Privacy policy

What we collect

We collect the least we need to run the service:

• Your email address, so you can sign in.
• The booking data you add: the airline, the booking reference, the legs, the dates, the seats.
• The files you upload yourself: boarding pass photos, confirmation emails, PDFs.
• Your frequent flyer numbers — the numbers only. We never ask for passwords and never store them.
• We do not store payment card details in any form.

Why we collect it

• To show your bookings and your open tickets in one place.
• To remind you before a flight, and before an open ticket expires.
• To find flights whose miles were never credited and prepare the claim for you — sending it is always your decision.

Smart reading through the Claude API

When you photograph a boarding pass or upload an image or a PDF, we may send the contents of that file to Anthropic's Claude service to extract the booking details (airline, route, date, booking reference). This happens from our server only, for that purpose only, and we do not send your email address or any of your other data with it. The barcode on a boarding pass is read on your own device and is never sent anywhere.

Where your data lives

On a server of our own, behind an encrypted connection. Attachments sit in isolated storage that nobody but you can reach, and are served over links that expire quickly. Every query against your data is limited to your account, so no other user can reach it.

Deletion

The "Delete my account" button in Settings really does delete everything: the bookings, the attachments, the loyalty programmes and the account itself. No email request, no waiting period.

Export

Your data is yours. From Settings you export all of it as JSON in one click, and import it back whenever you like.

We don't share your data

We do not sell your data and do not pass it to any third party without your explicit consent, apart from the smart reading described above and anything the law requires of us.

The legal framework

We work under the Saudi Personal Data Protection Law (PDPL), issued by SDAIA. For any question or request about your data, write to [email protected].