Privacy Policy

Last updated October 3, 2026

This policy explains what Tutor Platform collects, why, and the choices you have.

What we collect

• Account: your name, email address, and a hashed password (or your Google/GitHub identity if you use social sign-in).
• Study data you save: ACS codes from your knowledge test reports, test name, date, and score; your study programs (test, target date, and ground school course), review list, and practice answers; mock exam results; tutor conversations; and instructor share links.
• Uploads: a photo or PDF of your test report is sent to our AI provider to read the codes and is not stored by us.
• Usage: a record of each AI request (feature, model, token counts) to enforce daily limits.
• Billing: if you subscribe, Stripe processes your payment details. We store only your Stripe customer and subscription identifiers and status, never your card number.

Browsing the ACS, the FAA library, and decoding codes without an account does not require any personal data.

How we use it

To run the features you use, keep your account secure, send the emails you ask for (verification, password reset, optional review reminders), process subscriptions, prevent abuse, and fix errors. We do not sell your personal information or use it for advertising.

Service providers

• Vercel (hosting) and Neon (database).
• OpenRouter and the AI model provider it routes to (by default Anthropic) to answer tutor questions, write study notes and practice questions, and read uploaded reports. Your prompts and uploads are sent to them for this purpose.
• Stripe (payments), Resend (email), Cloudflare Turnstile (bot protection), and Sentry (error reports, if enabled).

Cookies

We use a session cookie to keep you signed in and remember your theme preference in your browser. Bot protection may set its own short-lived cookies. We do not use advertising or cross-site tracking cookies.

Sharing with your instructor

When you create a share link, anyone with that link can view the shared report and your progress on its codes (not your email or other reports). You can revoke a link at any time.

If you study through a school

When you join through a ground school or employer, we receive what the school's learning platform sends us about you (name, email, enrollments, lessons completed, quiz answers and scores) and use it to tailor your tutor and study plan. The school sees your name, email and pass dates. It sees your practice results and weak topics only if you choose to share them, and a knowledge test report only if you share that report. Your questions to the tutor stay private. We process school data for the school under our Data Processing Agreement; when a school's plan ends we delete its data within 30 days, and you keep your own account. Our providers are listed on the subprocessors page.

Retention and your choices

We keep your data while your account exists. In Settings you can export everything we store about you as JSON, turn reminder emails on or off, and delete your account, which permanently removes your data from our database and cancels any subscription. Payment records kept by Stripe follow Stripe’s retention rules.

Children

The service is not directed to children under 13, and we do not knowingly collect their information. Students under 18 who join through a school do so with a parent's or guardian's consent, which the school confirms.

Contact

Questions or requests: contact@email.hickshost.com.