FlightBound Privacy Policy

Last updated: 2026-06-29

Who we are

FlightBound is operated by Generalize LLC, a Wyoming limited liability company ("we," "us," or "our"). For questions about this policy, email hello@flightbound.app.

The short version

We built FlightBound to require as little information about you as possible. We don't ask you to create an account, we don't sell or share your data with advertisers, and we don't use third-party advertising trackers. The data we do collect — an install identifier, the flights you choose to track (kept on your device), and aggregate product-usage events you can opt out of — is what we need to run the app and improve it.

Information we collect

Install identifier

When you install FlightBound, the app generates a random identifier ("install ID") and stores it on your device. We use this ID to:

• Track our request rate to flight-data providers (helps us catch abuse and stay within API quotas).
• Group product-usage events sent via PostHog (if you have "Send usage data" enabled in Settings).
• Associate any subscription purchase with your install for entitlement tracking via RevenueCat.

The install ID is not linked to your name, email, or any account. It survives until you uninstall the app, clear app data, or use Settings → Data → "Erase all data on this device" (which removes the identifier and generates a fresh one on next launch). There is no way to "log in" to an existing install ID from another device — re-installing creates a new ID.

Flights you save

The flights you track — flight number, date, airline, route, status, gate and terminal, aircraft type, and any tracker label you attach (like "Mom's flight") — are stored in a local SQLite database on your device. Your lounge access preferences and theme settings live in the same on-device storage. We do not upload any of this to a server. If you've saved it, it lives on your phone unless you choose to share it.

Subscription data

If you start a FlightBound Pro subscription, the App Store or Google Play processes the payment. Our subscription synchronization provider, RevenueCat, mirrors the purchase state from Apple or Google so the app knows whether to unlock Pro features. RevenueCat receives the install ID, the product code, and the platform's opaque transaction tokens — not your name, email, Apple ID, Google account, or payment information.

Product analytics (opt-in)

If Settings → Privacy → Send usage data is enabled (this is the default for new installs and can be turned off at any time), FlightBound sends aggregate product events to PostHog so we can see what features are used and where things break. Events are keyed to your install ID — never to your name, email, or any personal identifier. We never send your flight numbers, tracker labels, gate or terminal data, location, photos, or any other personal content.

The events we send include:

• Flight actions — a flight was added (source: manual, snapshot, or calendar; status; whether live tracking was available); a flight detail was viewed (a 12-character partial hash of the flight ID, days until departure); a notification was tapped (whether a flight ID was attached).
• Subscription funnel — the paywall was shown for a feature key; the paywall was dismissed; a subscription was purchased (product SKU); purchases were restored; a subscription expired or entered grace period.
• App reliability — background refresh completed (with candidate and per-flight failure counts) or failed; a provider call failed (error kind: network, etc.); a provider schema-drift was detected (which field was missing).
• Preferences — theme palette / font / icon style changed.

Alongside these events, PostHog automatically records basic app-lifecycle signals (such as the app being opened, backgrounded, or updated) and standard device metadata — your operating system and version, device model, and the FlightBound app version — so we can tell, for example, whether a problem is specific to one OS version. This is the same device metadata declared in our App Store privacy labels. It is still keyed only to your install ID, never to your identity, and because IP-based geolocation is disabled it carries no location.

You can turn analytics off at any time. With analytics disabled, no PostHog client is ever constructed on your device — events stop being collected at the source, not just dropped client-side.

Flight-data proxy logs

When the app fetches flight information, the request goes through our proxy at flightbound.app/aeroapi, which adds the FlightAware API key server-side so it never enters the app bundle. For each request, the proxy logs the install ID, the request method, a redacted version of the request path (specific flight identifiers are replaced with *** so a log reader cannot link your install ID to specific flights), your IP address, and your user-agent string. We use these logs for short-window operational debugging, quota management, and abuse detection.

Calendar imports

If you use FlightBound's "Import from calendar" feature, the app reads your device calendar read-only — it never adds, edits, or deletes events. We extract flight-like events on-device to suggest them as flights to track; the calendar content does not leave your device. You can revoke calendar access at any time in your OS Settings.

Push notifications

When you enable notifications, FlightBound schedules local reminders on your device — gate changes, boarding, delays, arrival. We do not use push notification tokens, and your device's notification token is not sent to any server. If you enable background refresh (Pro), iOS or Android may wake the app every 15-30 minutes to fetch updates; this happens on-device and is controlled by your OS.

Information we don't collect

We do not collect your name, email address, phone number, contacts, location, photos, microphone or camera input, advertising identifier (IDFA / AAID), or any other personal data beyond what's described above. We do not use third-party advertising trackers. We do not sell data to anyone for any purpose.

How we use information

Everything we collect is used for one of these purposes:

• Provide the service — show you flight information, sync your subscription state, deliver notifications.
• Operate safely — rate-limit our flight-data provider; detect abuse of our proxy; debug failures.
• Improve the product — see which features get used and where users get stuck (only if analytics is opted in).

We don't use your data for marketing, advertising, profiling, training AI models, or any purpose beyond running the app.

Third-party processors

The following services receive a narrow slice of data on our behalf to make the app function. Your use of FlightBound is also subject to their privacy policies:

• Apple App Store and Google Play — app distribution, in-app purchases, subscription billing.
• FlightAware (AeroAPI) — flight schedule and position data. Receives the redacted flight queries from our proxy and the IP attached to the proxy connection.
• RevenueCat (US) — subscription state synchronization. Receives the install ID and product code.
• PostHog (US-hosted) — product analytics, only if you have opted in. Receives the install ID and event names with operational properties.
• Fly.io (US) — hosts our flight-data proxy and serves request logs.
• Cloudflare Pages (global edge) — hosts the marketing pages at flightbound.app and reverse-proxies share URLs to Fly.

Where information is stored

Your saved flights, lounge preferences, theme settings, and cached entitlement state live on your device. Subscription state at RevenueCat and analytics at PostHog are hosted in the United States. Our proxy and request logs run on Fly.io machines in the US (primary region: San Jose, California). If you use FlightBound from outside the United States, the information described above may transfer to, and be processed in, the US.

How long we retain information

• On-device data — until you uninstall, clear app data, or use "Erase all data on this device" in Settings.
• Subscription state at RevenueCat — for the lifetime of your subscription, plus the retention window required by Apple's and Google's records-keeping rules.
• Analytics events at PostHog — up to 7 years (PostHog's default retention); we don't extend it.
• Proxy logs at Fly.io — a short rolling window, typically less than 30 days, for operational debugging and abuse detection.

Your choices

• Opt out of analytics — Settings → Privacy → Send usage data → off. No PostHog client is constructed on your device when this is off; nothing is collected.
• Erase all data on this device — Settings → Data → "Erase all data on this device" rotates the install ID, logs out of RevenueCat, resets analytics, and clears all locally stored data. This is the most complete deletion the app can perform from the device side.
• Cancel your subscription — Settings → Manage subscription. Apple or Google handles the cancellation per their terms.
• Revoke calendar access — your device Settings.
• Revoke notification access — your device Settings.
• Uninstall the app — removes all locally stored data immediately. Server-side records (subscription state, analytics events tied to your old install ID) follow the retention windows above.

Depending on where you live, you may have additional rights — access, correction, deletion, portability, or to object to certain processing. To exercise any of these, email hello@flightbound.app.

Children's privacy

FlightBound is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided information to us, contact us at hello@flightbound.app and we will delete it.

International users

FlightBound is operated from the United States. By using the app from outside the US, you consent to the transfer and processing of your information in the US.

Changes to this policy

We may update this policy as the app evolves. When we do, we'll update the "Last updated" date at the top. For material changes — new categories of information collected, new third-party processors, or expanded use of existing data — we will give at least 30 days' advance notice by surfacing an in-app notice on the Settings screen before the change takes effect.

Contact

For questions about this policy, email hello@flightbound.app. Formal legal notices may be sent to Generalize LLC via the same address.

← Back to FlightBound