Privacy Policy

What we collect

• Search queries -- your natural language prompts are sent to our backend to parse and search flights. We do not store queries long-term.
• Usage analytics -- anonymized page views, search counts, and error rates via PostHog. No personally identifiable information is tracked.
• Rate limiting data -- your IP address is used server-side to enforce the 10 searches per hour limit. It is not stored or shared.
• Email for price alerts -- if you set a price alert, we store your email address and search criteria (routes, price threshold). This data is stored in a local database and used solely to send you price notifications. Alerts expire after 90 days. You can unsubscribe at any time via the link in each email.

What we do not collect

• No account registration, no login, no passwords
• No cookies for advertising or cross-site tracking
• No payment or financial information (FlyFast does not sell tickets)
• No location data beyond what you type in your search

Third-party services

FlyFast uses the following external services to operate:

• Google Flights -- flight data provider. Your search parameters (origins, destinations, dates) are sent to retrieve flight results.
• Google Gemini -- AI service for parsing natural language queries into structured search parameters.
• PostHog -- privacy-focused analytics. EU-hosted. No personal data is sent.
• Vercel -- hosting provider for the web application.
• Resend -- email delivery service for price alert notifications. Only your email address and alert details are shared with Resend when sending notifications.

Each service processes data under its own privacy policy. We recommend reviewing their terms if you have concerns.

Data retention

Search queries are processed in real time and not stored after the response is sent. Anonymized analytics data is retained for up to 12 months. Rate limiting data expires automatically. Price alert data (email, search criteria) is retained for 90 days and automatically deleted after expiry.

Your rights

You can request access to, correction of, or deletion of any data we hold about you. Contact hello@buildingopen.org with your request.

Open source

FlyFast is open source. You can inspect exactly what data the application collects by reviewing the code at github.com/buildingopen/opensky.