Privacy Policy

1. Information We Collect

We collect information you provide directly when you:

• Create an account (name, email address, profile photo)
• Complete your traveler profile (age, gender, location, travel preferences)
• Post trips or send join requests
• Make payments through our platform
• Contact our support team

We also automatically collect certain technical data including:

• IP address and approximate location (country level)
• Browser type, device type, and operating system
• Pages visited, features used, and time spent on the platform
• Cookies and similar tracking technologies (see our Cookie Policy)

2. How We Use Your Information

Your information is used to:

• Create and maintain your account and traveler profile
• Match you with compatible travel partners based on your preferences
• Process payments and prevent fraud
• Send you trip-related notifications (with your consent)
• Improve and personalise our AI travel planner
• Comply with legal obligations and enforce our Terms of Service
• Respond to your support requests

We do not sell your personal information to third parties. We do not use your data for political advertising or profiling.

3. Sharing Your Information

We share your data only in limited circumstances:

• With other users — your public profile (name, photo, travel score, city) is visible to other logged-in users. Your email, exact location, age, and contact details are never shared.
• With service providers — trusted partners who help us operate (hosting, payment processing, email delivery). They may only use your data to provide services to us.
• With Razorpay — for users making payments in India, transaction data is shared with Razorpay in accordance with their privacy policy.
• For legal reasons — if required by law, court order, or to protect the rights and safety of our users.

4. Data Storage & Security

Your data is stored on Supabase-hosted servers in the European Union. We use industry-standard encryption (TLS in transit, AES-256 at rest), row-level security, and regular security audits to protect your data.

We retain your account data for as long as your account is active. Deleted accounts are purged within 30 days, except where we are required to retain records for legal purposes.

5. Your Rights (GDPR & Indian IT Act)

You have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your account and personal data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdrawal of consent — opt out of marketing communications at any time

To exercise any of these rights, email us at privacy@FLYTINERARY.app.

6. Children's Privacy

FLYTINERARY is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us immediately.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email and a banner on the platform at least 7 days before they take effect. Continued use of FLYTINERARY after changes constitutes acceptance.

8. Contact

For privacy-related queries, contact our Data Protection Officer at privacy@FLYTINERARY.app or write to: FLYTINERARY Privacy Team, Bengaluru, Karnataka, India.