Pocket Cadet1. Account information
We process your email address, display name, account identifier, daily training goal, optional target date, verification status and account/session timestamps to create, secure and maintain your account. Email-account passwords are stored as one-way hashes. Session credentials are stored in your device’s Keychain. Registration and sign-in require an internet connection.
2. Sign in with Apple
If you choose Sign in with Apple, Apple supplies an account identifier and may supply your name and email address, including a private relay address when you choose Hide My Email. Our server verifies Apple authorization and stores an encrypted Apple refresh token to manage authorization and revoke it when you delete your account. Apple does not share your Apple Account password with us.
3. Training and learning data
Your account backs up aptitude sessions, including test type, procedural seed, duration, completion/interruption state, answers, correctness, response times, difficulty, scores and training events. These records support history restoration and progress review. New sessions are temporarily stored on your device until uploaded. Synced online history restores your account’s training cache. Learning downloads, bookmarks and study progress currently stay on your device. If you submit a content rating or issue report where available, we process your account ID, item/version IDs, rating, issue category and any text you submit.
3a. ATC with You
ATC with You uses your microphone with permission for simulated radio practice. Apple's Speech framework transcribes audio on your device, the on-device Apple Intelligence model interprets the conversation, and Apple speech synthesis plays the simulated controller. No third-party AI or cloud model is used. Initial setup may download Apple model assets over the internet. Raw microphone audio is temporary, is cleared when you leave the exercise or the app enters the background, and is never uploaded or stored in account backups. Conversation text, original and corrected transcripts, scenario/version identifiers, exercise timestamps and status, readback findings and debriefs are saved locally and synced over HTTPS to your Pocket Cadet account for history across devices. This account sync is not end-to-end encrypted; our server can process readable text. Completed or interrupted exercises sync when connected; an active exercise cannot be continued on another device. You can delete exercises in ATC history; deletion syncs to your other devices, while minimal deletion markers remain until account deletion to prevent old offline copies from returning. Signing out clears this device's ATC account cache, including unsynced exercises. Account deletion removes active ATC history and deletion markers; backups rotate out within 14 days. The separate speech diagnostic page does not sync its recordings or transcripts. Practice feedback is not a pronunciation assessment or official ICAO proficiency rating.
4. Email and support
We use Google’s Gmail service to deliver account-verification and password-reset emails, and to receive and answer support requests. Verification/reset links are single-use and expire after 30 minutes. We process your email address, message and information you choose to send to handle your request. Do not send passwords, Apple credentials or authentication links. We retain support correspondence while needed to resolve and document the request; contact us to request removal, subject to legal requirements.
5. Service providers and processing locations
Our account API and website are hosted on a Tencent Cloud server in Hong Kong. Google handles account and support email. Apple handles Apple sign-in, App Store services and update lookup. Providers receive the information needed for their role, including normal network-request information. Our operators access data only as needed to run and support the service. Providers and support systems may process data in countries or regions different from yours. We use service providers only for these service purposes and require applicable confidentiality and data-protection safeguards. We do not sell or rent personal data. We may disclose information when legally required, to protect users and the service, or with your consent.
6. Website storage and operational logs
This website does not use advertising cookies or third-party analytics. It stores your chosen language in your browser so the next page uses the same language; you can remove it by clearing this website’s data. Web and API requests can produce access/error logs containing IP address, request path, time, HTTP status and browser/app request information. Passwords, bearer tokens and request bodies are not intentionally written to access logs. Rate limiting uses hashed request buckets. Logs are used for operation, abuse prevention and troubleshooting, retained while needed for those purposes, and reviewed for removal; they are not used for advertising. Do not put private information in website URLs.
7. App Store update checks and purchases
The app can check Apple’s App Store lookup service for a newer version, sending the app’s bundle identifier and storefront or locale country code. Apple also receives normal network information; your Pocket Cadet training history, email and session token are not included in this lookup. Where StoreKit status/restore is available, Apple supplies subscription entitlement, expiry and renewal information to the app. Apple handles payment credentials; we do not receive your card details. Subscription purchasing and offer redemption are not enabled in the current app configuration. Any future server purchase verification or new data use will be disclosed before it is introduced.
8. Advertising, tracking and permissions
The current app contains no third-party advertising or analytics SDK and does not track you across other companies’ apps or websites for advertising. Training records are not sold or used for targeted advertising. Aptitude practice does not require location, microphone, contacts or photo-library access. Opening external links sends normal request information to that destination under its own policy.
8a. Separate speech diagnostics
Where the separate speech-diagnostic page is available, recording starts only when you choose it and grant microphone permission. Speech-recognition permission may also be requested for Apple’s older recognizer. Diagnostic recordings are temporary local files; diagnostic transcripts are processed on the device and are not uploaded to the Pocket Cadet server or added to account backups. Recognition requires Apple on-device recognition; there is no server-audio fallback. Initial setup may download Apple speech-model assets over the internet. The app attempts to delete temporary audio when you delete it, change exercises, leave the diagnostic screen or move the app to the background, and cleans the temporary recording directory when the controller next starts. You can revoke microphone and speech permissions in iOS Settings. Refusing these permissions does not prevent the five aptitude tests. The separate ATC with You conversation-history synchronization is described in section 3a.
9. Security
We use HTTPS, hashed passwords and tokens, account-scoped access controls and encryption of stored Apple refresh tokens. Training synchronization is not end-to-end encrypted: our server processes readable training records to provide backup and restoration. No system can guarantee absolute security. Keep your device and login credentials secure and contact us if you suspect unauthorized access.
10. Retention and account deletion
We retain active account and cloud training records to provide your account until you delete it. In the app, open Profile → Your account → Delete online account, then confirm ownership with your password or Apple. Deletion removes active account, authentication and associated cloud training records and clears the account’s training cache on the device used for deletion. Previously downloaded learning files and study data can be removed separately or by deleting the app. Other offline devices may retain cached copies until they reconnect or their local data is cleared. Recovery database backups age out within 14 days. A minimal encrypted Apple revocation token can remain while authorization revocation is pending and is removed after successful revocation. Operational logs and support messages follow the purposes described above. Deleting an account does not cancel an Apple subscription or request a refund; manage billing through your Apple Account.
11. Your choices and requests
You can update your display name and training plan, use Hide My Email where Apple offers it, sign out, sign out all devices, and delete your account in the app. Signing out clears this device’s account training cache; training not yet uploaded is lost. You can contact pocketcadet@gmail.com to request access, correction, deletion or a copy of your data, raise an objection or withdraw consent where applicable. We may need to verify account ownership without asking for your password. Your rights and available complaint routes depend on applicable law. Refusing optional reports or support correspondence does not prevent ordinary practice.
12. Age and educational use
Pocket Cadet is intended for aspiring cadet pilots and is not directed to children under 16. If we learn that a child has provided personal data without appropriate authorization, we will investigate and take appropriate action, including deletion where required. Contact us with concerns. Practice results are educational and do not certify flight proficiency or predict an airline’s recruitment decisions.
13. Policy updates and synchronization
The current policy and its version/date are published on our website and used by the app’s Privacy Policy screen. The app checks for the current policy when this screen opens online; offline it displays its bundled copy and labels that state. An offline or older app may therefore show an earlier version until it reconnects or is updated. We will communicate material changes and request additional consent where required. Continued use does not replace consent required by law.
14. Contact
For privacy, account, deletion or data-handling questions, contact YINGYING ZHANG and ZHUOFAN WANG at pocketcadet@gmail.com. Official website: https://pocketcadet.lieou.art/.