FlightPath privacy information

This adds to the Out-There HealthTech Privacy Notice, which explains who we are, the personal data we hold about you as a platform member, who we share it with, how long we keep it, where it is held, and your rights. This page explains what is different about FlightPath (also called Mission Control).

1. Summary

• The missions you create are saved on our website, so that you can come back to them. Only you can see them in FlightPath.

• Sharing a progress summary with our team is optional, and only happens if you agree to it. You can stop at any time, and saying no never affects your use of FlightPath.

• You can download or permanently delete all your FlightPath data yourself, in FlightPath Settings.

• We delete your FlightPath data automatically if you have not used FlightPath for 2 years.

• We do not sell your data or use it for advertising, and FlightPath uses no analytics or tracking cookies.

2. What FlightPath keeps about you

Data	Why	Lawful basis	How long
That you are signed in and allowed to use FlightPath	So only people allowed to use FlightPath can, and to link your missions to your account	Contract	Nothing extra is stored; your platform account is kept as the Privacy Notice describes
Your missions: the mission name, problem statement and target users you type in, your track, starting point (TRL or Orbit), your answers to the classification questions, the pathway FlightPath works out, and your checkpoint progress	To create your roadmap and save your progress	Contract	Until you delete the mission or all your FlightPath data, or 2 years after you last used FlightPath, whichever is sooner
The day you last used FlightPath (a date, not a record of what you did)	To apply the 2-year deletion rule	Legitimate interests in not keeping data longer than needed	As for your missions
A record that you accepted the FlightPath additional terms and read this page: which version, the date and time, that it was through FlightPath, and (for the terms) the IP address and browser used	As evidence of what you agreed to and when	Contract; legitimate interests in being able to show what was agreed	As the Privacy Notice sets out for consent and acceptance records; your identity is removed if you ask us to erase your data
If we invited you to FlightPath by email: your email address, who invited you, and when	So you can join	Legitimate interests in inviting named people	Until you accept; if you do not, deleted six months after the invitation expires

Please do not enter information about patients or other identifiable people, for example in a problem statement. FlightPath does not need it. We do not ask for special category data (such as health data) about you. The pathway FlightPath suggests is information for you, not a decision about you.

3. Sharing your progress (optional)

If you agree to share your progress, our team can see:

• your name and platform account email;

• the organisation you give (optional);

• a summary of each mission: its name, track, stage, how many checkpoints are complete, and when you were last active.

They never see your problem statements or detailed answers. They use this only to offer you free (pro bono) support or signpost you to specialist help.

• Lawful basis: consent. Saying no, or withdrawing later, never affects your use of FlightPath. Withdrawing does not affect what we did before you withdrew.

• FluentCRM: while you share, your platform contact record in FluentCRM (our own contact system, on our website) carries a "FlightPath progress sharing" tag, so the team knows to get in touch. The tag is removed when you withdraw. Sharing does not add you to any mailing list.

• When you withdraw, in FlightPath Settings, the team stops seeing your progress immediately.

• Your decision is recorded in the platform's agreements register: which wording, yes or no, and when you agreed or withdrew. It is kept as the Privacy Notice sets out for consent records, so that we can show we had your consent, and your identity is removed from it if you ask us to erase your data.

• If the wording changes in a way that matters, sharing stops until you agree to the new wording.

4. Who can see your missions

In FlightPath, only you can see your missions. A small number of our staff who look after the website can technically access the database for maintenance and security; they do not look at your missions for any other purpose. If you share your progress, our team sees only the summary in section 3.

5. Where your data is held

FlightPath is part of our website, so your missions are hosted, backed up and protected in the same way as the rest of your platform data. The Privacy Notice explains where that is, including our hosting provider, our encrypted off-site backups, and the safeguards for any transfer outside the UK. FlightPath sends your data nowhere else. Its fonts and files are served from our own website.

FlightPath links to other organisations' websites (for example GOV.UK, the MHRA and the HRA). We do not pass any information about you or your missions to them, and their own privacy notices apply when you visit them.

6. Cookies and storage on your device

FlightPath uses only storage that is strictly necessary to provide the service you ask for, so we do not ask for consent to it:

• the platform's sign-in cookies, described in the Privacy Notice;

• while you create a new mission, your answers so far are kept in your browser's session storage until the mission is saved, and your browser deletes them when you close the tab;

• only if the platform's agreements register is ever unavailable: one cookie, fp_terms, which remembers in your browser that you accepted the FlightPath additional terms. It holds the version and a coded reference to your account, and lasts 12 months.

7. Your rights

Your rights, and how to complain, are set out in the Privacy Notice. In FlightPath Settings you can yourself:

• download all your FlightPath data in a machine-readable file;

• stop sharing your progress (withdraw consent);

• permanently delete all your FlightPath data. Your platform account itself is not affected.

You can also delete single missions, or all of them, from your missions dashboard. Deleting your platform account also deletes your FlightPath data. For anything else, email community.management@outtherehealthtech.com.

8. Earlier versions

An earlier test version of FlightPath was hosted separately, with its own privacy notice. Nothing from it is copied into this version.

9. Changes to this page

We will update this page if what FlightPath does with personal data changes. If a change is significant, we will ask you to read the new version before you next use FlightPath.