Privacy Policy

We may collect account information such as your email address, authentication details, display name, selected training base, policy acceptance versions and timestamps, and information you provide to create or manage your account.

If you choose Google sign-in, Google and our authentication provider exchange information needed to authenticate you, such as your email, name, profile image, and provider account identifier. This sign-in flow does not request access to your Gmail messages or Google Drive files. Google handles information you provide directly to it under its own privacy policy.

We may collect study and usage information you create or generate in the app, such as quiz attempts, progress, saved notes, review activity, feedback, search activity, questions or messages, voice recordings or transcriptions when you use voice features, community flashcard packs, publication and moderation requests, and other User Content. Support messages and reports also include the information you choose to send us.

We may collect technical and usage information such as IP address, browser and device details, timestamps, referring pages, anonymous and session identifiers, pages or features used, diagnostic events, and security logs. We may use cookies or similar technologies needed for authentication, preferences, security, and basic product analytics.

When you purchase a paid plan, payment details are processed by Stripe. We generally receive billing identifiers, subscription status, and transaction information, not your complete payment card number.

We use authentication cookies and browser storage, including local storage and session storage, to maintain sessions, remember preferences, save guest study progress, and associate first-party analytics events with a browser or session. Guest progress may be transferred to your account when you choose to save it after signing in. Our analytics focus on feature use, counts, durations, and outcomes rather than storing raw messages, search text, notes, or typed answers in analytics events.

You can clear cookies and browser storage or restrict them using browser settings. This may sign you out, remove locally saved preferences or guest progress, or prevent features from working. Clearing browser storage does not delete information already saved to your account or sent to the service. We do not use these technologies for cross-context behavioral advertising.

Voice features use your microphone when you choose to record and grant browser permission. Submitted audio is sent to our transcription provider, currently OpenAI. Transcripts may be used to evaluate an answer and saved with the associated study activity. The transcription endpoint does not save raw audio to our app database; provider processing and retention are governed by the applicable provider arrangements. You can decline or revoke microphone access and use typed input instead.

We use information to provide, personalize, secure, troubleshoot, and improve Texan Trainer; authenticate accounts; save study progress; process subscriptions; respond to support requests; prevent abuse; measure reliability and feature use; and comply with legal obligations.

If you submit a question, voice recording, or other content to an AI-assisted feature, we may send the information needed to answer or process it to OpenAI or another provider supporting that feature. Do not include classified, CUI, CTI, export-controlled, proprietary, sensitive, or other information you are not authorized to disclose.

We do not intentionally use private User Content to train general-purpose AI models. We may use aggregated or de-identified operational measurements, such as latency, feature adoption, error rates, quiz completion, and retrieval performance, to operate and improve the service. If our use of private User Content changes, we will update this policy and obtain any consent required by applicable law.

We may share information with vendors that help us operate the app. Relevant providers may include Supabase for authentication and database infrastructure, Stripe for payments and subscription billing, OpenAI for AI-assisted responses and voice processing, and hosting, security, email, or analytics providers used to operate the service. Provider names and roles may change as the service develops.

AI processing can include your submitted question or transcript, relevant conversation context, and source excerpts needed for the feature. Providers may retain request data for security, abuse prevention, or other purposes under the applicable agreements and settings. Our commitment not to intentionally train general-purpose AI models on private User Content does not mean all processing is free of provider retention.

These providers may process information in accordance with their own terms and privacy practices and our instructions or applicable agreements. Information included in an AI request may be transmitted to the provider processing that request.

When you choose to publish a community pack, its content, title, description, and associated display name may be visible to other users. Reports, review requests, and submitted content may be reviewed by authorized operators to handle moderation, rights claims, support, and security. Private notes and study activity are not automatically published to the community library.

External links lead to services with their own privacy practices. Information you provide directly to those services is handled under their policies.

We may also disclose information when reasonably necessary to comply with law, enforce our agreements, protect the rights or safety of users or others, investigate abuse, or support a business transfer such as a merger or acquisition. We do not sell personal information or share personal information for cross-context behavioral advertising.

Account data is generally retained while your account remains active and for a reasonable period afterward as necessary for security, legal compliance, fraud prevention, billing records, backups, and dispute resolution.

Private account-owned study content is generally retained until you delete it or the associated account is deleted. Account deletion removes the account profile and associated private study records, removes account-scoped analytics and identity snapshots, and requests deletion of the authentication identity and linked Stripe customer. Billing providers may retain transaction records as required by law. Deletion can require retries if provider cleanup fails; access remains revoked while deletion is pending.

Shared community content and governance history may remain after account deletion with account identity references removed. Request takedown of shared packs separately through the available tools or by contacting us. Temporary backups and records needed for security, legal compliance, billing, or disputes may outlast deletion and are removed when no longer needed for those purposes.

Security and diagnostic logs may be retained for a limited period reasonably necessary for security, abuse prevention, troubleshooting, reliability, and legal compliance. We limit retention where reasonably practicable and dispose of information when it is no longer needed.

After account deletion, we may retain a pseudonymous cryptographic identifier derived from the verified account email, without retaining the email in that record, as reasonably necessary to enforce the one-trial policy and prevent repeated-trial abuse.

We use reasonable administrative, technical, and organizational safeguards. No internet service can guarantee absolute security, so please use a strong password and do not submit information that requires a higher level of protection than this service provides.

Depending on where you live and whether a privacy law applies to your information, you may have the right to request confirmation that we process your personal information, access or receive a copy of it, correct inaccurate information, delete it, receive it in a portable format, or opt out of certain processing such as sale, targeted advertising, or qualifying profiling.

You may review or update certain account information through the app. You may request account deletion using Account deletion, or contact us for help. To make a privacy request, email ski.to.dev@gmail.com with enough information for us to understand and verify the request. We may need to verify your identity before responding. Where applicable, you may submit a request through an authorized agent, subject to verification of their authority. We will respond within legally required periods and will not discriminate against you for exercising applicable privacy rights. Where applicable law grants these rights, you may also object to processing, request restriction, withdraw consent for processing based on consent, or complain to your data protection authority. The signup acknowledgment of this policy is not a blanket consent to unrelated processing.

Where applicable law provides an appeal process, you may appeal a denied request by replying to our decision or contacting us at the same address with “Privacy appeal” in the subject line. We will review the appeal and respond within the period required by applicable law.

You may unsubscribe from non-essential email communications when an unsubscribe option is provided. Essential service messages, such as account, security, billing, or transactional notices, may still be sent.

Texan Trainer is not directed to children under 13, and you must be at least 13 years old to use the service. If you are under the age of majority where you live, use of the service requires permission from a parent or legal guardian. We do not knowingly collect personal information from children under 13. If you believe a child provided information, contact us so we can review and delete it where appropriate.

The service may be operated using providers in the United States or other countries. Information may be processed in locations whose privacy laws differ from those where you live. Where applicable law requires a legal basis, we process information as necessary to provide the service under our agreement with you, meet legal obligations, pursue legitimate interests such as security and service improvement, or obtain consent where required. Where legally required, international transfers are subject to appropriate safeguards; contact us for information about safeguards applicable to your data.

Texan Trainer is not an authorized system for receiving, storing, or processing Classified National Security Information, CUI, CTI, export-controlled technical data, ITAR- or EAR-controlled material, restricted distribution material, proprietary contractor data, information marked against public release, or other government-controlled or restricted information. Do not submit this information to the app or to an AI feature.

Texan Trainer is an independent study aid, not an official USAF source or officially sanctioned software. We may reference public aviation, military, or training materials, but those references do not mean the USAF or any other organization has reviewed, approved, or endorsed our privacy practices, content, or software.

We may update this Privacy Policy as the service or legal requirements change. We will post the updated policy at this URL and update the date above. For material changes, we will provide notice through the app or account email and obtain consent where required by law before applying the changed practice.

For privacy questions or requests, email ski.to.dev@gmail.com.