Australian made and hosted
Flying School is built and operated in Australia by Acorn Apps Pty Ltd (ABN 19 695 896 032). Infrastructure runs on enterprise cloud providers with data centres serving Australian traffic.
Security & trust
Built in Australia,
owned by you
Flying School is a multi-tenant platform handling student records, training notes, payments, and scheduling for flight schools across Australia. We take that seriously - here is how it shows up in the product.
Logical multi-tenant isolation
Every row in our database carries a school identifier. Application-layer isolation prevents one school from seeing another's data. Penetration attempts are a violation of our terms.
Payments via Stripe
We never store raw card data. Payments are processed by Stripe (PCI-DSS Level 1). For school checkout, funds settle directly to your Stripe Connect account - we never custody your money.
Encrypted credentials
Third-party tokens (Twilio, Meta, Xero, QuickBooks) are encrypted at rest. Only the services that need to call those providers can decrypt them - never our public API surface.
Spam Act compliance, baked in
Marketing opt-ins are tracked per channel. Mandatory opt-out links are added to non-transactional sends. We will suspend outbound pipelines that trigger carrier-level blocks.
30-day grace on expired plans
If your trial or subscription lapses, your school shifts to read-only - your data stays for 30 days so you can return without losing training records or billing history.
Data ownership
Your data, always
For the data of your students - names, bookings, intake answers, training notes - you are the controller. We process it on your behalf, bound by the multi-tenant isolation rules above. We do not own, sell, or use your students' data for our own purposes.
You can export customers, bookings, invoices, and form submissions to CSV or JSON at any time. If you ever leave, you take everything with you.
How we share data
We share information exclusively with the sub-processors needed to run the platform - Stripe for payments, Xero or QuickBooks for accounting (if you connect them), Twilio and our email delivery provider for messaging, Google for authentication and calendar sync, and our infrastructure hosts. We do not sell, rent, or trade your data to brokers or advertisers.
Australian Privacy Principles
Under the Privacy Act 1988 (Cth), you have the right to access, correct, export, and request deletion of your personal information. Student-side rights are equally respected via your data export tools. Ask us for a copy of our privacy policy if you need the full legal wording.
Where to escalate
For privacy questions: support@flyingschool.app. If you are unsatisfied with our internal response to a dispute, you can escalate to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Run the school with peace of mind
AU-hosted, Stripe-secured, and built for flight schools. Start the free trial today.