Privacy Policy

Last Updated: October 4, 2026

Candidus LLC ("we," "us," or "our") is dedicated to protecting your privacy. This Privacy Policy explains how we collect, use, process, and protect your information when you use the FAA Instrument Rating Oral Exam Simulator mobile application (the "App") and our related web services at candidus.net. By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Voice and Audio Data

The core functionality of the App is voice-native checkride simulation. When you participate in an exam session or calibrate your microphone:

  • The App accesses your device’s microphone only with your explicit permission.
  • Spoken responses are streamed via secure encrypted connections to our artificial intelligence provider (Google Gemini via Firebase AI) to transcribe your speech, evaluate your answer against FAA Airman Certification Standards (ACS), and synthesize the virtual examiner’s spoken responses.
  • Audio streams are processed transiently during your active session. We do not use your voice recordings to train public AI models, nor do we sell, rent, or monetize your voice data.
  • The microphone is active only while an exam or calibration screen is running and is immediately released when you exit the session.

1.2 Aviation Candidate Profile & Study Records

To personalize your oral exam scenarios to match the aircraft you fly in real life, the App stores aviation-related profile preferences and study progress in Google Cloud Firestore under your account identifier (including anonymous guest sessions). This data includes:

  • Aircraft type (e.g., Cessna 172, Piper Archer, Cirrus SR22, Diamond DA40).
  • Avionics and instrumentation setup (e.g., traditional six-pack analog gauges, Garmin G1000 glass cockpit, IFR GPS models, autopilot capability).
  • Training hub and selected regional weather/terrain scenarios.
  • Study progress: completed ACS tasks, passing scores, rubrics breakdown, AI examiner feedback, and debrief notes.

1.3 Account and Authentication Data

The App operates as a connected cloud application powered by Google Firebase. There is no offline-only local mode—all user sessions, including guest sessions, utilize cloud infrastructure:

  • Anonymous Guest Sessions: When you open the App without signing in, Firebase Authentication automatically assigns a unique anonymous user identifier. Your custom aircraft configurations, study records, and mock oral checkride transcripts are saved in Cloud Firestore under this anonymous identifier.
  • Permanent Cloud Accounts: You may choose to link your anonymous session to a permanent account using Sign in with Apple, Sign in with Google, or Email and Password. Linking your account ensures your study records, checkride debriefs, and purchase entitlements are synchronized across your devices and can be recovered if you reinstall the App or switch devices.
  • Credentials & Profile Info: When signing in with Apple or Google, we receive a unique account identifier, and, if provided by your provider, your display name and email address (which may be an Apple Private Relay address). We never collect, handle, or store your Apple or Google passwords. For email and password accounts, authentication credentials are managed securely by Firebase Authentication; passwords are encrypted and never visible to Candidus LLC.

1.4 Purchases and Subscriptions

All in-app purchases and pass upgrades (Standard Pass, Pro Pass) are handled directly by Apple (StoreKit) or Google (Google Play Billing). We receive cryptographic receipts or order tokens from the store to verify your entitlement status. We never collect, process, or store your credit card or financial information.

1.5 Device and Diagnostic Information

To ensure app stability and assist with technical support, we may collect anonymous diagnostic and crash reports through Firebase Crashlytics. This includes device model, operating system version, app version, and error stack traces. This information is not linked to your personal identity.

2. How We Use Your Information

We use the information we collect solely for the following purposes:

  • To deliver realistic, voice-interactive oral checkride simulations.
  • To customize examiner questions based on your aircraft avionics and geographic scenario.
  • To generate objective ACS evaluation scorecards and debrief reports.
  • To restore and synchronize your purchase passes and study progress across multiple devices.
  • To monitor app performance, fix software crashes, and provide customer support.

3. Third-Party Service Providers

We partner with reputable infrastructure providers to operate the App:

  • Google Firebase & Google Cloud: Provides secure authentication, cloud database storage (Cloud Firestore), crash reporting (Crashlytics), and AI inference (Firebase AI / Vertex AI Gemini). Data is stored and processed on secure Google Cloud servers adhering to industry-standard security certifications (SOC 2, ISO 27001).
  • Apple App Store & Google Play Store: Processes payments and manages app distribution.

We do not share your personal information with third-party advertisers, data brokers, or marketing networks.

4. Data Storage, Security & Retention

We implement appropriate technical and organizational safeguards to protect your personal data. All communications between the App and our backend services are encrypted using Transport Layer Security (TLS). Data at rest in Cloud Firestore is encrypted using AES-256.

All candidate data—including data created during anonymous guest sessions—is stored in Google Cloud Firestore. We retain your aviation study records and account information for as long as your account (or anonymous session) remains active or as necessary to provide services to you. If you delete your account or choose “Delete my data” as a guest, all associated records—including cloud profiles, exam transcripts, ACS scores, and authentication identifiers—are permanently and promptly purged from Cloud Firestore and Firebase Authentication.

5. Account and Data Deletion

You have full control over your data in the cloud:

  • In the App (Signed-in Users): You can delete your account and all associated cloud data by tapping the Account & Cloud Sync icon in the dashboard app bar, selecting Delete account, and re-authenticating.
  • In the App (Guest Users): You can delete your anonymous cloud account and all associated Firestore records by tapping the Account & Cloud Sync icon and selecting Delete my data.
  • Online: Detailed instructions for deleting your account and associated records are available on our Delete Account page.
  • By Email: You can email us at support@candidus.net requesting the deletion of any data associated with your account.

6. Children’s Privacy

The App is designed for flight training candidates and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data without parental consent, please contact us at support@candidus.net and we will delete the data immediately.

7. California and International Privacy Rights

Under the California Consumer Privacy Act (CCPA/CPRA) and European General Data Protection Regulation (GDPR), you have the right to access, correct, export, or delete your personal data. Candidus LLC does not "sell" or "share" personal information as defined under California law.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
support@candidus.net