FlightDex — Privacy Policy
Effective date: 2026-08-11 Last updated: 2026-08-11
FlightDex ("FlightDex", "we", "us") is a flight-tracking app operated by FlightDex. This policy explains what information the app collects, why, who we share it with, and the choices and rights you have. If you have questions, contact us at [email protected].
By using FlightDex you agree to this policy. If you don't agree, please don't use the app.
1. Information we collect
We collect only what we need to track your flights and run the app.
a) Account & identity. When you sign in, our authentication provider (Google Firebase Authentication) creates a unique account identifier for you and handles your sign-in credentials. We store your account identifier so your flights and history stay tied to your account. We do not store your password. Depending on how you sign in, Firebase may process your email address or the identity from your chosen sign-in method; see Google's privacy policy for how Firebase handles that.
b) Flight and travel information you provide. The flights you add and the details attached to them: flight numbers, airlines, dates, departure/arrival airports, scheduled and actual times, gates and terminals, seat, cabin/class, booking or confirmation codes, aircraft type, and tail numbers. From these we derive your travel history and Passport statistics (miles, hours, countries, airports, and achievement "stamps"). If you organise flights into a trip, we also store what you write there: the trip name, your trip notes, and your packing checklist. That text is yours — we store it only so it syncs to your other devices and survives a reinstall, and it is never used for anything else.
c) Calendar (optional). If you grant calendar permission, FlightDex can read your device calendar to detect upcoming flights so you can add them quickly. The text of matching calendar events is sent to our server only to scan it for flight information, is processed transiently, and is not stored — only the specific flights you choose to add are saved to your account. You can decline or revoke this permission at any time in your device settings.
d) Notifications. If you enable notifications, we store a push token from Google Firebase Cloud Messaging and your device platform so we can send you flight alerts (delays, gate changes, boarding, and similar). You can disable notifications at any time.
e) Sharing and follows (optional). If you share a flight, we create a shareable link and store the flight status that the link exposes. If you follow a friend's shared flight, we store that follow relationship. Shared links intentionally exclude your booking/confirmation code, seat, and full name — a follower only sees flight number, route, times, gate, and progress.
f) Technical data needed to operate the service. Basic request data required to deliver the app (for example, your device's network address is processed transiently to route responses). We do not currently use third-party advertising or analytics SDKs, and we do not build advertising profiles.
g) Website feedback (optional). If you use the feedback form on our website, the message you send — and your email address, only if you choose to include one — is delivered to us through our form provider, Formspree, so we can read and reply. We use it solely to respond and to improve FlightDex; it is never sold or used for advertising.
h) Boarding passes (on-device only). If you scan or import a boarding pass, it is stored encrypted on your device only. The barcode payload and its details are never uploaded to our servers, never logged, and are excluded from device-to-device transfer and cloud backup. Deleting the pass, or the app, removes it. We never receive this data.
i) Fares you enter (on-device only). If you record what a flight cost, that amount and its currency are stored only on your device, in their own local database file, and are never sent to our servers — we cannot see what you paid. Unlike boarding passes, that one file is included in Android's own backup, so a fare survives a reinstall or a move to a new phone; that backup goes to your personal Google account, never to us. Deleting the fare, or the app, removes it. A fare also appears in a flight log you export yourself, which you then choose who to share with.
j) Subscription and purchase data. If you subscribe to FlightDex Pro, your payment is processed by Google Play — we never receive or store your card number or other payment details. To unlock Pro features we receive and store, from Google Play, a purchase token and your subscription status (for example: active, in trial, or expired) and its renewal/expiry date. We verify this with Google's Play Developer API so that only a genuine, active subscription unlocks Pro. This is the only purchase-related data we hold.
We do not collect your device's GPS/location, your contacts, your photos, or your microphone. Camera access, if you grant it, is used only to scan a boarding-pass barcode on your device (see 1(h)); no photo or camera image is uploaded or stored.
2. How we use your information
We use your information to: add and track your flights; show live status and estimated times; send the alerts you opt into; build your travel history and Passport; enable flight sharing and follows that you initiate; provide and manage your FlightDex Pro subscription and unlock Pro features for active subscribers; keep the service secure and working; and comply with legal obligations.
Delay predictions and status are estimates. Flight information can be delayed or inaccurate. Always confirm critical details (like departure time and gate) with your airline.
3. How your information is shared
We do not sell your personal information, and we do not share it for advertising.
We share information only with service providers that help us run the app, and only as needed:
- Google Firebase (Authentication and Cloud Messaging) — account identity and push notification delivery.
- Google Play Billing / Play Developer API — processes your subscription payment and confirms your subscription status so we can unlock Pro. Google receives your payment details; we do not.
- FlightAware (AeroAPI) — our flight-data provider. We send flight identifiers (such as flight number and date) to retrieve status; we do not send your account identity, booking code, or seat to FlightAware.
- Our hosting provider — the servers and database that store your account data, located in the United States.
- Formspree — processes submissions from the feedback form on our website and forwards them to us by email. Only what you type in the form (and your email, if you provide one) is sent.
We may also disclose information if required by law, or to protect the rights, safety, and security of our users or the service.
When you choose to share a flight or follow a friend, the limited flight information described in Section 1(e) is shared with the people you share it with. That sharing is under your control and can be stopped.
4. Data retention and deletion
We keep your information while your account is active. You can permanently delete your account and all associated data at any time from within the app: You → Account → Delete account. This removes your flights, history, Passport, device tokens, and share/follow relationships from our systems. You can also request deletion by emailing [email protected]. Boarding passes and fares live only on your device — we never receive them — and deleting your account erases them from the phone too, as does deleting them individually or uninstalling the app. See our account deletion page for full details.
5. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing (for example under the EU/UK GDPR or the California CCPA/CPRA). You can exercise deletion directly in the app, or contact us at [email protected] for any request. We will not discriminate against you for exercising these rights.
6. Security
We protect your information with industry-standard measures, including encryption in transit (HTTPS) between the app and our servers, and encryption at rest for boarding passes stored on your device. Secret credentials are held server-side and are never shipped in the app. No method of transmission or storage is perfectly secure, but we work to protect your data and to be honest with you if something goes wrong.
7. International transfers
Your information may be processed in the United States and other countries where our service providers operate. Where required, we rely on appropriate safeguards for such transfers.
8. Children
FlightDex is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
9. Changes to this policy
We may update this policy as the app evolves. We will post the new version at https://flightdex.app/privacy and update the "Last updated" date. Significant changes will be communicated in the app where appropriate.
10. Contact
Questions or requests: [email protected]. FlightDex