Privacy Policy
Last updated: 25 October 2026
1. Who we are
AngaBrief is a pre-flight risk assessment platform for Kenyan flight schools. References to “AngaBrief”, “we”, “us”, or “our” in this policy mean the AngaBrief service.
2. What data we collect
- Account data: email address, full name, phone number, KCAA licence number.
- Assessment data: PAVE/IMSAFE responses, risk scores, instructor notes, planned flight details.
- Audit log: all actions are logged permanently for KCAA compliance purposes and cannot be deleted.
- Usage data and analytics: the AngaBrief app itself (student, instructor and admin screens, sign-in, and anything showing assessment or student data) runs no third-party analytics or tracking. On the public pages only (the homepage, /demo, the blog, and this and the terms page) we use one essential cookie,
ab_consent, to remember your cookie choice, and, only if you click “Allow analytics”, Google Analytics 4. It sets_gacookies and records the pages you view and for how long, the referring site, approximate location (country and city, from an anonymised IP address that is not stored), and your device type, browser, operating system, language and screen size. We send no names, emails, licence numbers, assessment data or user IDs to Google, and Google signals, advertising features and ad personalisation are off. Google processes this as our service provider and may do so outside Kenya. Choose “Essential only”, or change your choice at any time with “Cookie settings” in the footer; withdrawing removes the_gacookies. Separately, your browser sends standard request information such as IP address and user agent to our hosting provider, which is retained briefly for security and reliability.
3. How we use your data
- To deliver the pre-flight briefing and instructor review workflow.
- To generate KCAA-compliant audit logs and PDF exports for your flight school.
- To send transactional email notifications (assessment submitted, reviewed, etc.).
- We do not sell your data to third parties.
4. Data storage
Data is stored on Supabase (PostgreSQL) hosted in the EU West region. Authentication is handled by Supabase Auth. Email is delivered via Resend.
5. Retention
Audit log entries are retained indefinitely as required for KCAA regulatory compliance. Other account data is retained for as long as your school has an active account.
6. Your rights
You may request a copy of your personal data or ask for it to be deleted (except audit log entries required by regulation) by emailing hello@angabrief.com.
7. Contact
For privacy questions contact us at hello@angabrief.com.