DRAFT for legal review, not yet in force. Not legal advice. Version 0.1, 2026-10-28. Written by the founder's team in plain English for a privacy lawyer to review before launch. Anything marked "(check)" could not be confirmed in Flewaway's code or from a provider's current terms, and must be confirmed before this goes live.

Flewaway privacy policy

Flewaway is a travel app. It helps you plan budget trips, keep a travel journal, track your spending and pack, with an AI helper called Flew AI.

This policy explains what Flewaway collects about you, why, who else handles it, where it's kept, for how long, and what you can do about it. We've tried to write it the way we'd explain it to a friend. If anything is unclear, ask us (section 16).

The short version

• You need an account to keep anything in Flewaway. An account needs only an email address (or your Google sign-in).
• Your trips, journal, photos, spending and notes are yours. We keep them so you can use Flewaway on any device, and we don't sell them, show you ads or use them for advertising.
• Flew AI is run by Anthropic. When you use it, the parts of your trip and what Flewaway knows about you that a message needs are sent to Anthropic to get an answer.
• We count how Flewaway is used, anonymously: no name, no account, no device ID and no IP address is stored with those counts. If your browser sends Global Privacy Control or Do Not Track, we don't count you at all.
• No advertising or tracking cookies, and no third-party analytics.
• Your data is stored by Cloudflare, which may keep it in Australia, the EU, the US or other countries where it runs.
• You can download everything, correct it, or delete your account at any time from the app.

1. Who runs Flewaway

Flewaway is run by [Operator legal name] (ABN [ABN]), of [postal address], Australia. In this policy, "Flewaway", "we" and "us" mean that operator. "You" means the person using Flewaway.

For privacy questions or requests, email [contact email].

We are the "APP entity" for Australia's Privacy Act 1988, the "agency" for New Zealand's Privacy Act 2020, and the "controller" for the EU and UK General Data Protection Regulation (GDPR) where those laws apply to you.

2. Who Flewaway is for

Flewaway is for people 16 and over. We don't knowingly collect personal information from anyone under 16. If you're under 16, please don't create an account. If we learn that an account belongs to someone under 16, we'll delete it and its data.

When you set up your travel profile, Flewaway asks whether you're 16 or 17, or 18 or over. We use the answer only to make sure Flewaway never suggests bars, nightlife or drinking to someone under 18.

Families are welcome: an adult uses Flewaway, and children can be part of the trip they plan (for example, "two adults and kids aged 6 and 9"). See section 3.4 about information you give us about other people.

3. What we collect

3.1 Your account

We don't use passwords. We email you a 6-digit sign-in code instead (it works once and expires after 15 minutes; we store it only in scrambled, hashed form), or you sign in with Google. If you sign in with Google, the sign-in library we use also stores the access tokens Google gives us for your account (check: whether these can be discarded, since Flewaway doesn't use them after sign-in). Flewaway doesn't ask Google for anything beyond your name, email address and picture.

When you ask Flewaway for a place it doesn't have yet, it builds that place from open data and keeps it for every traveller. The place itself says nothing about you: Flewaway doesn't record who asked for it.

We don't collect payment details. Flew Pass isn't on sale yet. When it is, payments will be handled by a payment provider, and we'll update this policy before then.

3.2 Your trips and everything in them

This is the information you put into Flewaway. We keep it so it's safe if you lose your phone and so it's the same on every device you sign in on.

• Trips and plans: where you're going, your dates, budget, travel style, the places and stops on each day, how you'll get between places, where you're staying (names, nights, prices, booking references and addresses you choose to enter), saved spots, and your own notes on stops, days and places.
• Journal (Moments): the title, story, time and place of each Moment, the weather at that time, and which stops you've marked as visited. A Moment's place is where your phone says you are (only if you allow location access in your browser) or a spot you pick on the map. That can be a precise location.
• Photos: photos you add to Moments, trip cover photos and receipt photos. Before a photo is saved, Flewaway resizes it and re-saves it, which removes its hidden details (metadata), including any GPS location stored in the photo.
• Money: what you spent, in what currency, on what, on which day, how you paid (a label such as "cash" or "card", never a card number), the names of the people you're splitting costs with, who owes whom, and payments between you.
• Packing lists, check-ins and "Before you go": your lists, the reminders you've set, and which notices you've dismissed.
• Your places: countries (and for the USA, Canada and Australia, states) you've been to, and your home town if you choose one (a city, or a country's centre).
• Reviews: reviews you write stay on your device only. They aren't uploaded or shown to anyone else.

3.3 Your travel profile (some of it may be sensitive)

Flewaway can ask you some questions to get to know how you travel: your age band (16–17 or 18+), who you usually travel with, how adventurous you are, your pace, things you love or want to try, things to avoid, food needs, access needs, your home airport, the names (never numbers) of airline and hotel programmes you belong to, which passports you travel on, how you like to see sights, and anything else you choose to tell it.

Some of this can be sensitive information under Australian law, or "special category" data under the GDPR: for example, a food need can reveal a health condition (coeliac disease) or a religious belief (halal, kosher), and access needs can reveal health information. Which passports you hold can reveal your nationality.

• We only collect your profile with your consent, which Flewaway asks for before the first question.
• Every question is optional except your age band. Share only what you're comfortable with.
• You can read, change or delete your profile at any time (You → Your travel profile).
• We use it only to plan trips that suit you and to answer you better. We never use it for advertising.

3.4 Information about other people

Some things you enter are about other people: travel companions' names (in Money), children's ages (when planning), people who appear in your photos, or people you mention in a Moment or a chat.

Please only add what you need, and only where you have a good reason to. We use it only to provide Flewaway to you. We don't contact those people or build profiles about them.

3.5 Flew AI

Flew AI is a chat helper that can plan trips and change things in the app for you.

• Chats: your messages and Flew AI's replies are saved to your account, so you can come back to them. You can delete any chat, or set Flewaway to delete chats after 30 or 90 days (Flew AI → Settings).
• Private chats: a private chat isn't saved anywhere by Flewaway and keeps nothing once you leave it. It still has to be sent to Anthropic to get an answer (section 6).
• What Flewaway knows: if you allow it, Flew AI remembers lasting things you tell it ("I'm vegetarian") and keeps files about you and your trips (About you, Travel style, Money habits, People you travel with, a file per trip, and notes). Each entry shows when and where it came from. You can switch remembering off, edit or delete any entry, or use "Forget everything". Flewaway never remembers anything from a private chat.
• Photos and screenshots in a chat (Flew Pass): Flewaway resizes the photo and removes its metadata on your device, sends it with that one message to Anthropic to be read (for example, a receipt becomes a spend), and doesn't store it. A small thumbnail stays in the chat so you can see what you sent (check: whether that thumbnail is saved to your account with the chat). Flew AI is told never to repeat or keep card, passport or ID numbers it sees.
• Files you bring in (Flew Pass): PDFs, spreadsheets and several photos at once. Spreadsheets are turned into text on your device. The files go through Flewaway's server to Anthropic once to be read, and neither Flewaway nor the chat stores them; only their names stay in the chat. You see what was read and choose whether to add it. What you add (for example a stay's name, address, dates, guests and booking reference, or a flight's number and times) is then kept like anything else on your trip. If a file names a town Flewaway doesn't have yet, Flewaway may add that town for all travellers, without saying who asked. If it names somewhere Flewaway doesn't cover, an anonymous count of that place is kept. Flew AI is told never to copy card, passport or ID numbers, and Flewaway removes long runs of digits from what's kept.
• Your settings for Flew AI (for example, Thorough answers, show thinking, looking things up online).

3.6 What stays only on your device

Some things never leave the device you used:

• Reviews you write (until we have moderation).
• A trial plan made before you have an account. It stays on your device, and a new trial replaces it. If you create an account or sign in on that device, it's saved to your account like any other trip.
• Light or dark mode, and caches Flewaway keeps so it works offline (places, exchange rates, the app's own files).
• Trail recordings. Earlier versions of Flewaway could record your route while the app was open ("Trail"). Trail is switched off: Flewaway doesn't record your route. If you made Trail recordings before, they stay on the device where they were made. They are never uploaded or synced. They're included in a backup or "Download my data" file made on that device (section 3.10).

Signed in, Flewaway also keeps a copy of your data on your device so it works offline. "Sign out" lets you keep or remove that copy.

3.7 Anonymous usage and demand counts

To learn which parts of Flewaway are used and which places people want next, your device sends us small, anonymous counts, in batches:

• What's counted: a fixed list of events, such as "a trip was created", "a stop was added", "a place guide was opened", "a Flew AI ability was used", "a backup was made", "someone signed in" or "an account was deleted", each with a Flewaway ID for the place or feature (for example, rome or add_stop), never free text from you.
• Demand: when someone looks for a place Flewaway doesn't cover yet, we count the place's ID or the search itself (a short search of up to three plain words that found nothing).
• What's not stored: no name, no account, no device ID, no cookie, and no IP address. The counts are added up per day: we can see "40 people opened the Colosseum guide on 3 May", not who.
• Opting out: if your browser sends Global Privacy Control or Do Not Track, your device sends nothing at all.

Like any request on the internet, these reach Cloudflare from your IP address. We don't store it with the counts (see section 3.9 about Cloudflare's logs).

3.8 "Was this right?" and "Report a problem"

You can tell us if something in Flewaway is wrong: a thumbs up or down on a "Before you go" notice, or "Report a problem" on a place (closed, wrong price, wrong hours, wrong photo, other), with an optional short note.

• These are anonymous: no name, no account, no device and no IP address is stored with them.
• Before a note is saved, Flewaway removes anything that looks like an email address or phone number. Please don't put personal details in a note anyway.
• We keep reports to check and fix Flewaway's information (we review them weekly).

3.9 Server logs, security and rate limits

When your device talks to Flewaway's server, Cloudflare (our host) handles the request. To keep Flewaway working and secure:

• Rate limits: Flewaway's AI and feedback features limit how many requests can come from one IP address (and, once you're signed in, one account) each minute, to stop abuse and runaway costs. The IP address is used as a short-lived counter by Cloudflare; Flewaway doesn't store it.
• Logs: Flewaway's server writes short technical logs (for example, "an AI answer cost US$0.01" or "a request failed"). We don't write your messages, trip details or photos to these logs. Cloudflare's own request logs may include your IP address, the web address requested (for a place search, that includes what you typed), the time and your browser type (check). They're kept for a few days (check: Cloudflare's retention on our plan).
• Cost records: we keep a daily total of what Flew AI costs, by feature and model, with no person attached.

3.10 Backups and "Download my data"

You can save a backup of everything Flewaway keeps on your device, or download everything in your account, as one file (Flewaway can include your photos too). The file is saved wherever you choose (your phone's files, email, a cloud drive). Once it's saved, it's in your hands: keep it safe, because it shows where you've been, your photos and your spending. We don't keep a copy of the file.

3.11 Cookies and storage on your device

• Cookies: Flewaway uses only the cookies needed to keep you signed in and to make sign-in secure (better-auth.session_token, which keeps you signed in for up to 60 days, and better-auth.session_data, a signed copy of your session that lasts 5 minutes so Flewaway doesn't check its database on every request; plus short-lived cookies used during Google sign-in (check)). No advertising cookies, no tracking cookies, no third-party analytics. Cloudflare may set its own security cookies (check).
• Storage on your device: Flewaway saves your data in your browser's storage (local storage and IndexedDB) so it works offline and loads quickly. A service worker saves Flewaway's screens and files on your device so they open with no connection. It doesn't save your account data on our servers, and it never stores pages from other sites.

3.12 What we don't collect

• We don't collect payment card details (Flew Pass isn't on sale yet).
• We don't record your route in the background.
• We don't read your contacts, calendar, other apps or photos you haven't chosen to add.
• We don't buy information about you from anyone.

4. Why we use it (and our legal bases)

The GDPR asks us to name a "legal basis" for each use. Australian and New Zealand law ask that we use information for the purpose we collected it for, or a related purpose you'd reasonably expect.

We don't:

• sell or rent your personal information
• show ads or use your information for advertising
• send you marketing emails (if we ever want to, we'll ask first and let you unsubscribe at any time)
• use your information to train AI models (ours or anyone else's; see section 6 about Anthropic)
• make decisions about you by automated means that have legal or similarly significant effects. Flew AI suggests plans, and you decide.

Where we rely on consent, you can withdraw it at any time (section 11). That doesn't affect what we did before you withdrew it.

5. Who else handles your information

We use a few other companies to run Flewaway. Some act for us ("processors" or "service providers"); others are separate services that your browser contacts directly or that you choose to visit.

5.1 Companies that process information for us

More about Flew AI and Anthropic.

• What's sent: your messages in the chat, a plain-words summary of the trip and screen you're on, the parts of your travel profile and What Flewaway knows that help answer (for example, your food needs when it plans meals), the titles of your What Flewaway knows files (and a file's words if Flew AI opens it), and a photo if you attach one. For web searches, the city and country of your trip (not your own location) is sent so results are local.
• Looking things up online (Flew Pass, can be switched off in Settings): Anthropic searches the web and reads pages for Flew AI. Search words come from your question (check: which search provider Anthropic uses, and what it receives). Flew AI never searches or reads TripAdvisor, AllTrails or Google. Sources are shown under the answer.
• What's not sent: your account email, your name, your Google details, or anything from other trips that the message doesn't need.
• Demo mode: if live AI is off, Flew AI's answers are worked out on Flewaway's server or your device, and nothing goes to Anthropic.

5.2 Services your device contacts directly

These services don't receive your account details, but your browser connects to them, so they see your IP address and browser details, like any website you visit:

5.3 Services Flewaway's server contacts on your behalf

5.4 Links to partners and other sites

Flewaway shows links to tours, tickets and official sites (for example Viator, GetYourGuide, Ticketmaster, museums' own websites, government entry pages). When you tap one, you leave Flewaway. That site's own terms and privacy policy apply, and it may set its own cookies. Flewaway doesn't pass your personal information to it. Some links may earn Flewaway a commission in future, and they're labelled when they do.

5.5 Other times we might share information

• If the law requires it, or a court, regulator or law-enforcement agency lawfully asks. Where we can, we'll tell you first.
• To protect people: if we believe it's needed to prevent a serious threat to someone's life, health or safety.
• If Flewaway is sold or changes hands: your information may pass to the new owner, who must keep to this policy or tell you what changes.

6. Flew AI: things to know

• AI can be wrong. Flew AI's plans, prices, opening hours and facts can be out of date or mistaken. Check anything important (prices, opening times, safety, visas, health) with an official source before you rely on it. See the terms of use.
• What's sent to the AI is described in section 5.1. Flewaway sends only what a request needs.
• Photos are read once and not stored by Flewaway (section 3.5).
• Private chats are not saved by Flewaway, but they're still sent to Anthropic to get an answer.
• No training: Flewaway doesn't train AI models, and Anthropic doesn't use what Flewaway sends it to train its models under its commercial terms (check).
• Flew AI never books or pays for anything.

7. Where your information is stored (overseas)

Flewaway is run from Australia, but your information is stored and processed by Cloudflare in whichever of its locations it chooses. That includes Australia, the European Union, the United States and other countries where Cloudflare runs data centres.

• Your own data is kept in a small database for each person, usually created near where you first sign in and kept there (for example, someone who signs up in Sydney will usually have their data in or near Australia). Copies may pass through other Cloudflare locations while you use Flewaway.
• Our account database (your email, sign-in details, Flew Pass and AI allowance) is in Cloudflare's Oceania region, in or near Australia.
• Anthropic processes Flew AI requests in the US (check). Resend sends emails from the US (check).

For Australians: under Australian Privacy Principle 8, we take reasonable steps to make sure overseas recipients handle your information in line with the Australian Privacy Principles, through our contracts with them. You should know that some of these countries' privacy laws differ from Australia's (check: the lawyer's view on the wording and whether consent is needed).

For New Zealanders: under Information Privacy Principle 12, we only send your information overseas to providers bound to protect it in ways comparable to New Zealand law (check).

For people in the EU, the UK and Switzerland: when your information goes to a country without an "adequacy" decision, we rely on the European Commission's standard contractual clauses (and the UK and Swiss equivalents) in our providers' data processing agreements, such as Cloudflare's data processing addendum (check: Anthropic's and Resend's). You can ask us for a copy (section 16).

8. How long we keep it

When the law requires us to keep something longer (for example, payment records for tax, once Flew Pass is on sale), we keep only that, only for as long as required.

9. How we protect it

• Everything travels encrypted (HTTPS), and Cloudflare encrypts stored data.
• Each person's data is kept in their own database, and every request checks that the signed-in person owns the data it asks for.
• Photos are private: they're only served through Flewaway's server to their owner, never by public links.
• No passwords to leak: sign-in codes are single-use, expire in 15 minutes, allow only 5 tries and are stored hashed, and you can sign out of every device at once.
• Photos have their metadata (including GPS) removed before they're saved or sent to the AI.
• We collect as little as we can, and we don't put third-party scripts on Flewaway's pages.
• Only the operator can access the systems that hold your data, and only to run Flewaway, fix problems or meet a legal obligation.

No system is perfectly secure. If you think your account has been misused, sign out everywhere and tell us (section 16).

Data breaches. If a data breach is likely to cause serious harm to anyone, we'll tell the people affected and the regulator, as the law requires: in Australia under the Notifiable Data Breaches scheme (the Office of the Australian Information Commissioner), in New Zealand the Privacy Commissioner (as soon as practicable), and where the GDPR applies, the relevant supervisory authority within 72 hours where required (check: which schemes apply to Flewaway, see the lawyer questions).

10. Your choices in the app

11. Your rights

Depending on where you live, you have some or all of these rights. You can use most of them yourself in the app (section 10). For anything else, email [contact email].

• Access: ask what we hold about you, and get a copy ("Download my data" gives you everything in your account as a file you can open on any computer or bring to another service).
• Correction: fix anything that's wrong.
• Deletion: delete anything, or your whole account.
• Objection and restriction (GDPR): object to uses based on legitimate interests, or ask us to limit how we use your information while a concern is sorted out.
• Portability (GDPR): get your information in a common, machine-readable format (Download my data is a JSON file).
• Withdraw consent: for your travel profile or What Flewaway knows, delete them or switch remembering off. Withdrawing consent doesn't affect what happened before.
• Anonymity (Australia): you can look around Flewaway without an account. To keep anything, you need an account with an email address, because that's how we keep your data safe and yours.

We'll answer within 30 days (one month under the GDPR), and tell you if we need longer and why. It's free. We may need to confirm it's you, usually by asking you to email us from your account's address or to sign in. If we can't do what you ask, we'll tell you why.

Complaints. Please contact us first, and we'll try to fix it. If you're not happy with our answer, you can complain to:

• Australia: the Office of the Australian Information Commissioner (oaic.gov.au)
• New Zealand: the Office of the Privacy Commissioner (privacy.org.nz)
• The EU: the data protection authority where you live or work, or where the problem happened
• The UK: the Information Commissioner's Office (ico.org.uk)
• Switzerland: the Federal Data Protection and Information Commissioner (check whether this applies)

12. Children

Flewaway isn't for anyone under 16 (section 2). If you're a parent or guardian and believe a child under 16 has an account, email us and we'll delete it.

People aged 16 and 17 can use Flewaway. Flew AI won't suggest bars, nightlife or drinking to them. [How Flew Pass purchases by 16 and 17 year olds will work is to be decided before Flew Pass goes on sale.]

13. If you're in the EU, UK or Switzerland

• The controller is the operator named in section 1.
• [EU representative: name and contact, if one is needed (see the lawyer questions).]
• [UK representative: name and contact, if one is needed.]
• Your rights are in section 11, and transfers out of your country are in section 7.

14. Changes to this policy

We'll update this policy when Flewaway changes (for example, before Flew Pass goes on sale or when sharing trips with friends arrives). The date at the top shows the latest version. If a change matters (a new kind of information, a new purpose, or a new company receiving it), we'll tell you in the app, and by email where appropriate, before it applies. Where a change needs your consent, we'll ask for it.

15. Things Flewaway may add later

So you're not surprised: we're planning features that may change what's collected, such as sharing a trip or journal with others, following friends, travelling together (shared trips), selling Flew Pass, and booking partners' tours from inside Flewaway. We'll update this policy, and ask for consent where needed, before any of them goes live.

16. Contact us

[Operator legal name] Email: [contact email] Post: [postal address]