Privacy Policy
What ATA Prep collects, why, and what happens to it. Written to describe what the service actually does today.
Effective date: 18 September 2026 · Last updated: 18 September 2026
Who operates ATA Prep
ATA Prep is operated by ATA Prep LLC. "ATA Prep" is the name of the product; the commitments in this policy are made by ATA Prep LLC.
You can reach us about anything in this policy at [email protected].
Scope
This policy covers the ATA Prep website, the ATA Prep study app, and the account that connects them. It does not cover other sites we link to.
Your account
When you create an account we collect your email address and a password. The password is never stored as you typed it — it is put through a one-way function, and what we keep cannot be turned back into your password.
If you choose Sign in with Google, we ask Google only for your email address. We do not request your name, your profile picture, or anything else.
Verifying your address or resetting your password creates a one-time link. Those are stored in a form we cannot read back, expire, and work once.
Signing in creates a session so you are not asked again on every page. In a browser it is one cookie, marked so that scripts cannot read it, and it lasts about ninety days. Signing out ends it. It carries nothing to do with advertising and is not used to follow you anywhere.
Your study
When you are graded on an oral card or a written question, we record the exam, the area and topic, whether it was a pass, borderline or miss, and when. For written questions we also record whether a miss was a wrong answer or no answer. For oral cards we record the card's number.
That record deliberately does not contain what you wrote, the option you picked, the model answer, or the examiner's feedback.
We also keep the study guides you save and whether you have seen the walkthrough.
Some study stays on the device you used. Your review queue, your weak areas and where you are in a session are worked out on that device and stay there. They are not sent to us.
Guides
A guide you build and save is kept with your account: its name and the cards it collects. Guides are removed when your account is deleted.
Reviews
Anyone whose account holds at least one package can write one review. We store your rating, your text, the display name you choose, and whether it has been approved for the site. Your email address is not shown with it. Your review is removed when your account is deleted.
Licence keys and access
When you redeem a licence key we record that your account redeemed that key and when. A key is stored only as a one-way hash — a copy of our records cannot be turned back into working keys — along with the first block, which support uses to find a key you ask about. Where a key was emailed to someone, the address it was sent to is stored with it.
IP addresses and security
When you redeem a licence key we record the IP address the request came from. Attempts that succeed and attempts that fail can both be recorded. We keep this for security and abuse review.
The address reaches us through our infrastructure provider when your request arrives — that is how any request reaches any website. The limit on how often you may try counts your account's recent attempts by time; it does not use the address. We do not pass the stored address on to our AI, email or payment providers.
Scanning an AKTR
If you upload an Airman Knowledge Test Report, the file is sent to our server and passed to an outside AI processing service, which reads it for the ACS codes on it. Those codes come back and become your study guide.
ATA Prep does not keep the file. It is held only for as long as that one request takes, and it is written to none of our records. If the request fails, our logs note that it failed and the kind of error — never the file, or any part of it.
What the AI processing service does with what it receives is governed by that service's own terms. We can tell you what we do; we cannot make promises on another company's behalf.
The AI examiner
When you ask the AI examiner for feedback on an oral answer, your answer, the question and its model answer are sent to our server and passed to an outside AI processing service, which returns the critique you see.
ATA Prep stores neither your answer nor the feedback. This is a text request; there is no audio in it.
Dictation
The study app has a Speak button. It uses your browser's own speech recognition, and what arrives in the answer box is the text your browser produced.
ATA Prep does not receive or record audio. The app contains no recorder and captures nothing from your microphone.
The feature does use your microphone through your browser, and some browsers send that audio to their own servers to turn it into text. That is between you, your browser and its maker, under their terms. We say this plainly because "ATA Prep records no audio" is true and "no audio goes anywhere" would not be.
Email we send you
We send email to verify your address, to reset your password, and to deliver a licence key. These go through a transactional email provider, which receives your address and the message. We do not send marketing email, and there is no mailing list to join.
What stays in your browser
Some things never reach us. Your theme, your cart, the questions kept on your device so you can study without a connection, and the study state described above all live in your browser's own storage. Clearing your browser's data for this site clears them.
Analytics and tracking
ATA Prep does not currently use advertising trackers, analytics pixels, or marketing tracking systems. There is no cookie banner because there is nothing to consent to beyond the sign-in session described above.
This describes what we do today rather than promising what we will never do. If it changes, this policy changes with it, and the date at the top will say so.
The services behind ATA Prep
We use a small number of outside services, described by what they do.
- Infrastructure and hosting — runs the site and the app, and holds our records.
- AI processing — receives an uploaded AKTR, or an oral answer with its question and model answer.
- Transactional email — receives your address and the message being sent.
- Identity provider — used only if you choose Sign in with Google.
The companies filling those roles today are Cloudflare (infrastructure and hosting), Anthropic (AI processing), Resend (transactional email) and Google (sign-in). If a supplier changes, this list changes; the roles and the commitments above do not.
Buying
ATA Prep's commerce system is not currently accepting live payments. When payments are enabled, transaction records may include checkout details, order information, billing information, discount usage, and a payment-provider reference. Payment card details are handled by the payment provider and do not reach ATA Prep's own records.
How long we keep things
Your account's information is kept while your account exists. Sessions expire after about ninety days; one-time email links expire sooner and work once.
ATA Prep keeps certain transaction, licensing, security, and administrative records after an account is deleted because they may still be needed for transaction support, licence validity, fraud or abuse review, dispute handling, accounting, or legal obligations.
ATA Prep is still formalising the exact retention periods for some of these records. Some retained categories do not yet have an automated deletion schedule.
Deleting your account
Write to [email protected] to ask for your account to be deleted. We check that the account is yours, and an administrator carries the deletion out.
When that happens we remove your sessions, your pending email links, your package access, your review, your saved guides, your walkthrough state, any linked sign-in provider, your study results, your eligibility for any restricted discount code, and any checkout that was started but never taken to a payment provider.
Your account record itself remains, with its address and password replaced by values nobody can use, because records we keep point at it. Some records remain as described above: orders, licence keys, redemption attempts, administrative logs, and a checkout that was paid or that a payment provider may still settle.
To be precise about what that means: ATA Prep replaces the account's active credentials and identifying account information, while certain transaction, licensing, security and administrative records may remain associated with an internal account identifier.
There is no self-service delete button, and we do not promise a completion time.
Your choices
You can see and change your email address, your review and your guides from your account. You can ask us to delete your account as described above. For anything else, write to [email protected].
Children
ATA Prep is intended for people preparing for FAA A&P certification. ATA Prep does not currently collect date of birth or use an age-verification system.
Changes to this policy
When this policy changes we update it here and change the effective and last-updated dates at the top. We do not send email or in-app notices about policy changes.