Privacy Policy — FlightStory

Overview

Your privacy matters to us

FlightStory ("we", "our", or "us") is a mobile application that helps you track your flights, create AI-powered travel journals, and build a personal story of your travels. This Privacy Policy explains what information we collect, how we use it, and your choices.

By using FlightStory, you agree to the collection and use of information as described in this policy. We will not use or share your information except as described here.

Data We Collect

Information we collect from you

We collect only what is necessary to provide the app's features. Here is a breakdown of the information we collect and why:

Account information Name, email address, and profile photo collected when you sign in via Google, Apple, or email through our authentication provider (Clerk).

Flight data Flight routes, dates, airlines, seat class, departure and arrival airports, and any notes you add. This is the core data of the app and is stored in your account.

Travel photos & media Photos you choose to attach to journeys. Stored in our secure cloud storage. You control what you upload.

Boarding pass scans Images you scan to auto-fill flight details. Sent to Google Gemini for OCR processing. We do not store the raw image after processing.

Subscription & purchase info Subscription status (active, expired) managed via RevenueCat. We never see your payment card details — those are handled by Google Play or the App Store.

Device & app diagnostics Platform (iOS/Android), OS version, and app version for debugging purposes. We do not collect advertising identifiers or cross-app tracking data.

Third-Party Services

Services that power FlightStory

FlightStory uses several third-party services to deliver its features. Each of these services processes data under their own privacy policies, which we link to below.

Clerk — Authentication Supabase — Cloud database RevenueCat — Subscriptions Google Gemini — Boarding pass OCR & AI Groq / Llama — AI story generation AviationStack — Live flight data OpenWeather — Weather data Google Play / App Store — Payments

We only transmit the minimum data required for each service to function. For example, we send your email to Clerk for authentication, but we do not share your flight history with Clerk.

Location & GPS

How we use location data

📍

Location data is never stored in the cloud. The Flight Speedometer feature requests GPS access only to show your real-time speed, altitude, and heading on-screen. This data is processed entirely on your device and is discarded when you leave the screen.

We request foreground location permission only. We do not request background location access, and we do not track your location outside of the Flight Speedometer feature. You can deny this permission — all other app features work without GPS.

Storage & Retention

Where your data is stored

Your data is stored in two places:

On your device Flight and journey data is cached locally in AsyncStorage for offline access. This data stays on your device and is not shared.

In the cloud Your data is synced to Supabase (PostgreSQL) hosted on AWS infrastructure in the US. We use row-level security to ensure only you can access your own data.

We retain your data for as long as your account is active. If you delete your account, we delete all associated flight data, photos, and journal entries within 30 days.

Data Sharing

We do not sell your data

We never sell, rent, or trade your personal information to third parties for marketing purposes. We share data only in these limited circumstances:

With service providers listed above, strictly to deliver the app's features
If required by law, court order, or valid legal process
To protect the rights, property, or safety of FlightStory users
With your explicit consent, for example when you use the Share Card feature to share a flight summary

Security

How we protect your information

We use industry-standard measures to protect your data:

All data in transit is encrypted via TLS/HTTPS
Database access is controlled by row-level security (RLS) policies — your data is only accessible to you
Authentication tokens (JWTs) expire after a short window and are automatically refreshed
API keys and server secrets are stored in secure environment variables and never embedded in the app

No method of transmission over the internet is 100% secure, but we take reasonable precautions to protect your information.

Children's Privacy

This app is not for children

FlightStory is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided us with personal information, we will promptly delete it. If you believe a child has provided us with their information, please contact us.

Your Rights

What you can do with your data

You have the following rights over your personal information:

Access — Request a copy of the personal data we hold about you
Correction — Ask us to correct any inaccurate information
Deletion — Request that we delete your account and all associated data
Portability — Request your flight data in a portable format (JSON)
Withdraw consent — Revoke GPS permissions in your device settings at any time

To exercise any of these rights, contact us using the email below. We will respond within 30 days.

Contact

Get in touch

If you have questions about this Privacy Policy or how we handle your data, we want to hear from you.

BuildKaro — FlightStory Privacy

We aim to respond to all privacy inquiries within 30 days.

buildkaroapp@gmail.com

Website: buildkaro.netlify.app

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date at the top of this page.