Privacy Policy

Last updated: October 6, 2026

This policy explains what the FlySee iPhone app (“the app”) does with your information, and what the website flysee.app does. “We” and “us” mean the developer of FlySee, who makes both.

The short version

There is no account and no sign-up.
Your Log — which country you were in, day by day — is stored only on your iPhone. We don’t have a copy.
Your location and your photos are turned into a country and a day on your iPhone. Coordinates, photos and their metadata never leave it.
The app talks to two services: RevenueCat, for subscriptions, and TelemetryDeck, for anonymous usage statistics. Neither receives anything from your Log.
No ads, no tracking across apps or websites, and we don’t sell your data.

What stays on your iPhone

To keep your record, the app stores on your iPhone:

Your Log: for each day, the country or countries you were in, where that came from (tracking, a photo or your own edit), and when during the day each country was first seen;
your home base: a country, or none if you chose “I’m a nomad”;
your answer to “What do you want to track?” from the start of the app;
your settings and the app’s own state: whether tracking and arrival notifications are on, how far the photo scan has got, and the time of the last location reading it used (a time, not a place).

None of this is sent to us or to anyone else, and it isn’t synced through iCloud. It is protected by your iPhone’s own security, such as your passcode. If you back up your iPhone to iCloud or to a computer, this data is part of that backup, like any app’s data.

Location

If you allow it, the app uses your iPhone’s location to work out which country you’re in. With “Always” it also does this in the background, using iOS’s significant-change and visit monitoring — not continuous GPS. iOS may then open the app in the background when you move.

Each location reading is matched to a country on your iPhone, using country borders built into the app. No network request is made for this, and no map or geocoding service is asked. The coordinates are then discarded: only the country, the day and the time are kept. Nothing is sent from the app while it runs in the background.

You can turn tracking off in the app (Settings → Tracking → Smart tracking), or change the location permission in iPhone Settings at any time. Without it, you can still add and correct stays by hand.

Photos

If you allow it, the app reads the date and location saved with each photo in your library — or only in the photos you selected, if you limit access — to rebuild the trips you’ve already taken. It doesn’t look at the pictures themselves, doesn’t change or delete anything in your library, and doesn’t upload photos or their metadata. Each photo’s location is matched to a country on your iPhone, and only the country and the day are added to your Log.

Notifications

If you allow notifications, the app shows an arrival notice when tracking records a new country. It is created on your iPhone; there is no push server and no notification token is sent anywhere. You can turn it off in Settings → Tracking → Arrival notifications.

Export

Export Log creates a PDF, Excel or CSV file of your Log on your iPhone and hands it to the iOS share sheet. You decide where it goes; nothing is uploaded by the app. The latest export is kept in the app’s temporary folder until you make the next one. Once you share a file, whoever receives it handles it under their own terms.

Subscriptions: Apple and RevenueCat

Purchases are made through the App Store and paid to Apple. We never see your payment details, your name or your Apple Account email.

To check and restore subscriptions, the app uses RevenueCat, Inc. (USA). RevenueCat receives:

an anonymous ID it creates for your installation of the app;
your purchases and subscription from the App Store: the product, transaction IDs, dates, price and whether a trial or introductory price was used;
technical details: Apple’s identifier for this app on your device (“identifier for vendor”), your App Store country, your preferred languages, device model, iOS and app version, and the IP address of the connection;
whether you installed the app from an Apple Ads ad on the App Store and, if so, which campaign, ad group and search keyword it was. The app passes RevenueCat a token iOS provides for this, and RevenueCat asks Apple what it stands for. It doesn’t use Apple’s advertising identifier, and Apple shares nothing about who you are; if you didn’t come from an ad, RevenueCat learns only that.

RevenueCat uses this, on our behalf, to confirm what you bought, unlock Pro and restore it on another device, and to give us subscription reports, including which of our App Store ads led to subscriptions. It receives nothing from your Log. See RevenueCat’s privacy policy.

Usage statistics: TelemetryDeck

To see where the app is hard to use — for example, where people give up during setup — the app sends anonymous usage signals to TelemetryDeck GmbH (Germany). They are sent only while the app is open on screen.

A signal says that something happened in the app, such as:

a setup screen was shown or left, and how;
a permission was allowed or refused, or changed in iPhone Settings;
a photo scan finished, with the number of countries and days as a range (0, 1, 2–5, 6–20, 21+);
the paywall was opened, and a purchase or restore succeeded, failed or was canceled;
an action on the main screens: a period or view switched, the Log filtered, an entry saved or deleted, an export made, a setting switched.

Each signal also carries your setup: whether you have Pro or a trial, whether tracking is on, the goals you picked, your home base as a region only (US, UK, EU, UAE, other or nomad), and whether setup is finished. TelemetryDeck’s software adds the app and iOS version, device model, language, screen size, accessibility settings such as text size, how long ago the app was first opened and how often it’s used, and your iPhone’s region setting — which the app reduces to the same regions. Your time zone and the local date and time are removed before anything is sent.

To count users without knowing who they are, the app turns Apple’s identifier for vendor into a one-way hash on your iPhone, and TelemetryDeck hashes it again when it arrives, so it can’t be turned back into the original. According to TelemetryDeck, it doesn’t store IP addresses.

Signals never include coordinates, the countries you’ve been to, the dates of your stays, anything about your photos, anything you type, or your name or email. TelemetryDeck may keep signals for several years; they can’t be traced back to you. See TelemetryDeck’s privacy policy.

Apple

Apple handles downloads, purchases and refunds under Apple’s privacy policy. Apple gives us sales reports, and — only if you chose to share analytics with app developers in iPhone Settings — crash reports and usage statistics that don’t identify you. When the app asks for a rating, it uses Apple’s own prompt, and your rating goes to Apple.

Email

If you write to us — for example with Send feedback in Settings — we receive your email address and what you write. Send feedback adds the app version, iOS version and iPhone model under your message, and nothing from your Log. We use your email only to reply and keep it only as long as needed for that.

Pages opened in the app

This policy, the Terms of Use and Help & FAQ open inside the app. They load like any web page, but the app sends nothing from your Log with them and forgets their cookies and cache when you close them.

This website

flysee.app uses no cookies, no analytics and no third-party scripts or fonts. It is hosted on Google’s Firebase Hosting: when you open a page, Google receives the technical data that every web request carries, such as your IP address and browser type, to deliver the page and protect the service. See Google’s privacy policy.

What we don’t do

We don’t ask for an account, your name, email or phone number.
We don’t show ads or use Apple’s advertising identifier, and we don’t track you across apps or websites.
We don’t sell or rent your data, or share it for advertising.
We don’t run servers that store your Log.

Why we use this data

Where the law asks for a legal basis to use personal data, ours are:

subscription data — to provide the subscription you bought, and to keep records the law requires;
usage statistics, emails and website requests — our legitimate interest in running, supporting and improving the app and the website;
which App Store ad led to an install — our legitimate interest in knowing which of our ads work.

Data that stays on your iPhone is processed by the app for you and never reaches us. RevenueCat stores data in the USA, and Google may process website requests outside your country; they protect such transfers with contractual safeguards.

How long data is kept

On your iPhone: until you delete it. You can delete entries in the Log; deleting the app deletes your Log and settings from the iPhone (copies in your backups stay until those are replaced or deleted).
At RevenueCat: while needed to provide your subscription and for the record-keeping the law requires.
At TelemetryDeck: as described above.
Emails: as long as needed to answer you.

Your choices and rights

Change or withdraw location, photo and notification access at any time in iPhone Settings, or turn tracking and arrival notifications off in the app.
Correct or delete any entry in your Log, or delete the app to remove everything from your iPhone.
Depending on where you live, you may have the right to access, correct, delete or export data about you, to object to or restrict its use, and to complain to your data protection authority.

Your Log never reaches us, so we hold no copy of it to show or delete. Usage signals can’t be linked to you, so we can’t pick out yours. For your purchase record at RevenueCat, email us with the order ID from your Apple receipt and we’ll find and delete it, except what we must keep by law. We don’t sell or share personal information as California law defines those terms.

Children

FlySee is made for adults who travel and isn’t directed at children. We don’t knowingly collect data from children.

Changes

If the app starts handling data differently — for example, if we add iCloud sync — we will update this policy before that version is released, and change the date at the top.

Contact

Questions about privacy: support@flysee.app.