Privacy Policy

1. Who is responsible for your data?

Avivise is a product of BlockFit OÜ, an Estonia-based aviation operations and software company. BlockFit OÜ is the data controller for Avivise.

Controller: BlockFit OÜ, registry code 17131054, Sepapaja tn 6, Lasnamäe linnaosa, Tallinn, Harju maakond, 15551, Estonia. For privacy questions or GDPR rights requests, contact support@avivise.com. If email is unavailable, use the fallback contact form at blockfit.net/contact.

2. What data we collect

• Account data: email address and authentication/session information.
• Assessment data: your answers, generated orientation scores, report outputs, and attempt metadata.
• Optional result feedback: two closed answers about the usefulness of your result and how well it reflects you, together with the applicable consent version and timestamps. We do not collect free text for this feedback.
• Payment data: purchase status, order identifiers, receipts, entitlement status, and payment provider customer references.
• Consent data: the required immediate digital-service consent, optional product-analytics, session-replay, and marketing-email choices, and the applicable policy versions and timestamps.
• Adult-eligibility evidence: your account reference, the version of the 18+ policy you confirmed, and the confirmation timestamp. We do not request your date of birth, identity document, biometric age estimate, or inferred age.
• Technical data: basic logs needed to operate, secure, debug, and protect the service; and, after analytics consent, the pseudonymous analytics categories described below.

3. Why we use the data

• To provide your assessment, report, account access, receipts, and billing support. Legal basis: performance of a contract.
• To store consent evidence for the immediate digital service and optional product improvement. Legal basis: consent and legal obligation where applicable.
• To apply the current adults-only eligibility policy before purchase or assessment participation. Legal basis: performance of the service contract and our legitimate interests in enforcing the documented product boundary.
• To review optional post-result feedback only in aggregate and improve future Avivise orientation results. Submitting is optional and does not change your score, result, or access. Legal basis: consent.
• To secure, maintain, and troubleshoot Avivise using necessary operational data. Legal basis: our legitimate interests in operating a reliable and secure service.
• To create pseudonymous or aggregated product insights, and separately to inspect strictly masked dashboard replays, only if you opted in. Legal basis: consent.
• To send optional Avivise product news, useful content, research invitations, and offers by email when you subscribe. Legal basis: consent.

4. Optional product analytics and session replay

After your explicit choice, Avivise may use PostHog Cloud EU, hosted in Frankfurt, as a processor for the specific purpose of measuring and improving the website and product. Requests first pass through r.blockfit.net, a reverse-proxy domain controlled by BlockFit OÜ and operated through PostHog's Cloudflare-based managed proxy, before reaching PostHog Cloud EU. This routing does not change your consent choice: no request is sent before analytics consent, and refusal or withdrawal remains effective. Each origin uses a random pseudonymous browser identifier. We do not identify a PostHog person profile or associate this identifier with your email or direct Avivise account identifier. We may collect page paths without query strings, reviewed CTA or product events, fixed campaign and referring-source categories, approximate country or region, browser and device categories, web performance metrics, heatmap and interaction signals, and sanitized error metadata. For public landing-page analytics, referrer hostnames are never retained: reviewed sources are reduced to fixed categories and every unknown source is recorded only as “other”. In product analytics, any referrer value is reduced to its origin, without its path, query string, or fragment.

Like any internet request, delivery to PostHog necessarily exposes the source IP while the request is received. PostHog may use it transiently to derive approximate geography, but the Avivise project is configured to discard the raw IP before the analytics event is stored. We do not use PostHog for advertising, cross-site tracking, third-party data enrichment, or automated decisions about you.

We do not intentionally send assessment answers, answer text, authored option IDs, opaque option tokens, checkout or payment details, authentication secrets, email addresses, or URL query values to PostHog. Automatic interaction and error capture is disabled on assessment, authentication, checkout, profile, and admin routes.

Session replay is disabled on the public website. In the app it requires a separate choice. If enabled, it may cover every eligible, consented session and is limited to the dashboard. All text and input values are masked, media and explicitly sensitive areas are blocked, and request and response bodies, headers, canvas, cross-origin frames, and console logs are not recorded. Assessment, authentication, checkout, profile, and admin pages are excluded from replay.

When you allow landing-page analytics, the browser stores a versioned choice and PostHog may receive a pseudonymous consent receipt containing only the notice version, the analytics choice, its timestamp, and its validity period. It contains no email or direct account identifier. This helps BlockFit OÜ demonstrate which notice accompanied the capture.

You can reject either choice without losing access to Avivise and can withdraw at any time through “Privacy settings” on the relevant website or app origin. Withdrawal stops future optional capture and clears the PostHog browser identity available to that origin. It does not retrospectively invalidate processing performed while the consent was valid. You can also contact us to exercise your rights in relation to previously collected data.

5. Optional marketing email

We may send occasional product news, useful aviation-orientation content, research invitations, and offers about Avivise only after you make a separate, explicit choice. The choice is not preselected and is not required to create an account, sign in, buy, or use Avivise. Service messages such as magic links, receipts, security notices, and essential product communications are not marketing and do not depend on this choice.

If you choose marketing when requesting a magic link, we record the subscription only after that link verifies your email address. You can also subscribe or withdraw in your profile. Each marketing message must identify BlockFit OÜ and provide a clear, free, and easy unsubscribe method. Withdrawal applies to future marketing and does not affect your account or purchases.

We keep a server-side record of the address, consent-language version, source, and timestamps needed to operate the subscription and demonstrate your choice. Marketing addresses and direct account identifiers are not sent to PostHog, and assessment answers or session replays are not used to build marketing profiles. Resend acts as our email-delivery processor and may process email metadata in the United States under its applicable transfer safeguards.

6. Payments and processors

When checkout opens, payments will be handled by Creem and its payment partners. Avivise will store the purchase and entitlement information needed to unlock the paid assessment and show receipts, but it will not store full card details.

7. Processors, recipients, and international transfers

We disclose data only to providers and people who need it for the relevant purpose. Current categories include Cloudflare for website delivery, security, and the BlockFit analytics proxy, PostHog for separately consented analytics, Creem and its payment partners for checkout and billing, Resend for email delivery, and authorized BlockFit OÜ personnel. These providers act under their contracts and applicable data-protection obligations.

PostHog analytics data is sent to its EU cloud region in Frankfurt. Some other providers, including Resend, Creem, and their subprocessors or payment partners, may process data outside the European Economic Area. Where this happens, we rely on the provider's applicable transfer safeguards, such as an adequacy decision, the EU Standard Contractual Clauses with supplementary measures where required, or another lawful transfer mechanism.

TypeSafe AI (Jev) receives scenario choices and written answers to provide personalised feedback. Processing occurs in the United States under its DPA and EU Standard Contractual Clauses.

8. Retention

We keep account, assessment, consent, and purchase records for as long as needed to provide the service, support receipts and billing, preserve legally relevant consent evidence, and maintain security. We remove or anonymize data when it is no longer needed for those purposes.

Adult-eligibility evidence is retained only while needed to enforce and demonstrate the applicable policy, resolve access or purchase disputes, and meet legal obligations. It is deleted with the account unless a limited legal retention duty requires otherwise.

When optional analytics is active, raw analytics events are retained for no more than 25 months and session replays for no more than 30 days. The app asks you to renew your analytics choice after 180 days. Shorter retention or earlier deletion may apply where data is no longer needed or you make a valid request.

Optional post-result feedback expires 365 days after its latest submission. You can update or delete it earlier from the same assessment result page. Feedback answers are stored separately from assessment answers and are not sent to PostHog.

We keep an active marketing address while you remain subscribed. After withdrawal, we retain only the suppression and consent evidence needed to honor your choice, respond to disputes, and meet legal obligations, then delete or anonymize it when no longer needed.

9. Automated processing

Avivise applies predefined scoring rules to assessment answers to generate orientation results. This is guidance only and is not used by BlockFit OÜ to make a decision that produces legal or similarly significant effects about you. PostHog analytics and session replay are not used to make such decisions, create advertising profiles, or determine your assessment result.

Jev, provided by TypeSafe AI, analyses your scenario choices and written answers with the question context and your assessment experience level to personalise coaching feedback. This processing provides the assessment service under our contract with you. It does not change the deterministic score or make a hiring or certification decision. We do not send your account email or payment details. Please do not include personal or sensitive information in your answers.

TypeSafe processes this content in the United States under its Data Processing Addendum, including EU Standard Contractual Clauses. Its privacy policy states that inputs are not used to train or fine-tune models. Data is retained as necessary for processing and applicable legal duties; no fixed provider retention period or zero-retention arrangement is promised for this service. Contact us to request access or deletion, including assistance with provider-held data.

10. Your GDPR rights

If GDPR applies to you, you can request access, correction, deletion, restriction, portability, objection to processing, or withdrawal of consent. Some requests may be limited where we must retain data for legal, payment, security, or dispute reasons.

You also have the right to lodge a complaint with a supervisory authority. For Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or you may contact your local EU/EEA data protection authority.

11. Website assistant and personal data