1. Who we are
This privacy policy describes how the Fofly mobile app (iOS and Android) collects and processes your personal data. It supplements the documents that apply to the www.fofly.com website (legal notice, cookie policy).
The data controller is FOFLY SAS, with its registered office at 5, rue Giay, 13007 Marseille, France — registered under number 103 555 090 R.C.S. Marseille.
For any question about your personal data: contact@fofly.com.
2. Data we collect
Account
When you first open the app, an anonymous account is created automatically: it relies on a technical identifier we generate and requires no email address, password or name. If you later choose to link your account to an Apple or Google identity, the associated email address is then stored.
Profile and preferences
- Display name (optional)
- App language and temperature unit
- Device country/region (to adapt prices and content)
- Notification preferences
Tracked flights
When you add a flight, we store the flight details: flight number, airline, departure and arrival airports, scheduled times and aircraft type. This information is about the flight, not about your position: the app does not collect any location data.
Push notifications
If you agree to receive notifications, we store your device's technical push token (APNs on iOS, Firebase Cloud Messaging on Android), the platform and the app version. You can withdraw this consent at any time in your device or app settings.
Purchases and subscriptions
Payments are made exclusively through the App Store (Apple) or Google Play. We never collect your payment card details. Through our provider RevenueCat, we receive the information needed to manage your purchases: transaction identifier, purchased product, amount, currency, store (App Store or Google Play), country and subscription status.
Fear-of-flying questionnaire (optional)
If you choose to take the fear-of-flying assessment questionnaire, we collect, with your explicit consent: first name, last name, email address, country, sex, age range, and your answers to the questionnaire (flight history, feelings, reactions). These answers relate to your psychological state: they are used solely to build your personalized assessment, send you your results and unlock the related benefit in the app.
Usage data
We measure how the app's features are used (screens viewed, actions taken) in order to improve it. This measurement happens server-side: the app embeds no advertising SDK and no third-party tracker on your device.
3. What we do not collect
- No geolocation of your device
- No access to your contacts, photos, camera or microphone
- No payment card data (handled by Apple and Google)
- No targeted advertising: your data is never sold or rented to third parties
4. Purposes and legal bases
We process your data for the following purposes:
- Providing the service (flight tracking, weather and turbulence reports, audio content) — performance of the contract
- Managing your purchases, credits and subscriptions — performance of the contract
- Sending you notifications (finalized flight report, reminders) — consent, revocable at any time
- Building your personalized assessment through the questionnaire — explicit consent
- Improving the app and producing usage statistics — legitimate interest
- Complying with our legal obligations (accounting, fraud prevention) — legal obligation
5. Recipients and processors
Your data is processed by FOFLY SAS and by the following technical providers, acting on our behalf and strictly within the scope of their tasks:
- Supabase (database hosting and authentication)
- RevenueCat (in-app purchases and subscription management)
- Apple and Google (app distribution, payments, push notifications, maps)
- PostHog (server-side product analytics)
- Customer.io (transactional emails, only if you provided an email address)
- ElevenLabs (audio content generation)
- Aviation and weather data providers (flight status, turbulence forecasts)
- Railway and Vercel (hosting of our services)
Some of these providers are located outside the European Union (notably in the United States). The corresponding transfers are governed by appropriate safeguards, in particular the European Commission's standard contractual clauses.
6. Retention periods
- Account, profile and tracked-flight data: as long as your account is active, then deleted or anonymized when the account is deleted
- Push tokens: until consent is withdrawn or the account is deleted
- Payment data: retention periods required by our accounting and tax obligations
- Usage statistics: in aggregated or pseudonymized form, for no longer than strictly necessary
7. Your rights
Under the General Data Protection Regulation (GDPR) and French data protection law, you have the rights of access, rectification, erasure, portability, restriction and objection regarding your personal data.
You can exercise these rights directly from the app (data export and account deletion in the settings) or by writing to contact@fofly.com. We reply within one month at the latest.
If you believe your rights are not being respected, you may lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr), or with your local supervisory authority.
8. Deleting your account
You can delete your account and the associated data at any time, directly from the app or by following the steps described on the Delete your Fofly account page.
9. Security
We implement appropriate technical and organizational measures to protect your data: encryption in transit (TLS), strict access control to databases, environment isolation and data minimization.
10. Children
The app is not intended for children under 15. We do not knowingly collect data about children under 15 without the consent of a person holding parental responsibility.
11. Changes to this policy
We may update this policy to reflect changes in the app or in regulations. In the event of a substantial change, you will be informed in the app. The date of the latest update is shown at the top of this page.