other than your country of residence.
Where applicable data-protection law requires specific safeguards for international processing, Pilot will rely on appropriate mechanisms made available by its service providers or otherwise required by law.
Changes To This Policy
Pilot may update this Privacy Policy when the app, service providers, business practices, or legal requirements change.
If a change is material, Pilot may ask you to accept the updated policy before continuing to use the app.
Contact
Website: https://pilotapp.it
Privacy questions and privacy requests: privacy@pilotapp.it
General support: support@pilotapp.it