Legal
Privacy Policy
Last updated 26 August 2026.
What we collect
Your account: email address and a hashed password. We never see your password in readable form.
What you put in: the questions you ask, the point balances and transferable-currency balances you choose to save, trips you save, routes you watch, and any sweet spots you add. Balances are numbers you type in — we never connect to your loyalty accounts and never ask for their credentials.
Email list: if you request a guide or the weekly briefing, we store your address, which magnet brought you in, and where you are in the welcome sequence.
Operational logs: requests we make to the availability provider, plus usage counts we need for quotas and billing.
Payments: handled entirely by Stripe. We store the resulting subscription or purchase status and a Stripe customer reference. We never see or store your card number.
What we don't do
- We don't sell your personal information.
- We don't share your questions or balances with other users.
- We don't run third-party advertising trackers on the app.
- We don't ask for, want, or store your airline or bank login details.
Who processes your data
We use a small number of providers, each handling only what its job requires:
- Vercel — hosting and request logs.
- Supabase — database and authentication.
- Anthropic — the model that reasons over search results. Your question and the relevant context are sent to answer it.
- Seats.aero — the award availability data behind searches.
- Stripe — payments.
- Resend — sending alerts, guide delivery and the newsletter.
Email and consent
Transactional email (award alerts you asked for, receipts, password resets) is sent because you use the service. Marketing email — the guide sequence and the weekly briefing — is sent only to addresses that asked for it. Every one of those carries a one-click unsubscribe link and honours it immediately; unsubscribing from marketing does not affect alerts you set up yourself.
Cookies
We use cookies for things the site cannot work without: your login session, a referral code if you arrived through an affiliate link (30 days), and a token that unlocks the free guide after you request it. There are no advertising or cross-site tracking cookies.
Retention and deletion
Account data is kept while your account exists. Ask us to delete your account and we will remove your account, saved balances, trips, alerts and questions; records we must keep for tax and accounting (invoices) are retained as required by law. Unsubscribed email addresses are kept on a suppression list so we don't mail you again by accident.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Email us and we'll action it — you don't need to cite a regulation to make the request.
Contact
Reply to any email from us, or write to the postal address in our email footers. See also our Terms of Service.