Privacy Policy

• Account data from Google sign-in: your name, email address, and profile photo.
• Profile & content you provide: bio, home airport, trips, flight log, reviews, photos, reels, messages, and your traveler and/or driver-guide profiles.
• Location only if you opt in (e.g. Autopilot destination detection, offline maps). You can turn this off at any time.
• Usage & device data: pages viewed, actions taken, approximate region, browser/device type, and IP address, for security and to operate the Service.
• Cookies & local storage: a session cookie to keep you signed in, plus on-device storage (IndexedDB) for offline downloads you choose to save.

• to provide and personalize the Service (feeds, recommendations, notifications);
• to enable social features (follows, messages, buddy matching, communities);
• to keep the Service safe (moderation, abuse and fraud prevention, rate limiting);
• to operate real-time chat and push notifications you enable;
• to improve reliability and performance, and to comply with legal obligations.

Where GDPR applies, we process your data on the bases of: performance of a contract (to provide the Service you request), consent (e.g. location, push notifications — which you can withdraw), legitimate interests (security, abuse prevention, improving the Service), and legal obligation where required.

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, including:

• Google — authentication (sign-in);
• Hosting & database providers — to run the app and store data;
• Object storage / CDN — to deliver media (photos, reels, music);
• AI providers — to generate assistant replies and city guides you request;
• Error & performance monitoring — to detect and fix problems.

Content you choose to post publicly (e.g. reviews, public profile, reels) is visible to other users according to the audience you select.

We use a strictly necessary session cookie to keep you signed in and to protect against cross-site request forgery. We do not use third-party advertising cookies. You can control cookies in your browser, but disabling the session cookie will prevent sign-in.

We keep your data while your account is active. When you delete your account, we delete or irreversibly anonymize your personal data within 30 days, except where we must retain limited records to comply with legal obligations or resolve disputes.

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data (edit your profile any time);
• delete your account and data — from Settings → Delete account;
• export a copy of your data (data portability);
• object to or restrict certain processing, and withdraw consent.

To exercise any right, use the in-app controls or email privacy@fly.cloud. You also have the right to complain to your local data-protection authority.

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

We use industry-standard measures — encrypted transport (HTTPS), access controls, rate limiting, and content-type protections — to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information.

FLY.CLOUD is not intended for children under 16. We do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy. If we make material changes, we will notify you in the app and update the effective date above.

For privacy questions or requests, email privacy@fly.cloud.