Privacy Policy

1. Introduction

Welcome to SkyCalc ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Service").

By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Service.

2. Information We Collect

We are committed to data minimization and only collect information that is strictly necessary to provide our Service. The personal information we collect is limited to:

2.1 Personal Information You Provide

• First Name: Used to personalize your experience and address you in communications.
• Last Name: Used in conjunction with your first name for account identification and personalization.
• Email Address: Used for account authentication, communication, password recovery, and important service-related notifications.
• Profile Picture (Optional): You may optionally upload a profile picture to personalize your account. This is entirely voluntary.

2.2 Information We Do NOT Collect

We want to be transparent about the information we do NOT collect or store:

• Payment card numbers, bank account information, or other financial account details
• Social Security numbers or government-issued identification numbers
• Precise geolocation data
• Biometric data
• Health or medical information
• Information from third-party social media accounts
• Browsing history outside of our Service

3. How We Use Your Information

We use the limited personal information we collect for the following purposes:

• Account Creation and Management: To create and maintain your user account, authenticate your identity, and provide you with access to our Service.
• Service Delivery: To provide, operate, and maintain the core functionality of SkyCalc, including tracking your airline loyalty programs, calculating points and miles, and displaying your progress.
• Personalization: To personalize your experience by displaying your name and profile picture within the application.
• Communication: To send you important service-related communications, such as account verification, password reset emails, security alerts, and updates to our terms or policies.
• Customer Support: To respond to your inquiries, provide technical support, and address any issues you may encounter.
• Service Improvement: To analyze usage patterns in aggregate (not individually identifiable) to improve our Service, fix bugs, and develop new features.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.

4. Payment Processing

Our Service offers premium subscription tiers that require payment. We have partnered with Stripe, Inc. ("Stripe") to process all payments securely.

4.1 How Payment Processing Works

• When you subscribe to a paid plan, you will be redirected to Stripe's secure payment portal.
• All payment information (credit card numbers, debit card numbers, bank account details, etc.) is entered directly into Stripe's secure interface.
• We do NOT collect, store, process, or have access to your full payment card details.
• Stripe provides us only with limited information necessary to manage your subscription, such as the last four digits of your card, card type, expiration date, and subscription status.

4.2 Stripe's Privacy Practices

Stripe is a PCI-DSS Level 1 certified payment processor, the highest level of certification in the payment industry. Stripe's collection and use of your payment information is governed by their own privacy policy, which can be found at: https://stripe.com/privacy

We encourage you to review Stripe's privacy policy to understand how they handle your payment information.

5. Data Sharing and Disclosure

5.1 We Do NOT Sell Your Data

We do NOT sell, rent, lease, or trade your personal information to third parties for their marketing purposes or any other purpose. Your data is not a product we monetize.

5.2 Limited Sharing

We may share your information only in the following limited circumstances:

• Service Providers: We share information with trusted third-party service providers who assist us in operating our Service, subject to strict confidentiality obligations. These include:
  • Supabase (database hosting and authentication)
  • Stripe (payment processing)
  • Cloud hosting providers
• Legal Requirements: We may disclose your information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that such disclosure is necessary to: (a) comply with applicable laws or legal obligations; (b) protect and defend our rights or property; (c) prevent fraud or other illegal activity; (d) protect the safety of our users or the public.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service of any change in ownership or uses of your personal information.
• With Your Consent: We may share your information for other purposes with your explicit consent.

6. Data Security

We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Secure authentication mechanisms
• Regular security assessments and updates
• Access controls limiting employee access to personal information on a need-to-know basis
• Row-level security policies in our database ensuring users can only access their own data

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining industry-standard protections.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• For the duration of your active account
• As needed to provide you with our Service
• To comply with our legal obligations
• To resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain information for legal, regulatory, or legitimate business purposes.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

8.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of that information in a portable format.

8.2 Correction

You have the right to request that we correct any inaccurate or incomplete personal information. You can update your first name, last name, and profile picture directly through your account settings.

8.3 Deletion

You have the right to request the deletion of your personal information. You can delete your account through the application settings, or by contacting us directly.

8.4 Restriction and Objection

You may have the right to restrict or object to certain processing of your personal information in some circumstances.

8.5 Exercising Your Rights

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within 30 days or as required by applicable law.

9. Cookies and Tracking Technologies

Our Service uses essential cookies and similar technologies to:

• Authenticate users and maintain session security
• Remember your preferences and settings
• Ensure the proper functioning of the Service

We do not use cookies for advertising or cross-site tracking purposes.

10. Children's Privacy

Our Service is not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using our Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

12. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• No Sale of Personal Information: We do not sell personal information as defined under the CCPA.

To exercise your California privacy rights, please contact us using the information provided below.

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and similar laws:

• Legal Basis: We process your personal information based on your consent (for optional features like profile pictures) and for the performance of our contract with you (to provide the Service).
• Data Subject Rights: You have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal information.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.
• Withdrawal of Consent: Where we rely on your consent, you have the right to withdraw that consent at any time.

14. Third-Party Links

Our Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our Service.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Notify you by email (if you have provided one) or through a prominent notice on our Service
• Obtain your consent where required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

We will respond to your inquiry within 30 days or as required by applicable law.