Contents
Summary: Pipehawk collects only what is needed to provide the service. We do not sell your data. All data is encrypted in transit. You can delete your data at any time.
1. Information We Collect
Pipehawk collects the following categories of information:
- Account information: Username and bcrypt-hashed password created during registration.
- User-generated content: Engagements, AO profiles, contacts, civil sites, reports, fitness scores, KLE plans, taskers, and other operational data you enter into the App.
- Session data: Authentication session tokens stored in secure cookies to keep you signed in.
- Location data: GPS coordinates when you explicitly use mapping or MGRS features, and only with your device's location permission granted.
- Usage data: Server logs including IP addresses, request paths, and timestamps for security and operational purposes.
We do not collect advertising identifiers, device fingerprints, or behavioral tracking data.
2. How We Use Your Information
Your information is used solely to:
- Authenticate your identity and secure your account
- Store and synchronize your data across sessions and devices
- Provide the App's features and functionality
- Respond to support requests and troubleshoot issues
- Improve the App's stability and user experience
We do not sell, rent, share, or monetize your personal information for marketing or advertising purposes.
3. Data Security
We implement industry-standard security measures to protect your information:
- Encryption in transit: All data is transmitted over HTTPS/TLS
- Password security: Passwords are hashed using bcrypt — they are never stored in plain text
- Session security: Authentication uses secure, httpOnly, sameSite cookies
- Access control: Database access is restricted and all user data is scoped per account
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, and users should not store information in the App that would cause significant harm if disclosed.
4. Third-Party Services
Pipehawk uses the following third-party services:
- OpenAI (AI Assistant): The AI chat feature is powered by OpenAI's API. When you use the AI assistant, your query is transmitted to OpenAI's servers for processing and a response is returned. OpenAI does not use API inputs or outputs to train its models by default. Your queries are processed solely to generate a response and are not retained for training purposes. Do not enter classified information, CUI, personally identifiable information (PII) of others, unit locations, mission details, call signs, or any operationally sensitive data into the AI assistant. OpenAI's privacy practices are described at openai.com/privacy.
- Cloud hosting: The App's backend infrastructure is hosted on Replit's cloud infrastructure. Replit's privacy practices are described at replit.com/site/privacy.
We do not integrate with social media platforms, advertising networks, or analytics data brokers.
5. Data Retention
Your data is retained as long as your account remains active. You may delete your data at any time through the Profile screen in the App ("Clear All Data"). Upon account deletion request, all associated data will be permanently and irreversibly removed from our systems within a reasonable timeframe.
Server logs may be retained for up to 90 days for security and operational purposes.
6. Your Rights
You have the following rights regarding your personal data:
- Access: View all data you have stored in the App
- Correction: Edit any inaccurate data directly within the App
- Deletion: Delete all data via the Profile screen, or request account deletion by emailing us
- Export: Export your data in PDF or Word format via the Export Data feature in the Profile screen
- Location withdrawal: Revoke location permission at any time through your device's Settings
To exercise any right not available within the App, email Markfowens@gmail.com.
7. Children's Privacy
Pipehawk is not directed to or intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided personal information to Pipehawk, please contact us immediately so we can remove it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify users through the App. Your continued use of the App following any changes constitutes acceptance of the revised Privacy Policy.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
Privacy Contact
Email: Markfowens@gmail.com
We aim to respond to all privacy-related inquiries within 5 business days.