Fly FriendlyPrivacy Policy
Fly Friendly is a flight tracker. You add your flights, get alerts about them, and may share them with friends you choose. This policy explains what we collect, why, who receives it, how long we keep it, and how you can get it deleted.
1. Who we are
Fly Friendly (the app, and this website at flyfriendly.site) is provided by Varintha Chetanasena (operating as Fly Friendly) (“we”, “us”). We decide how your personal data is used (we are the “controller”). Contact: support@flyfriendly.site.
2. In short
- Your flights are private by default. Friends see a flight only if you share it with them.
- Notes, booking references, tags, cabin class and seat position are never shown to anyone else. Your seat is shown only if you turn on seat sharing for that flight.
- Your phone's GPS position never leaves your phone. Calendar sync writes to your phone's calendar only.
- We add no analytics or crash-reporting tools of our own. Free accounts show ads from Google AdMob, which collects data as described in the advertising section below.
- The free plan shows a banner ad from Google AdMob. Pro has no ads and does not start the ad software.
- You can export your flights (CSV) and delete your account inside the app at any time.
3. What we collect and why
Account
- Email address, and a password if you choose to set one (stored only as a secure hash by our sign-in server). Used to create your account, sign you in (including one-time sign-in codes sent by email), and answer you if you write to us.
Profile and settings
- Username and display name you choose, your app language and theme, and your privacy and notification settings (for example your default sharing level, whether friends can add you to flights, whether lock-screen alerts hide details).
- Profile picture (optional). Only the picture you choose or take is uploaded. It is stored in private storage that only you and your accepted friends can read.
Flights
- Flights you add: airline, flight number, airports, dates and times, aircraft, distance, and how you added it (search, manual entry or import).
- Optional details you enter: seat, seat position, cabin, tags, notes and booking reference. These are visible only to you (seat: see section 5).
- Your sharing choices for each flight (private, all friends, or selected friends; reveal only after landing; share seat).
- Imports: when you import past flights from a file, the file is read on your phone. Only the flights you keep are uploaded, plus a count of how many were imported or skipped.
- Live flight status (gates, delays) comes from our flight-data provider. We send the provider the flight number and date, never your name, email or account.
Friends and social features
- Your friends, friend requests, “fly together” invites, your personal invite link, flights of friends you asked to be notified about, people you block, and reports you file about other users (reason and the details you write).
- To prevent abuse we keep short-lived counters (for example how many invite links you opened or reports you filed in the last hour or day).
Notifications and Live Activities
- A push token for each device where you allow notifications, the device platform (iOS or Android) and an install identifier generated by the app, so alerts reach the right device.
- On iPhone, if you start a Live Activity (Pro): its push token and the time-zone offsets of the departure and arrival airports, so the Lock Screen and Dynamic Island can be updated.
- A queue of the alerts we send (which flight event, to whom, and the alert text).
Purchases (Pro)
- Your plan, the store (App Store or Google Play), product, status and expiry date, and the purchase events the stores send us through RevenueCat. We never see your card or payment details: Apple or Google handle payment.
Technical and security data
- Like any online service, our servers record technical data such as IP address, time and type of request, and error messages, to keep the service running and secure. Our servers keep these logs for 14 days.
- A record of each call we make to the flight-data provider (which flight, when, and which account asked), used to control costs and prevent abuse.
What we do not collect
We do not access your contacts or microphone, we do not collect your phone's location, and we do not use analytics, crash-reporting or attribution software. We do not read your email inbox.
4. What stays on your phone
- Location: if you turn on “my position” on a flight map, the app uses GPS only while that screen is open. The position is shown on the map and is not stored, logged or sent to us or anyone else.
- Calendar (Pro): calendar sync adds your flights to a “Fly Friendly” calendar on your phone. Booking references and notes are never written to it. Whether that calendar is synced elsewhere (for example iCloud or Google Calendar) is controlled by your phone's settings. If you import flights from your calendar, the app reads the events on your phone to find flights; only flight numbers and dates are sent to look up flight status.
- Photos and camera: used only when you pick or take a profile picture.
- Widgets, offline copy, exports: home-screen widgets and the offline copy of your flights are stored on the phone. A CSV export is created on the phone and goes only where you send it.
5. What other users can see
| Data | Who can see it |
|---|---|
| Username and display name | Your friends; people you exchange friend or flight invites with; anyone signed in who types your exact username or opens your invite link. People you block cannot find you. |
| Profile picture | You and your accepted friends only (not shown in search). |
| A flight | Nobody unless you share it: with all friends, selected friends, or (after an accepted “fly together” invite) the people on that flight with you. You can share only after landing. |
| A flight share link | Anyone who has the link, with or without the app, can see that flight’s live status and your display name until the link expires or you stop sharing. Seat, cabin, notes, booking reference and tags are never shown. |
| Seat | Only people who can see the flight, and only if you turned on seat sharing for it. |
| Seat position, cabin, tags, notes, booking reference | Only you. |
| Reports you file | Only you and our moderators. The person you report is not told who reported them. |
| Your blocks | Only you. The blocked person is not told. |
When you unfriend or block someone, their access to your shared flights ends immediately.
6. Service providers
We share data only with providers who help us run the app, only for that purpose:
| Provider | What they receive | Why |
|---|---|---|
| Our hosting provider: VP InfoTech Co., Ltd. (Thailand) | All data stored on our servers (we run the database and sign-in server ourselves) | Hosting |
| Email delivery: our own mail server, on the same hosting provider | Your email address and the sign-in email | Sending sign-in codes and account emails |
| AeroDataBox | Flight numbers, dates and airports. No personal data. | Flight status, gates, delays |
| Expo (push service), Apple Push Notification service, Google Firebase Cloud Messaging | Your device's push token and the alert content (flight details and, for a friend's flight, your friend's display name) | Delivering notifications |
| Apple Push Notification service (Live Activities) | The Live Activity token and its content | Updating Live Activities |
| RevenueCat | Your Fly Friendly user ID and your store purchase history | Managing Pro subscriptions |
| Apple App Store / Google Play | Purchases are made with them under their own privacy policies | Payment |
| Google AdMob (free plan only) | See section 7 | Showing banner ads |
| OpenFreeMap | Your IP address and the map area you view (map tile requests) | Drawing maps |
| Cloudflare | Your IP address and browser details when you visit flyfriendly.site, and emails you send to support@flyfriendly.site (forwarded to our inbox) | Hosting this website and forwarding support email |
We require these providers to protect data at least as well as this policy does. We may also disclose data if the law requires it, to protect people's safety, or as part of a sale or reorganisation of the service (you would be told first). We do not sell your personal data.
7. Ads on the free plan
The free plan shows one banner ad served by Google AdMob. Pro subscribers see no ads, and the ad software is not started for them.
According to Google, the AdMob software automatically collects your IP address (which may be used to estimate your general location), device identifiers (on Android, the advertising ID and app set ID), ad interactions (such as taps and ads seen) and diagnostic and performance data, and uses them for advertising, measurement and fraud prevention. See how Google uses information from apps that use its services.
- iPhone and iPad: the first time an ad is about to load for a free account, iOS asks whether you allow tracking (App Tracking Transparency). If you allow it, Google may use your advertising identifier (IDFA) to show personalised ads; if you don't, we request non-personalised ads only and the IDFA is not used. You can change this any time in iOS Settings → Privacy & Security → Tracking. Pro accounts see no ads and are never asked.
- Android: where the law requires consent (for example in the EEA, UK and Switzerland), Google's consent form asks you first; without consent for personalisation, only non-personalised ads are shown. Elsewhere, ads may be personalised by Google. You can reset or delete your advertising ID in Android settings (Settings › Privacy › Ads, or Google › Ads).
To report an inappropriate ad, email us a screenshot at support@flyfriendly.site.
8. How long we keep data
| Data | Kept |
|---|---|
| Account, profile, settings, flights, friends, invites, blocks | Until you delete them or your account |
| Profile picture | Until you remove or replace it, or delete your account |
| Reports you filed | Until your account is deleted |
| Reports filed about you | Kept after you delete your account, so a deleted account cannot erase a record of abuse. The link to your account is removed; the reason and the text the reporter wrote stay, and that text may still mention you. |
| Push tokens and Live Activity tokens | Until the token stops working, moves to another account on the same device, or you delete your account |
| Alerts (notification queue) | About 5 days after they are created, sent or not |
| Rate-limit logs (refresh, position, purchase-sync requests) and push delivery receipts | About 2 days |
| Flight-data provider call records | 90 days with your user ID; after that only daily totals with no user ID. On account deletion your user ID is removed from them immediately. |
| Subscription status | Until you delete your account |
| Purchase event records from the stores (billing audit trail) | 5 years from when we receive them, as accounting and tax records, then deleted automatically. These are not removed by account deletion. |
| Server logs | 14 days |
| Backups | A copy every day, each kept for up to 5 weeks |
| Flight information from our flight-data provider (times, status, gates, aircraft) and the history of changes of a flight (delays, gate changes) | About 5 days after we fetch it, then removed from our shared flight database (the flight number, airports and date stay as identifiers). What your own logbook needs – actual departure and arrival times, aircraft type, registration and whether the flight was cancelled – is copied into your own record of the flight and kept as long as you keep that flight. |
9. Your choices and rights
- See and export: Profile & settings › Export my flights (CSV) gives you a file of all your flights, including notes and booking references. For anything else we hold, email us.
- Correct: edit your profile and flights in the app.
- Delete: delete single flights, your picture, or your whole account (section 10).
- Control sharing: per flight, and your default in Profile & settings.
- Withdraw permissions: notifications, location, calendar, photos and camera can be turned off at any time in your phone's settings. The app keeps working without them.
- Ads: buy Pro to remove ads, or limit personalisation as described in section 7.
Depending on where you live (for example under the GDPR, the UK GDPR, or Thailand's Personal Data Protection Act), you may also have the right to access, correct, delete, restrict or object to the use of your data, to data portability, and to withdraw consent. Email support@flyfriendly.site from the address of your account. We answer within 30 days. You may also complain to your data protection authority.
10. Deleting your account
In the app: tap the gear icon › Delete account, then type the confirmation word. Without the app: see flyfriendly.site/delete-account. Your account and personal data are deleted at once; the exceptions are listed on that page. Deleting your account does not cancel a store subscription: cancel it in the App Store or Google Play first.
11. Legal bases
Where the law requires a legal basis (for example the GDPR), we rely on: contract (to provide the app and the features you use, including sharing with friends and Pro); legitimate interests (security, preventing abuse and fraud, handling reports, controlling costs, the free plan's non-personalised ads); consent (personalised ads where required, and your phone permissions); and legal obligations (for example tax records).
12. International transfers
Some providers above (including Google, Apple, Expo and RevenueCat) are based in the United States or other countries, so your data may be processed outside your country. Where the law requires it, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
13. Security
Data is encrypted in transit (HTTPS/TLS). Access rules in our database ensure that each user can read only what they are allowed to see. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
14. Children
Fly Friendly is not designed for children. You must be at least 13 to create an account. If you believe a child has given us personal data, contact us and we will delete it.
15. Changes to this policy
We will post any change on this page with a new effective date. If a change is significant, we will also tell you in the app or by email before it takes effect.
16. Contact
support@flyfriendly.site · Varintha Chetanasena (operating as Fly Friendly)