Privacy Policy

What we collect

• Search queries -- your natural language prompts are sent to our backend to parse and search flights. We do not store your search text. Anonymized metrics (result count, duration, selected filters) are logged server-side.
• Usage analytics -- anonymized page views and interaction data via PostHog and Google Analytics, loaded only if you accept cookies. No personally identifiable information is tracked.
• Rate limiting data -- your IP address is used server-side to enforce the 10 searches per hour limit. It is not stored or shared.
• Server-side search metrics -- result count, search duration, and selected filters are logged anonymously. Your search text is never stored.
• Email for price alerts -- if you set a price alert, we store your email address and search criteria (routes, price threshold). This data is stored in a local database and used solely to send you price notifications. Alerts expire after 90 days. You can unsubscribe at any time via the link in each email.

What we do not collect

• No account registration, no login, no passwords
• No cookies for advertising or cross-site tracking
• No payment or financial information (FlyFast does not sell tickets)
• No location data beyond what you type in your search

Cookies

We use one analytics cookie from PostHog and one from Google Analytics, loaded only if you accept cookies. You can change your preference at any time via the 'Cookie settings' link in the footer. To clear cookies manually, use your browser's settings.

Third-party services

FlyFast uses the following external services to operate:

• Flight data providers -- your search parameters (origins, destinations, dates) are sent to retrieve flight results.
• Google Gemini -- AI service for parsing natural language queries into structured search parameters.
• PostHog -- privacy-focused analytics. EU-hosted. No personal data is sent.
• Vercel -- hosting provider for the web application.
• Resend -- email delivery service for price alert notifications. Only your email address and alert details are shared with Resend when sending notifications.

Each service processes data under its own privacy policy. We recommend reviewing their terms if you have concerns.

Data retention

Search queries are processed in real time and not stored after the response is sent. Client-side analytics data is retained for up to 12 months. Server-side search metrics are retained for up to 12 months. Rate limiting data expires automatically. Price alert data (email, search criteria) is retained for 90 days and automatically deleted after expiry.

Your rights

You can request access to, correction of, or deletion of any data we hold about you. Contact hello@buildingopen.org with your request.

Open source

FlyFast is open source. You can inspect exactly what data the application collects by reviewing the code at github.com/buildingopen/opensky.