Privacy Policy

Last updated: May 10, 2026

Overview

FlyFren is built by pilots, for pilots. We collect the minimum information needed to run the Services and we do not sell your personal information. This Policy explains what we collect, why, and how to exercise your rights. It applies to flyfren.com, app.flyfren.com, and the FlyFren mobile app.

1. Information We Collect

We collect three categories of information:

  • Information you give us: name, email, password (hashed), pilot ratings, home airport, aircraft details, flight log entries, photos, and any messages you send us.
  • Information from your use of the Services: pages visited, features used, device and browser type, approximate location derived from IP (IP itself is anonymized before storage), and crash diagnostics.
  • Information from third parties: if you sign in via Google or another provider, we receive the basic profile data you authorize. Payment information is handled by Stripe and never stored on FlyFren servers.

2. How We Use Information

  • To provide, maintain, and improve the Services;
  • To authenticate users and prevent abuse;
  • To send transactional emails (account, billing, security alerts) and, if you opt in, product updates;
  • To analyze aggregate product usage so we can prioritize what to build next;
  • To comply with legal obligations.

We do not use your flight logs, photos, or personal messages to train third-party AI models. AI features that operate on Your Content (for example, paper-logbook scanning or planning suggestions) are scoped to your session and are not used to improve external models without explicit consent.

3. Analytics and Cookies

We use first-party analytics (PostHog, hosted in the United States) to understand aggregate product usage. PostHog is configured with anonymous IPs and identified-only profiles, meaning we do not build behavioral profiles for non-logged-in visitors. We use a small number of essential cookies to keep you signed in and remember your preferences. We do not run third-party advertising or tracking pixels.

4. Sharing

We share information only with service providers that help us run the Services (such as Supabase for the database, Cloudflare for storage and CDN, Stripe for payments, Resend for email, and PostHog for analytics). These providers are bound by contractual obligations to use the data only on our behalf. We may disclose information when required by law or to protect the rights and safety of FlyFren or others. We do not sell personal information.

5. Your Rights (US / CCPA)

If you live in California or another US state with a comprehensive privacy law, you have the right to:

  • Request a copy of the personal information we hold about you;
  • Request correction of inaccurate information;
  • Request deletion of your account and associated data;
  • Opt out of the sale or sharing of personal information (note: FlyFren does not sell or share for cross-context behavioral advertising);
  • Be free from retaliation for exercising any of these rights.

To exercise these rights, email hello@flyfren.com from the address on your account, or use the export and delete tools in your account settings.

6. Data Retention

We keep your account data while your account is active. When you delete your account, we soft-delete it for 30 days so you can recover it if you change your mind, then permanently remove the data. Some records (such as billing receipts) are retained longer to comply with tax and legal obligations.

7. Security

We use industry-standard practices to protect your data: TLS in transit, encryption at rest, row-level access control, and EXIF stripping on uploaded photos. No system is perfectly secure, but we make a good-faith effort and will notify affected users in the event of a breach.

8. Children

FlyFren is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact hello@flyfren.com and we will delete it.

9. International Users

FlyFren is operated from the United States and the data we process is stored in the US. The Services are designed for US-airspace pilots and may not be appropriate for users outside the United States. If you use the Services from outside the US, you consent to the transfer of your information to the US.

10. Changes

We may update this Policy. Material changes will be posted here with a new "Last updated" date and, where appropriate, communicated by email.

11. Contact

Questions or privacy requests? Email hello@flyfren.com.