Airportify is an airport guide and a travel collection. We collect only what the app needs to work. We do not sell data. In the phone app we show labelled Google AdMob ads - you decide whether they are personalised to you, and saying no does not block anything (section 9).
1. Who is responsible for your data
The data controller is Kajetan Pilachowski. For any personal data matters, write to kontakt@kajetano.pl.
2. What data we collect
- Account: email address (for sign-in codes), nickname, avatar and - if you provide it - country. When you sign in with Apple or Google, we receive your email address from them (with Apple this may be a hidden relay address) and an account identifier - we never receive your password.
- Flights: flight number, date, departure and arrival airport, and from a boarding pass also the cabin class and seat. The boarding pass is read on your phone. We do not store the raw boarding pass code, the booking reference (PNR) or passenger details on our servers. A boarding pass kept in the app to show at the gate stays only in your phone’s storage and is removed a day after the flight. An import file from another app (e.g. myFlightRadar24) is also read on your device, and we take only the flight number, date and airports from it - notes and seats are not sent.
- Check-ins and nearby airports: the airport, the day and how the visit was confirmed. We use your location once - to check whether you are at the airport or to find the nearest airports. We do not store the coordinates themselves.
- Collection: XP points, magnets, passport visas, fridge layout, saved airports.
- Friends: invitations and accepted friendships.
- Submissions and feedback: the content and an optional photo, and for feedback also the screen address, browser type, screen size and - only if you attach it yourself - a photo or a short video (up to 15 s). We never record or capture anything on our own.
- Notifications: if you turn them on - the technical subscription address of your browser or the push token of the phone app (Apple, Google).
- Close people: the friends you choose and the type of message they get after your plane lands. When a close-person invite link is opened in a browser without the app, we keep a hashed IP address (not the address itself) for 24 hours, so the app installed on the same phone can offer to join.
- Premium: if you buy Premium - the purchase type, the store and events with dates (purchase, renewal, cancellation, refund, end). Payment is handled by the App Store or Google Play; we never receive your card number or payment details.
- Technical data: IP address and basic server logs recorded by the hosting provider.
3. Why and on what legal basis
- Running your account and the app's features - required by our agreement, i.e. the Terms of Use (Art. 6(1)(b) GDPR).
- Security, preventing abuse (e.g. cheating with points), moderating submissions and improving the app based on feedback - our legitimate interest (Art. 6(1)(f) GDPR).
- Showing labelled ads and partner links that keep the app running - our legitimate interest (Art. 6(1)(f) GDPR). We do not use your personal data for this.
- Google AdMob ads in the phone app and access to the device advertising ID - your consent (Art. 6(1)(a) GDPR), which you can change at any time (section 9).
- Notifications and location access - your consent, given in the browser or in your phone settings, which you can withdraw at any time (Art. 6(1)(a) GDPR).
- Notifications about deals and partner offers (flight deals, things to do, discount codes) - only if you turn on "Deals and partner offers"; this is your consent (Art. 6(1)(a) GDPR), which you can switch off in your Profile at any time. We send them a few times a month at most and never share your data with partners. With Premium you get no partner offers - only flight deals, if you turn them on.
4. Who can see your data
- Friends - nickname, country, travel statistics and collection. Only people whose invitation you accepted or who accepted yours.
- Other signed-in users - your nickname and the number of accepted submissions in the ranking of people who add airport information.
- Close people you choose - a notification with your nickname and flight route when the plane lands. You can turn it off for any flight or remove a person from the list.
- Moderators - the content of your submissions and feedback, so they can review them.
- Administrators - account data needed to run the app (e.g. nickname, number of flights, email address). The email address is shown only after a deliberate reveal, and every reveal is logged.
- Saved airports and flight history are visible only to you.
5. Who we share data with
We use external companies that process data on our behalf:
- Supabase - database, sign-in and photo storage.
- Vercel - app hosting and anonymous visit statistics (no cookies).
- Resend - sending sign-in code emails.
- AeroDataBox (via RapidAPI) - flight schedules and landing information. We send only the flight number and date, with no data about you.
- Notification services (Apple, Google, Mozilla - depending on your phone and browser) - delivering notifications, if you turn them on.
- DeepL - automatic translation of airport tips into other languages. We send only the text of the tip, without the author's data.
- Apple and Google - sign-in with their accounts, if you choose it.
- Open-Meteo - weather forecast for the arrival city. We send only the city's coordinates, with no data about you.
- Wikimedia Commons - city photos loaded from their servers, which see your IP address when doing so.
- RevenueCat - handling Premium purchases in the phone app: it verifies store purchase receipts and subscription status. It receives your account's internal ID (no email or nickname), your Premium purchase history and basic device data.
- Apple (App Store) and Google (Google Play) - Premium payments, under the terms of the store you buy from.
- Google (AdMob) - ads in the phone app. Google acts here as a separate data controller (section 9).
Some of these companies are based or have servers outside the European Economic Area. Data is transferred there under mechanisms provided for in the GDPR, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework - depending on the provider.
6. How long we keep data
- Account, flight and collection data - until you delete your account.
- Photos from submissions and photos and videos from feedback - until reviewed, then we delete them.
- An account with no activity (no flight, check-in, submission or feedback) within 14 days of being created may be deleted along with its data - we let you know in the app beforehand.
- The log of support actions (e.g. email address reveals) - as long as it is needed for security.
- Airport information you helped add stays in the app after your account is deleted - no longer linked to you.
- Server logs - for the period set by the hosting provider.
7. Your rights
You have the right to access your data, rectify it, erase it, restrict its processing, port it and object to processing based on our legitimate interest. You can withdraw your consent at any time.
You can delete your account yourself in Profile → Account & privacy → Delete account. For anything else, write to kontakt@kajetano.pl. You can also lodge a complaint with a data protection authority - in Poland, the President of the Personal Data Protection Office (UODO).
8. Cookies and browser storage
We use only what is necessary for the app to work:
- sign-in session cookies,
- cookies with your settings: language, theme, last opened collection tab,
- a cookie remembering that you have seen the welcome screen,
- in device storage: data for working offline, submission drafts, a flight added without an account and which announcements you have already seen.
On the website we do not use advertising or analytics cookies. In the phone app, Google AdMob uses device storage and the advertising ID - only to the extent you consent to (section 9).
To know how many people visit the site and where they come from, we count visits with Vercel Web Analytics. It works without cookies and without storing anything in your browser, and collects only general data: the page visited, the referring page, country, and device and browser type. It cannot recognise you between visits or link visits to your account.
9. Ads and partner links
Ads may appear in the app, always labelled as "Sponsored" or "Ad".
- Our partner campaigns (e.g. eSIM, lounges, parking) are chosen on our server based on what is on the screen - e.g. the destination country of your trip or the airport you are viewing. The partner receives no data about you from us.
- We count only the total number of views and clicks of each campaign - not linked to your account or device.
- When you click, you go to the partner's website. The partner may record that you came from us (e.g. with a cookie on its own site) and pay us a commission if you buy something. Its own privacy policy applies on its site.
Google AdMob ads in the phone app
- In the iPhone and Android app, some screens (e.g. the airport page, your flights) show a Google AdMob banner above the bottom menu. Google chooses the ad. These ads do not appear on the website.
- Google may use the device advertising ID (IDFA on iPhone, advertising ID on Android), approximate location derived from your IP address, device information and how you interact with ads - to show an ad, count views and clicks, prevent fraud and, if you agree, personalise ads for you.
- On first launch in the European Economic Area and the United Kingdom we ask for consent with a Google form. On iPhone, the system also asks whether the app may track your activity. Saying no does not block anything - you will see non-personalised or limited ads.
- Change or withdraw consent in Profile → Account and privacy → Ad consent, and turn off or reset the advertising ID in your phone settings.
- We do not share your Airportify account (email, nickname, flights) with Google. Google processes data as a separate controller, under How Google uses information from sites or apps that use its services and the Google Privacy Policy.
- Premium accounts may see fewer ads.
10. Age
You must be at least 16 years old to create an account.
11. Changes
When we change how we process data, we will update this page and the date at the top, and let you know about significant changes in the app.
This is a translation. If it differs from the Polish version, the Polish version prevails.