Privacy Policy

FirstSolo.ai (“we”, “us”) operates the website and service at firstsolo.ai. We are an independent study tool and are not affiliated with or endorsed by the Federal Aviation Administration. You can reach us at [email protected].

Account information. Your email address (used to sign you in with one-time codes) and the display name you choose. If you continue with Google or Apple instead, we keep the address, the name if you share it, and the account identifier that provider gives us — nothing else; with Apple’s Hide My Email the address is a private relay that forwards to yours. We do not store passwords; there are none.

Study activity. The sessions you start, the questions served to you, the answers you give — including free-text answers and messages you exchange with the AI examiner — your scores, mastery estimates and the timing of your work. This is the product: it is what makes the next question fit you.

Credits and billing records. Your credit balance, every credit charged or added and what it was for, and — only for the purpose of checking our own prices against costs — the size, in tokens, of each request the service made to an AI model on your behalf. We do not store payment card details; when paid credit packs launch, payment will be handled by a payment processor and this policy will be updated first.

Technical data. Server logs that record requests to the service with the time, the page or endpoint, the response status, a short account identifier and the network address they came from. These logs exist to keep the service running and secure and are not used for profiling.

Messages you send us. If you use the contact form or email us, we keep the message and your address so we can reply.

• We do not sell, rent or trade personal information — to anyone, for any purpose.
• We do not share your information with third parties for their own marketing or any other purpose of their own.
• We do not use your answers, messages or any other data of yours to train AI models, ours or anyone else’s.
• We do not show advertising and do not use advertising or cross-site tracking technologies.
• We do not collect precise location, contacts, or anything from your device beyond what a web browser sends.

• To provide the service: sign you in, write and grade questions, track your mastery, keep your credit ledger.
• To keep the service working and safe: diagnose failures, prevent abuse, verify that charges match usage.
• To improve the service in aggregate — for example, which subtopics students find hardest, or how often a generated question is rejected by verification — without singling anyone out.
• To answer you when you write to us.

We run the service on infrastructure and services operated by other companies. They process data only to provide their service to us, under their own terms, and not for their own purposes:

• OpenAI — generates and verifies questions and grades free-text answers. The question, the reference notes, your answers and messages in a session are sent to OpenAI’s API to produce the response. We send them with storage disabled, and under OpenAI’s API terms this data is not used to train its models.
• Emailit — delivers sign-in codes and messages from the contact form.
• DigitalOcean — hosts the application, the database and the file storage (illustrations, figures and reference documents).
• Google Analytics — see “Cookies and analytics” below.

We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the service — in which case this policy would continue to apply to your data.

Strictly necessary cookies. Signing in sets a small number of cookies that identify your session (“fs_access”, “fs_refresh”, “fs_session”). They contain no personal information beyond an account reference, are not readable by other sites, and are deleted when you sign out. The service cannot work without them.

Preferences. Your browser may store a few conveniences locally (for example the zoom level of the reference viewer, or recent searches). These never leave your device.

Google Analytics. We use Google Analytics to understand, in aggregate, how the public site and the service are used — which pages are visited, roughly where visitors come from, which features are used. Google Analytics sets its own cookies (“_ga” and similar) and processes data under Google’s privacy policy. We do not send it your email, your name or the content of your study. You can opt out with Google’s browser add-on or by blocking its cookies. We use no other analytics or tracking tools.

Your account information, study activity and credit ledger are kept for as long as your account exists. Server logs are kept for a limited time for operations and security and then discarded. Messages you send us are kept as long as needed to handle them.

You can delete your account yourself at any time from the account page. Deletion is immediate and complete: your account, sessions, answers, mastery record, credit ledger and any remaining balance are removed and cannot be recovered. Copies in routine backups expire on their own schedule shortly after. You can also ask us to delete your data by email; we will confirm when it is done.

Depending on where you live you may have rights to access, correct, export or delete your personal information, to object to or restrict certain processing, and to complain to a supervisory authority. You can exercise the first four directly: your study record is visible in the app, your name is editable on the account page, and deletion is described above. For anything else, email us and we will respond within 30 days.

Sign-in uses one-time codes sent to your email, or your Google or Apple account, so we hold no password to lose. Data is encrypted in transit. Access to the production systems is limited to the people who operate the service. No system is perfectly secure; if we learn of a breach affecting your data we will tell you.

The service is intended for people preparing for an FAA pilot certificate and is not directed to children under 13. We do not knowingly collect information from children under 13; if you believe a child has created an account, contact us and we will delete it.

We will update this page when our practices change and revise the effective date at the top. For material changes — for example a new category of data or a new service provider — we will also let signed-in users know in the app or by email.

Questions about privacy: [email protected], or the contact form on the front page.