Privacy Policy

We collect only the information needed to operate and improve the flight tracker:

• Account information. When you use Sign in with Apple, we receive an Apple-linked account identifier and, when Apple makes them available, your email address and name. Apple may provide a private relay email address instead of your personal email.
• Saved-flight information. We store the flights you choose to track and when you saved them so the same list is available on your account.
• Service and diagnostic information. Our services process request identifiers, API routes, response status, timing, search outcomes, and error categories. Hosting providers may also process standard network information such as IP address, device or browser type, and timestamps for security and delivery.
• Website usage information. The supporting website uses PostHog to measure page views, interactions, heatmaps, and performance through pseudonymous browser identifiers stored in cookies or local storage. Session recording is disabled.

The iOS app does not currently request your precise device location. Airport coordinates and aircraft positions describe flights and airports, not the location of your phone.

We use this information to:

• authenticate your account and keep it secure;
• find flights, save your tracked flights, and present flight updates;
• operate, troubleshoot, protect, and improve the service;
• understand whether core product features are useful; and
• comply with law and enforce our terms.

We do not use your information for third-party advertising.

We disclose information to service providers only when needed to run Lufthaven. These providers process information under their own terms and privacy commitments:

• Apple for Sign in with Apple and App Store transactions;
• Supabase for authentication and account sessions;
• Cloudflare and Amazon Web Services for API delivery, security, logs, and storage;
• FlightAware and other aviation sources for flight information;
• Vercel for website hosting;
• PostHog for website product analytics; and
• Google-hosted resources when the app retrieves an airline logo.

We may also disclose information when required by law, to protect people or the service, or as part of a business transfer with appropriate safeguards. We do not sell personal information.

We keep your account record and saved-flight associations while your account is active. Removing a tracked flight deletes its association with your account; the underlying operational flight record may remain as shared aviation data. Deleting your account removes its saved-flight associations and application profile, except where retention is required for security, fraud prevention, billing, or law.

Diagnostic logs and website analytics are kept for the limited periods configured with our providers, then deleted or aggregated. Aggregated information that no longer identifies an account may be retained to understand long-term service reliability.

• You can remove an individual saved flight inside the app.
• You can request access, correction, or deletion of account data by emailing privacy@lufthaven.app. We may need to verify that the request belongs to you.
• You can clear website cookies or local storage, or use browser privacy controls, to reset or block website analytics identifiers.
• You can manage an Apple subscription in your device's App Store subscription settings. Deleting a Lufthaven account does not itself cancel billing managed by Apple.

Depending on where you live, you may have additional rights to object, restrict processing, receive a portable copy, or complain to a privacy regulator.

We use technical and organizational safeguards intended to protect information, including authenticated API access and encrypted network transport. No system is perfectly secure, so we cannot guarantee absolute security.

Lufthaven and its providers may process information in countries other than your own. Where required, we use appropriate legal safeguards for international transfers.

The flight tracker is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can delete it.

We may update this policy as the service changes. We will post the new effective date here and provide additional notice when a change is material.

Questions or privacy requests: privacy@lufthaven.app.