FlightScout

FlightScout collects only the data necessary to deliver flight deal alerts to you. We don't sell or share your personal data with advertisers. This policy describes what we collect, why we collect it, and which third-party services process it on our behalf.

When you first open FlightScout, an anonymous account is created automatically using a randomly generated ID that can't be traced back to you. No email or name is required.

You may optionally sign in with Apple during onboarding. When you do, Apple shares a stable anonymized user ID with us (and optionally a private relay email address) which is used to associate your account with your Apple ID. You can review Apple's privacy practices at apple.com/legal/privacy.

You can delete your account at any time from the Settings screen inside the app. Deletion permanently removes your watch pairs, preferences, notification history, and device token from our servers.

To monitor flight prices and deliver alerts, we store the following data associated with your anonymous account ID:

- Watch pairs: origin airport, destination airport, travel dates, and trip preferences (budget range, trip duration, date flexibility, traveler type)

- Airline blocklist: any airlines you've chosen to exclude from results

- Notification history: a record of every push alert sent to you, including route, price, airline, travel dates, and a link to Google Flights. This record is retained until you delete individual notifications or your account.

- Device token: your APNs push token, used to deliver notifications (see Push Notifications section)

Flight price data is collected server-side and is not tied to your identity. It's used solely to detect price drops and identify deals on your watched routes.

If you enable push notifications, your device token is stored on our servers to deliver deal alerts via Apple Push Notification service (APNs). Device tokens are used exclusively for sending FlightScout notifications and are deleted when you disable notifications or delete your account.

Push notifications contain flight deal data (route, price, airline, travel dates) and a deal reference ID used to navigate directly to the deal inside the app.

If you add the FlightScout widget to your home screen, it reads cached deal data from a shared app container on your device. The widget may also perform background reads from our servers using your anonymous account ID to refresh deal information. No additional data is collected by the widget beyond what the app already stores.

FlightScout uses PostHog for product analytics. PostHog helps us understand how the app is used so we can improve it. It is not used for advertising.

PostHog automatically collects device type, OS version, app version, and session data. We also send the following events:

- Onboarding step completions (step name and index)

- Home airport selection (IATA code and city)

- Watch pair creation (origin/destination airports, whether flexible dates are used)

- Notification permission outcome (granted or denied)

- Google Flights link opens (route and deal price)

- Push notification opens (deal ID)

- Sign in events (method used)

None of these events include your name, email, or any directly identifying information. You can review PostHog's privacy practices at posthog.com/privacy.

Supabase -- Our backend infrastructure runs on Supabase, which hosts our database and server-side functions. Your watch pairs, preferences, notification history, and device token are stored on Supabase's cloud infrastructure. Supabase is a data processor acting on our behalf. Review their privacy policy at supabase.com/privacy.

PostHog -- Analytics processor as described above. See posthog.com/privacy.

Apple -- Push notifications are delivered via APNs. In-app purchases and subscriptions are processed by Apple. If you use Sign in with Apple, Apple processes your authentication. See apple.com/legal/privacy.

Your watch pairs, preferences, and notification history are retained as long as your account is active. Flight price data used for deal detection is retained temporarily and automatically pruned over time. Notification history records persist until you delete them from the app or delete your account entirely.

If you're in the European Union or California, you have the right to request access to the data we hold about you, request deletion of your data, and opt out of certain data processing.

You can delete all your data at any time by deleting your account from the Settings screen inside the app. For other data requests or questions, contact us at the email below. We'll respond within 30 days.

We process your data to provide the service you signed up for (contractual necessity under GDPR Article 6(1)(b)) and to improve the product (legitimate interest under Article 6(1)(f)).

We don't knowingly collect any information from children under 13. The app doesn't require personal information to function.

If we update this policy, changes will be posted on this page with an updated date.

Questions about this policy or your data? Reach us at