Privacy Policy

Last updated: October 2026

This page explains what happens to your information when you sign up to be an early tester of Flyary and when you use the Flyary app. We keep this simple and collect as little as possible.

Flyary is operated by Ondrej Zajíc, based in Norway, who is the data controller responsible for your information. You can get in touch at ondra@flyary.app.

What we collect

When you fill in the early-tester form, we store:

Why we collect it

We use this to invite you to test the app, to email you about testing and the launch, and to understand what to build first. We don't sell your data or use it for advertising.

Our legal basis for this is your consent, which you give by ticking the box on the signup form. You can withdraw it at any time (see your rights below).

Where it's stored

Submissions are stored with Convex (the database) and emails are sent with Resend. Both are US-based services, so your data is transferred to and processed in the United States. These transfers are covered by the Standard Contractual Clauses and the EU-US Data Privacy Framework, as set out in each provider's data processing agreement. You can request a copy of these safeguards from us.

Your account (in the app)

When you create an account in the Flyary app, we store:

We use this to run the app for you: to keep your flight log, show your statistics and let you compare with friends. Our legal basis is that we need it to provide the service you signed up for.

If you add friends, they can see your display name, your photo, and statistics worked out from your flights, such as your totals, your top airports, airlines and aircraft, and a map of the routes you've flown. They never see your individual flights.

Your account is stored with Convex in the United States, under the same safeguards described above.

Forwarding flight emails (in the app)

The Flyary app lets you add a flight by forwarding your booking confirmation to a private email address we give you. If you use this feature, here is exactly what happens to that email.

To pull out the flight details, the contents of the email you forward — including any personal details it contains (such as your name, booking reference, and travel dates) — are read by an AI service. We send the text of the email to that service, it returns the flight details, and then we discard the original email: we do not store the message itself. We keep only the extracted flight information (like the flight number, airports, and times) in your account, the same as a flight you add by hand.

Sometimes the flight details aren't in the email itself but in a file attached to it — usually a PDF itinerary or boarding pass, or a photo or screenshot of one. When the email on its own doesn't tell us enough, we open that file and read it the same way, using the same AI service. Attached travel documents often carry more personal detail than the email does, such as the passenger name, booking reference and ticket number. We only ever open one file per email, and only PDFs and images. The file is deleted as soon as we have finished reading it — we keep the flight details it gave us, never the document.

There is one small exception. If we can't find a flight in an email you forwarded — because it wasn't a flight, or we couldn't read it, or you'd hit your import limit — we keep that email's subject line, so the app can tell you which email didn't work. Nothing else from the message is kept, and the subject line is deleted shortly after you dismiss the notice in the app.

Forwarding an email is always your choice — nothing is read unless you send it to us — so our legal basis for this is your consent, given each time you forward a message.

The services that handle a forwarded email on the way to your account are:

These are US-based services, so a forwarded email is transferred to and processed in the United States, under the same safeguards (Standard Contractual Clauses / EU-US Data Privacy Framework) described above. We may change the AI model we use over time; it will always be used only to read forwarded emails and extract flights, never for advertising, and the original email and any file attached to it are always discarded afterwards.

Analytics

On this website

We use PostHog to understand how the site is used: how many people visit, and how the signup form is going (for example, how many who start it go on to finish). This helps us improve the page.

We run PostHog in cookieless mode, so it doesn't store cookies or other identifiers on your device, which is why you won't see a cookie banner. We never send your free-text note or the name of any app you mention to PostHog, only the multiple-choice answers and general usage. We use PostHog's EU hosting, so this data is stored in the European Union. PostHog is a US company, so any access from outside the EU is covered by the same safeguards described above.

In the app

In the app, we use PostHog to understand how Flyary is used, so we can see what works and what to improve. For example: which screens people open, which features they use, how flights are added (by search, typed in, from a CSV file or by forwarded email), how often people come back, and what our paid services cost us, such as each time the AI reads a forwarded email.

This is linked to your account by a random ID, never by your name or email address. Along with it, PostHog receives your device model (for example "iPhone 15"), operating system, app version, language, time zone, and your approximate location (such as country, city or postal area), worked out from your internet address. We don't keep the address itself.

We never send PostHog the contents of your emails or attachments, your flight details (flight numbers, airports, routes or dates), your name, your email address, or anything you type. The app doesn't record your screen.

Our legal basis is our legitimate interest in understanding and improving the app. You can object at any time by emailing us. We'll stop collecting analytics for your account and delete what we hold. This data is stored in the European Union (PostHog's EU hosting). PostHog is a US company, so any access from outside the EU is covered by the same safeguards described above.

How long we keep it

We'll delete anything sooner if you ask.

Your rights

Under data protection law you have the right to:

To exercise any of these, email us at ondra@flyary.app. We'll reply within one month. A deletion request is usually done within a few days. If you're unhappy with how we've handled your information, you also have the right to lodge a complaint with your local data protection authority.