Privacy Policy
Last updated 2026-09-04.
AeroLab is a free educational tool. This page explains what we collect, why, and what we do with it, in plain language.
What we collect
- Account info: the email address you sign up with, a username, a display name, and the schooling band you choose (elementary/middle/high/college) so lessons are pitched at the right level. We do not ask for or store your birthdate.
- What you build and learn: saved rocket designs, quiz results, XP and achievement progress, and daily challenge attempts.
- What you write to other students: forum posts and comments, crew names and mottos, and direct/crew messages. These are visible to other users of the app as described below.
- Your avatar: a preset icon you choose — we do not accept photo uploads.
- Feedback you send us through the in-app feedback form, including the page you were on when you sent it.
- Basic technical data needed to keep you signed in and the app working (session cookies via Supabase Auth).
Who else sees it
- Your username, display name, avatar and coarse schooling level are visible to other signed-in users (leaderboards, crews, friends lists).
- Forum posts, crew names/mottos, and messages you send are visible to the students you send them to or post them for — a forum post to everyone, a crew message to your crew, a direct message to its one recipient.
- Your email address and password are never shown to other users and are handled entirely by our authentication provider, Supabase.
Third parties we use
- Supabase — our database, authentication and file storage provider. Everything above is stored there.
- Groq (or a local model, in development) — powers the AI mentor. When you ask the mentor a question, your question and the relevant details of your current rocket/lesson are sent to generate a reply. Chat history is not saved after you close it.
- NASA’s public image API — used to fetch a daily space photo. No information about you is sent to it.
Children’s privacy
AeroLab is intended for students aged 13 and up. At signup, every account holder confirms they are 13 or older. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact us and we will delete it.
Your choices
You can change your display name and schooling level at any time in Profile settings. To request deletion of your account and data, use the in-app feedback form or contact us — self-service account deletion is on our roadmap but not built yet.
Changes
If this policy changes materially, we will update the date at the top of this page.
See also our Terms of Service.