Tomato Planes is an educational study aid for private pilot ground school, operated by True Course LLC, a Florida limited liability company ("we," "us," or "our"). The first lesson is free; full access is available through an optional subscription or a one-time purchase. This policy explains what data the app handles, what stays on your device, what is stored in your own iCloud, and what is sent to our service providers (Google for crash reporting and analytics, and RevenueCat for purchase management).
Information You Provide
During onboarding you may enter a first name so the app can personalize greetings. The name is stored only on your device and is never sent to Google, Firebase, or anyone else. You can change or remove it any time from Settings. You are not required to provide a name, an email, or any other personal information to use the app.
What Stays On Your Device
Your learning content, your profile, your settings, and the full detail of your progress and streak history are stored locally on your device (in UserDefaults and a local JSON file). The app does not require an account, and we never receive your name. We do not receive the full detail of your answers or your progress. (We do collect anonymous, aggregate progress events, such as which lessons are completed, described under "What Is Sent To Google" below. Those events are not tied to your identity.)
Cross-Device Sync (Your iCloud)
If you are signed in to iCloud, the app saves a copy of your progress to your own private iCloud account (using Apple's iCloud Key-Value Storage) so you can pick up where you left off on another device that uses the same Apple ID. This data lives in your personal iCloud, governed by Apple's iCloud terms and privacy policy. We do not have access to it, and it is not sent to us. If you are not signed in to iCloud, the app simply works from local storage with no sync, and nothing is uploaded.
App Permissions
Tomato Planes asks iOS for one permission: local notifications, used to remind you to continue your study streak. The app does not request access to your location, contacts, camera, microphone, photos, motion data, or any other permission. Notifications are scheduled and shown by iOS on your device; their content is not sent through any server.
What Is Sent To Google (Firebase)
Tomato Planes uses Firebase, a service from Google, to keep the app stable and to understand how it is used. The following Firebase products are in this build:
Crash reports (Firebase Crashlytics). If the app crashes, a diagnostic report is sent automatically the next time you open it. The report contains your device model, iOS version, the app version, and the technical stack trace at the moment of the crash. It does not contain your name, your email, your Apple ID, or any of your learning content.
Anonymous usage and progress events (Firebase Analytics). The app logs non-personal events such as which lessons and sections you start and complete, where learners tend to stop, how long sessions last, and points in the upgrade flow (for example, when a paywall is shown). These events carry only content identifiers and outcomes, never your name, email, Apple ID, or free-text profile entries. They are tied to anonymous device identifiers (the iOS Identifier for Vendor and a Firebase Installation ID), not to your identity. We use this data only in aggregate, to see which lessons work well, where the course is too hard, and how the free trial converts.
Configuration values (Firebase Remote Config, planned). A future build may fetch read-only content variations from Google to support A/B testing of lesson presentation. No personal information is sent in either direction.
Purchases (RevenueCat)
We use RevenueCat to manage subscriptions and purchases. When you view the paywall, start a free trial, subscribe, or restore a purchase, RevenueCat processes purchase and receipt information from Apple (such as the product purchased, transaction and renewal status, and the country of your App Store account) along with an anonymous app user identifier that RevenueCat generates and device identifiers. This is tied to that anonymous identifier, not to your name, email, or Apple ID, and lets the app know whether your subscription is active across your devices. Apple, not us, processes your actual payment; we never see your card or full payment details. RevenueCat acts as our data processor for this purpose. See RevenueCat's privacy policy at https://www.revenuecat.com/privacy for details.
How Long We Keep Data
Crash reports stored in Firebase Crashlytics are retained for approximately 90 days. Anonymous usage events stored in Firebase Analytics are retained for up to 14 months by default; aggregated, non-identifiable reports may be kept longer. Data on your device persists until you delete the app or tap "Reset All Progress" in Settings.
Security
Data sent to Firebase travels over HTTPS using standard TLS. Data on your device is protected by iOS's built-in file protection. We limit collection to anonymous diagnostics to reduce risk. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Tracking
Tomato Planes does not use the Advertising Identifier (IDFA). We do not share data with advertisers or ad networks. We do not link your activity in this app to your activity in any other app or website. Because the app does not track you across other apps, iOS does not show an App Tracking Transparency prompt.
Data Sharing
We do not sell your data. We share data only with service providers that process it on our behalf as data processors: Google (the Firebase platform, for crash reporting and anonymous analytics) and RevenueCat (subscription and purchase management). Apple processes your payment and, if you are signed in to iCloud, stores your synced progress in your own iCloud account; Apple's handling of that data is governed by Apple's privacy policy. None of these providers receives your name or any identity information from us.
California Privacy Rights (CCPA / CPRA)
If you live in California, you have the right to know what personal information is collected about you, the right to delete it, the right to correct inaccurate information, the right to limit the use of sensitive personal information, and the right to opt out of the sale or sharing of personal information.
Tomato Planes does not sell or share personal information, including for cross-context behavioral advertising. The app does not collect sensitive personal information. The categories of personal information collected are the diagnostic and usage data described above (anonymous device identifiers, crash reports, anonymous usage and progress events) and purchase information processed by RevenueCat (anonymous app user identifier, transaction and subscription status), used solely for App Functionality and Analytics. We do not discriminate against you for exercising your rights.
To exercise any of these rights, tap "Reset All Progress" in Settings (which deletes all data on your device) or email support@truecourseapps.com.
Under California Civil Code §1798.83 ("Shine the Light"), California residents may request a list of categories of personal information shared with third parties for those third parties' direct marketing purposes during the previous calendar year. We do not share personal information for third-party direct marketing.
Other U.S. State Privacy Rights
If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, or another U.S. state with a comprehensive consumer privacy law, you generally have the same rights as California residents described above (to know, delete, correct, and opt out of the sale of personal information or targeted advertising). The same anonymous-only data practices apply. Use the same contact email to make a request.
International Users
Tomato Planes is operated from the United States. If you access the app from the European Economic Area, the United Kingdom, or anywhere else outside the United States, your data is processed in the United States by Google as our service provider. Google's Firebase services rely on Standard Contractual Clauses for international data transfers. By using the app, you consent to processing in the United States.
If you are located in the EEA or the UK, you may exercise your rights of access, rectification, erasure, restriction, portability, and objection by emailing support@truecourseapps.com.
Deletion
To delete the data stored on your device, open Settings inside the app and tap "Reset All Progress." To request deletion of crash reports or anonymous analytics events already sent to Firebase, email us at the address below.
Children
Tomato Planes is intended for adult learners pursuing a private pilot license. It is not directed at children under 13, and we do not knowingly collect information from children under 13. If you believe a child has used the app, contact us and we will take reasonable steps to delete any data associated with that device.
Changes To This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated in a future app update. Continuing to use the app after a change means you accept the revised policy.
Contact
Questions about privacy? Email support@truecourseapps.com.
Also see the Terms of Service. Questions? support@truecourseapps.com