Privacy Policy
Last updated: 2026-07-19. What we collect, why, and who it's shared with — in plain language.
Draft — pending attorney review
This page was drafted to accurately describe what the app actually collects and how it's actually handled in the code, so the site is not shipping with zero privacy disclosure. It has not yet been reviewed by a licensed attorney and should get that review — particularly for GDPR/CCPA-style rights language if ACE serves those users — before being treated as final.
1. What we collect
Account information. Email address and a password (we store a bcrypt hash of your password, never the password itself, and can't recover it — only reset it).
Study and performance data. Which questions you're shown, whether you answered correctly, how confident you said you were, and the mastery estimate the adaptive engine computes from that per FAA knowledge code. This is the data the whole product runs on — it's how ACE tells you what to study next.
Payment data. ACE does not collect or store your card number. Purchases and subscriptions are handled entirely by Stripe; ACE keeps a record of what you bought, when, and its status (active, canceled, etc.), tied to your account.
Lead-capture data. If you submit the free assessment, a survival-game score, or an email-capture form before creating a full account, we store the email address and, where relevant, the score or diagnostic result, so we can send you that result and relevant follow-up.
Technical data. Standard web request data (IP address, browser user agent, timestamps) as any web service logs, used for security, abuse prevention, and debugging — not for ad targeting.
2. How we use it
- Run the adaptive drill engine: pick your next question, compute your mastery per knowledge code, and generate your Knowledge Code Report.
- Process payments and manage entitlements (which subjects/membership your account has unlocked).
- Send account, purchase, and study-progress emails (verification, receipts, results, study nudges).
- Keep the service secure: detect abuse on public endpoints (like the free assessment or the leaderboard), prevent fraud, and debug problems.
- Improve the question bank and product based on aggregate performance patterns (e.g., which items are miscalibrated) — this uses de-identified, aggregate signal, not "read one student's individual history for its own sake."
We do not sell your personal data, and we do not use your study data to build an advertising profile.
3. Who we share it with
ACE uses a small number of vendors to run the service, each only for the job it does:
- Stripe — payment processing. Stripe receives what it needs to process your purchase (handled directly by Stripe's own checkout, not passed through ACE's servers) and tells ACE back what you bought and its status.
- Resend — transactional email (verification, receipts, results). Resend receives the email address and content needed to deliver that specific message.
- Our hosting provider — runs the application and database. Access is limited to what's needed to operate the service.
We don't share your data with anyone else except: if required by law (a valid legal request), to protect ACE's or others' rights and safety, or with your explicit consent.
4. Security
Passwords are hashed with bcrypt, never stored or logged in plain text. Your login session is a signed, HttpOnly cookie (not readable by page JavaScript) sent only over HTTPS in production. No system is perfectly secure, but this is a real, specific description of what ACE actually does today, not boilerplate.
5. Data retention and your choices
We keep account and study data for as long as your account is active, so your progress persists across sessions. If you want your account and associated data deleted, email nickb@aceavionicstraining.com and we'll process the deletion, subject to what we're legally required to keep (for example, payment records for tax/accounting purposes). You can ask what data we hold about you the same way.
6. Cookies
ACE uses one essential session cookie to keep you logged in. It's not used for cross-site ad tracking. We don't currently run third-party advertising trackers on the app.
7. Children's privacy
ACE is built for aviation maintenance technician candidates and is not directed at children under 13. We don't knowingly collect personal information from children under 13; if you believe a child has created an account, email us and we'll remove it.
8. Changes to this policy
We may update this Privacy Policy as the product changes. Material changes will be reflected in the "Last updated" date above.
Questions, or want your data deleted?
Email nickb@aceavionicstraining.com and a real person answers.