Privacy Policy

At Language Bands and Fly Air ("we," "our," or "us"), we believe that educational journeys require total trust and transparency. This Privacy Policy details how we collect, store, process, and protect your personal information when you use our websites, mobile interfaces, authenticated portals, Document Vault, and learning tools.

We adhere to international data protection principles, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable local privacy regulations.

Our Three Non-Negotiable Privacy Rules:

• We Never Sell Your Data: Your profile, academic records, contact info, and learning statistics are never sold or rented to third-party data brokers or advertisers.
• Zero Unauthorized Sharing: Your academic documents are never disclosed to universities or visa consultants without your direct, explicit action.
• AES-256 Encryption at Rest: Sensitive identity documents uploaded to the Document Vault are encrypted using industry-standard AES-256 cryptography.

Depending on how you engage with Fly Air / Language Bands, we collect the following categories of information:

A. Information You Provide Directly:

• Account & Profile Details: Full name, email address, password hash, phone number, nationality, native language, target study country, and educational background.
• Document Vault Uploads: Academic degrees, transcripts, language proficiency test certificates (IELTS, TOEFL, Duolingo, JLPT, HSK), letters of recommendation, and passport photo pages.
• Consultancy & Visa Inquiries: Educational history, financial sponsorship details, previous visa refusals (if any), and intake preferences.
• Payment Information: Billing name, transaction identifiers, and wallet balances. Full credit card numbers are tokenized and processed securely by regulated payment partners; we do not store raw card numbers.

B. Automated Technical & Learning Telemetry:

• Learning Progress: Grammar lesson completion, quiz answers, vocabulary mastery scores, test attempts, streaks, and XP points.
• Device & Network Data: IP address, browser type, operating system, preferred language, and timestamps to detect unauthorized logins and safeguard sessions.

We use the information we collect for specific, legitimate educational and operational purposes:

• Personalized Language Education: Tailoring exercises to your native language (Hindi, Urdu, Chinese, French, German), diagnosing grammar weaknesses, and recommending spaced-repetition vocabulary drills.
• Study Abroad Matching: Recommending university programs, tuition estimates, and scholarship opportunities tailored to your academic qualifications and budget.
• Visa Case Management: Enabling assigned education advisors and consultants to review and prepare your study visa submissions upon your authorization.
• Security & Fraud Prevention: Protecting against unauthorized logins, credential stuffing, prompt injection attacks on our AI systems, and payment fraud.
• Platform Communications: Sending essential transactional updates, such as verification links, password resets, application status alerts, and course announcements.

The Fly Air Document Vault was engineered to solve the persistent hazard of students sharing sensitive records over unencrypted channels like email or WhatsApp.

Vault Security Protocols:

• Encryption at Rest: All stored documents are encrypted on disk using AES-256 cipher suites. File paths and access tokens are hashed.
• Encryption in Transit: All data transmitted between your browser and our servers is protected by modern Transport Layer Security (TLS 1.3).
• Granular Role Access: Platform staff and consultants cannot browse your private vault arbitrarily. An advisor can only view documents attached to an active visa case or university application that you explicitly submitted for review.

Fly Air provides intelligent features including our AI Language Tutor, Grammar Checker, and Visa Eligibility Assessor.

AI Data Safeguards:

• No Public Model Training: Your conversations, essays, uploaded transcripts, and personal details are never supplied to OpenAI, Google, Groq, or Anthropic to train public foundational AI models on paid enterprise tiers.
• Structured Context Grounding: AI tools only receive relevant contextual variables necessary to fulfill your request (e.g., your selected lesson topic or visa criteria) under strict zero-retention enterprise API terms.
• Security Sanitization: Inbound prompts pass through automated injection filters and length truncation to prevent malicious prompt tampering.

Voice Translator & Ephemeral Audio Processing:

When using the Voice Translator, voice clips captured by your microphone are processed ephemerally for the sole purpose of real-time transcription and translation:

• Zero Server Audio Persistence: Audio clips transmitted to our backend are piped in-memory through temporary processing streams and unlinked immediately upon completion. We do not store, archive, or analyze your audio recordings on our servers or in our databases.
• Commercial Cloud Providers (OpenAI & Groq): Audio transmitted to OpenAI Whisper and Groq Whisper is encrypted via TLS in transit and is not used to train commercial foundation models under enterprise API data processing terms.
• Free-Tier Translation Notice (Google AI Studio / Gemini): If translation runs on Google Gemini's free promotional tier, Google's developer terms state that input text may be sampled for quality review. We strongly advise travelers never to speak or transmit sensitive credentials, passwords, or government identification numbers through the free-tier service.

We do not sell, rent, or monetize your personal data. We disclose information only to the following trusted entities:

• Educational Institutions & Consultants: When you submit an application through our portal, your academic dossier is transferred to the designated university or licensed consultancy partner you selected.
• Infrastructure & Hosting Providers: Trusted cloud infrastructure and database providers (such as Vercel and AWS) operating under strict data processing agreements.
• Payment Processors: Licensed payment partners (including JazzCash, EasyPaisa, and international merchant processors) for fraud checking and payment settlement.
• Legal & Regulatory Compliance: If required by valid court order, subpoena, or applicable law, we may disclose information to law enforcement or regulatory authorities.

Fly Air serves students, educators, and universities across multiple continents. Consequently, your personal information may be transferred to, stored, and processed in jurisdictions outside your home country.

Whenever we transfer personal information internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent regulatory mechanisms, ensuring your data enjoys the same high level of protection regardless of location.

We retain your personal data only as long as your account remains active or as needed to provide you with learning and application services.

Your Privacy Rights:

• Right to Access & Portability: You may request an export of all personal data, academic records, and learning logs associated with your profile.
• Right to Rectification: You can update or correct your profile details directly from your student dashboard settings.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your account, Document Vault files, and personal data by emailing privacy@languagebands.com. Upon verification, your records will be purged within 30 days, except where retention is required by financial accounting laws or audit compliance.

We use cookies and browser local storage to deliver a consistent, secure user experience:

• Strictly Essential Cookies: Authentication tokens, anti-CSRF protections, and session identifiers required for account logins and checkout security.
• Preference Storage: Saving your theme selection (Light vs. Dark mode) and content translation choice (Hindi, Urdu, Chinese, French, German).
• Anonymous Analytics: Aggregated, privacy-preserving pageview metrics to measure website performance and identify broken links without tracking individual identities.

You can configure your browser to block or alert you about cookies; however, disabling essential cookies may prevent you from accessing authenticated student portals.

Fly Air provides language education suitable for students of all ages. However, we do not knowingly collect personal information directly from children under 13 without verified parental or guardian consent.

If we discover that a child under 13 has provided personal details without verifiable parental consent, we will take immediate steps to delete the information and deactivate the account. Parents and guardians may contact us at privacy@languagebands.com to review, edit, or delete information related to their minor children.

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal files are handled, please reach out to our dedicated privacy and compliance team: