Privacy policy

aircpd is provided by AirCPD Ltd, a company registered in England and Wales (company number 17405853), registered office 128 City Road, London EC1V 2NX. AirCPD Ltd is the controller of the personal data described here, except where “If an organisation provides your aircpd” says otherwise. We are registered with the Information Commissioner's Office, registration number ZC268711.

For anything in this policy, email support@aircpdapp.com.

• Your account. Your name, email address and how you sign in: Google, Apple or a one-time code sent to your email. If you sign in with Google or Apple, they give us your name and email address, never your password.
• Your profile. Your mobile number, employer and profession, the professional body you report to, your CPD year and a photo if you add one.
• Your CPD record. The activities you log or accept, the hours they carry, your reflections, the evidence you upload, your plans and the submissions you send.
• Connected accounts. If you connect Google Calendar, Google Drive, Outlook Calendar or OneDrive, the data described under “Acton and connected accounts”.
• Your subscription. If you subscribe to Plus, Apple or Google tells us whether your subscription is active. We never receive your card details.
• From your organisation. If your employer or professional body provides aircpd, it gives us your name, work email and details such as your team, and sets the plan you work to.
• Support. What you send us when you contact support.
• Technical data. Your device type, app version, and records of sign-ins and errors, so we can keep aircpd running and secure.
• This website. The contact and app-launch forms collect what you type into them. We count website visits with Vercel Analytics, which uses no cookies and does not identify you.

We do not sell your personal data and we do not use it for advertising.

Acton is aircpd's assistant. It finds learning you have already completed and suggests it as a CPD entry. Connecting an account is optional, you choose which calendars and folders Acton reads, and nothing is added to your record unless you accept it.

Google Calendar and Google Drive are covered in full under Google user data below.

Outlook Calendar and OneDrive. If you connect a Microsoft account, aircpd asks Microsoft for read-only access, plus your name and email address so you can see which account is connected.

• Outlook Calendar (read-only). The list of your calendars, so you can choose which ones Acton reads. From the calendars you choose, events from the last 12 months: the title, description, start and end times, and the organiser's email domain. We do not read who else was invited.
• OneDrive (read-only). Folder names, so you can choose folders in aircpd. Inside the folders you choose, and the folders within them, PDF, JPEG and PNG files changed in the last 12 months and no larger than 10 MB. We do not open files outside the folders you choose.

aircpd never creates, changes, shares or deletes anything in your Outlook Calendar or OneDrive. We store and protect Microsoft data the same way as Google data: encrypted tokens, the calendars and folders you chose, and Acton's suggestions, never copies of your files.

You can disconnect Outlook Calendar or OneDrive at any time in the app, under Settings, then Connectors. When you disconnect the last Microsoft source, we delete your stored Microsoft tokens. To remove aircpd's permission from your Microsoft account as well, use your Microsoft account's app permissions page. For a work or school account, ask your IT admin.

aircpd uses Anthropic, an AI provider, to read the event details and documents Acton scans and turn them into suggestions. Anthropic processes this data on our behalf and does not use it to train its models.

AI never writes your reflections. No decision with legal or similarly significant effect is made about you by automated means alone: you accept or reject every suggestion, and nothing is submitted without your approval.

Service providers who process data on our instructions:

• Anthropic: AI processing for Acton
• Vercel: hosting for the app, console and website, file storage and website analytics
• InstantDB: database
• Resend: email delivery
• Stripe: payments from organisations
• Formspree: website forms

Apple and Google provide sign-in, app distribution and Plus billing under their own privacy policies. Google and Microsoft hold the accounts you connect, under their own policies.

Your organisation sees what is described in the next section. A professional body receives only the submissions you approve and send.

We also share data if the law requires it, or to protect someone's safety. If AirCPD Ltd is sold or merged, your data moves with the business under this policy, and we tell you first.

If your professional body or employer runs your CPD through aircpd, it can see:

• Your name, mobile, employer and profession
• Your hours, your cycle dates, the date you registered with your body if you set it, and whether you are on track
• Any change you make to your CPD year, or to the date you registered
• Which of their activities you plan, check in to or complete
• After you approve and send a submission, the approved copy. It cannot open your live record.

They never see:

• The text of your reflections for your professional body plan
• Your evidence and documents themselves
• Your connected accounts, your calendar, your files or Acton's suggestions
• Anything you add yourself outside the copy you approve and send

The organisation decides how it uses the reporting it receives, and its own privacy notice covers that use.

• While you have an account, we keep your account and record.
• When you delete your account: if it isn't linked to an organisation, we delete it immediately. If it is linked, we tell the organisation's Account Owner, who cannot veto the request, and we delete your account within 30 days.
• What the organisation keeps: its reporting records, including completion receipts, sent submission packets, meeting attendance and evidence you explicitly shared.
• Connected accounts: we delete stored tokens when you disconnect the last source from a provider. Suggestions you rejected stay with your account, so Acton doesn't suggest them again, and are deleted with it.
• Billing records: we keep records of payments and subscription changes for as long as UK tax law requires, with your identity removed once your account is deleted.

Under UK data protection law you can ask us to:

• give you a copy of your data
• correct it
• delete it
• restrict or object to how we use it
• send it to you or another service in a portable format
• stop using it where you gave consent

Email support@aircpdapp.com and we reply within one month. You can also export your record and delete your account yourself in the app: see Support.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd like the chance to put it right first.

Some of our service providers process data outside the UK, mainly in the United States. When they do, we rely on UK adequacy regulations or the UK's approved contract terms for international transfers. Email us for details.

Data is encrypted in transit. Connected-account tokens are encrypted at rest. Only staff who need access to do their job have it.

aircpd is for working professionals and is not intended for anyone under 18.

aircpd can connect to your Google Calendar and Google Drive, so that Acton, our CPD assistant, can find learning you have already completed and suggest it for your record. Connecting is optional, you choose what Acton reads, and nothing is added to your record unless you accept it.

What we access

• Google account email, to show which account is connected.
• Google Calendar (read-only). The list of your calendars, so you can choose which ones Acton reads. From the calendars you choose, events from the last 12 months: the title, description, start and end times, and the organiser's email domain. We do not read who else was invited.
• Google Drive (read-only). Folder names, so you can choose folders in aircpd. Inside the folders you choose, and the folders within them, PDF, JPEG and PNG files changed in the last 12 months and no larger than 10 MB. We do not open files outside the folders you choose.

aircpd never creates, changes, shares or deletes anything in your Google Calendar or Google Drive.

How we use it

We use this data only to find completed professional learning and show it to you as suggested CPD entries (title, date, duration, type and the reason we suggest it). You accept or reject each suggestion.

To read events and documents, aircpd sends the relevant event details or file to Anthropic, which processes it on our behalf to produce the suggestion. Anthropic, our AI provider, does not use this data to train its models (per its commercial terms).

We do not use Google user data to develop, improve or train generalised AI or machine-learning models. We do not use it for advertising, we do not sell it, and we do not allow people to read it, except with your permission, for security purposes, to comply with the law, or where the data has been aggregated and anonymised for internal operations.

What we store

• Your Google access and refresh tokens, encrypted.
• The ids and names of the calendars and folders you chose.
• The suggestions Acton makes: a title, date, duration, activity type, the calendar or file name it came from, and a reference to the event or file. We do not store event descriptions, and we do not store copies of your files.
• If you accept a suggestion, it becomes an entry in your CPD record. A suggestion from Google Drive keeps a reference to the file it came from (its Google Drive file id), not a copy of the file. The file stays in your Google Drive.

Who can see it

Only you see your Google data and Acton's suggestions. If an organisation provides your aircpd, it sees the reporting described under 'If an organisation provides your aircpd', such as your hours and whether you're on track. It never sees your calendar, your files or Acton's suggestions.

Keeping and deleting it

You can disconnect Google Calendar or Google Drive at any time in the app's settings. When the last Google source is disconnected we revoke aircpd's access at Google and delete the stored tokens. You can also remove aircpd's access from your Google Account at myaccount.google.com/permissions. If you delete your aircpd account, we revoke our Google access and delete your Google data with the rest of your account. Suggestions you have rejected are kept with your account, so Acton does not suggest the same thing again, and are deleted when your account is deleted.

Limited Use

aircpd's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When we change this policy, we update the date at the top. If a change affects how we use your data, we tell you in the app or by email before it takes effect.

AirCPD Ltd, 128 City Road, London EC1V 2NX
support@aircpdapp.com