Join the public beta

Privacy Policy

Last updated: September 24, 2026

1. Introduction

Flyga Labs, Inc. ("Flyga Labs, Inc.", "we", "our", or "us") provides travel organization tools that streamline trip planning by parsing travel emails, extracting itinerary data, and generating travel insights using artificial intelligence.

Your privacy is important to us. This Privacy Policy explains what data we collect, how we use and share it, and what rights you have regarding your information.

By using Flyga, you agree to the data practices described in this Privacy Policy.

2. Information We Collect

We collect several types of information when you use our service:

A. Personal Information

  • Identification Data: Your name and email address.
  • Account Information: Account verification status and authentication credentials (such as magic link tokens or passkeys).

B. Travel Information

When you forward travel confirmation emails or upload travel documents to Flyga, we may collect details such as:

  • Travel dates, destinations, and associated costs.
  • Itinerary details for flights, hotels, trains, rental cars, and activities (including booking or confirmation numbers).
  • Loyalty program or membership numbers contained in your emails.
  • Any other information included in the forwarded emails. (Note: We attempt to automatically redact highly sensitive information like passport numbers if they appear in your messages.)

C. Device & Usage Data

We automatically collect certain information about the devices and browsers you use and how you interact with Flyga, including:

  • Technical Data: IP address, device type, operating system, and browser information.
  • Usage Data: Log information (such as audit logs and security logs) and analytics data about feature usage, errors, and performance.

D. Data for AI Processing

To provide our smart itinerary parsing and recommendation features, relevant portions of your travel emails and itinerary data may be sent to trusted third-party AI service providers (for example, OpenAI’s ChatGPT and Anthropic’s Claude). This processing helps us:

  • Parse and interpret unstructured travel emails.
  • Extract travel details and organize itineraries.
  • Generate travel insights and personalized recommendations.

Any data sent to these AI processors is used only to deliver the Flyga service to you. It is not used to train public AI models, and it is handled under strict confidentiality. We may utilize the results to improve Flyga’s features (for example, by training internal models that are used privately within Flyga), but your data is not exposed for any public machine learning training.

3. How We Use Your Information

We use the collected information for the following purposes:

  • Account Provision and Maintenance: To create, administer, and support your Flyga account.
  • Service Functionality: To parse your travel emails/documents and generate itinerary summaries, travel recommendations, and other insights.
  • Product Improvement: To analyze usage and performance in order to improve Flyga’s features, algorithms, and user experience.
  • Customer Support: To assist you if you contact us with questions, issues, or feedback.
  • Security and Fraud Prevention: To monitor, investigate, and prevent any fraudulent, harmful, or unlawful activity, and to maintain the overall security of the platform.
  • Payments: To process subscription payments (we use Stripe as our payment processor, so your payment information is handled by Stripe).
  • Personalization and Analytics: To provide personalized content and features, and to conduct analytics on how our service is used.
  • Legal Compliance and Enforcement: To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal data to third parties.

4. Legal Bases for Processing (GDPR)

If you are located in regions with data protection laws (such as the European Economic Area or the UK), Flyga Labs, Inc. processes your personal data under the following legal grounds, when applicable:

  • Contractual Necessity: We process data to provide the service you have requested (for example, using your information to organize and display your travel itineraries).
  • Legitimate Interests: We may process data for our legitimate business interests, such as improving our product, ensuring security, and performing analytics – but only where those interests do not override your privacy rights.
  • Consent: In certain cases, we rely on your consent. For instance, by forwarding an email to Flyga or enabling a specific feature, you consent to our processing of the information needed to perform that service. You can withdraw consent at any time, though this may limit the features available to you.
  • Legal Obligation: We process data as required by applicable laws – for example, keeping transaction records for tax and accounting purposes.

5. Third-Party Service Providers

Flyga Labs, Inc. shares data with a limited set of third-party service providers in order to operate and support our service. These providers act on our behalf (as “data processors”) and are not permitted to use your data for their own purposes. Key service providers we use include:

  • Mailgun – for processing inbound and outbound emails (for example, when you forward travel confirmations to Flyga).
  • Cloudflare – for web infrastructure and security services, including content delivery (CDN), DNS, and protection against cyber threats.
  • OpenAI & Anthropic – for AI-based processing of travel information and generation of itinerary insights (as described above in section 2.D).
  • Stripe – for payment processing of subscriptions (handling your payment transactions securely).

We may also use reputable cloud hosting and storage providers to host our application and data (e.g., servers and databases). All such providers are bound by contractual obligations to safeguard your data and only process it for the purposes we specify.

6. Data Sharing and Disclosure

We do not sell or rent your personal information. We only share your data in the following circumstances:

  • With Service Providers: We share information with the third-party providers listed above and similar partners as necessary to run Flyga (under the obligations described in Section 5).
  • For Legal Reasons: If required to comply with a law, regulation, legal process, or governmental request (for example, a court order or subpoena), we may disclose necessary data.
  • To Protect Rights and Safety: We may share information when we believe it’s necessary to protect the rights, property, or safety of Flyga Labs, Inc., our users, or the public. This includes sharing information to detect and prevent fraud or security vulnerabilities.
  • With Your Consent or at Your Direction: We will share your information with third parties if you specifically request or consent to such sharing. For instance, if you use a feature that integrates with an airline or hotel system and it requires sending certain data to that third party, we will do so only with your authorization.

Aside from the cases above, we will not share your personal information with third parties (including airlines, hotels, or other travel companies) without your explicit consent.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, or as required by law. In general:

  • Account Data: Information you provide when registering and using Flyga (like your name, email, and saved itineraries) is kept for as long as your account is active. If you delete your account or it remains inactive for a prolonged period, we will delete or anonymize this data, subject to the exceptions below.
  • Forwarded Emails: Travel confirmation emails that you forward into Flyga are stored so that we can provide the service. If you delete a trip or itinerary from your account, we will disassociate those forwarded emails from your account (meaning they are no longer linked to you personally). We may retain the email data in a backup or archive for a period of time, but it will not be identifiable to you.
  • Extracted Itinerary Data: Award redemptions you record (routes, dates, programs, point amounts, and fares) may be retained in an anonymized form after you delete your account. Confirmation numbers, booking references, provider payloads, and free-text notes are removed. This anonymized data helps us produce statistics and improve the service.
  • Logs: System logs, security logs, and similar records are retained as long as necessary to fulfill security and compliance needs. Logs that identify you by email address are deleted when you delete your account.
  • Deleted Accounts: You can delete your account from the privacy settings in the app, or by emailing us. Deletion closes sign-in permanently. We delete personal identifiers and credentials (name, email, password, passkeys, sessions, login codes, connected-account tokens, and API keys), wallet contents (cards, balances, and benefit claims), feedback stored in Flyga, calculator comparisons, scratchpad trips, and free-text notes. We keep an anonymized account shell with no name or email so redemptions and point transfers can stay grouped for statistics without identifying you. Security logs keyed by your email address are deleted. Copies of feedback you sent may remain in our issue tracker. Residual copies may remain in encrypted backups until those backups age out. We may also retain records we are required to keep for legal, tax, or accounting reasons. Any retained data stays subject to this Privacy Policy.

8. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data. For example, users in the European Union, United Kingdom, or California have rights which may include:

  • Access and portability: Download a copy of your personal data from the privacy settings in the app, or email us and we will provide it.
  • Correction: The right to ask us to correct or update any inaccurate or incomplete personal information.
  • Deletion: Delete your account from those same settings, or email us. We remove or anonymize personal data as described in this Policy. Anonymized redemption and transfer records are kept for statistics.
  • Opt-Out of Sale: The right to opt out of the “sale” of your personal information. (Note: Flyga does not sell personal data, so this right is provided for completeness.)
  • Objection/Restriction: The right to object to certain processing or ask us to restrict processing of your data in some circumstances – for instance, opting out of certain analytics or marketing communications.
  • Non-Discrimination: Flyga Labs, Inc. will not discriminate against you for exercising any of these rights. We will not deny you service, charge you different prices, or provide a different level of quality because you exercised your privacy rights.

To exercise any of your rights, please contact us at [email protected]. We will respond to legitimate requests within the timeframe required by law. Please note we may need to verify your identity (for your security) before acting on a data request.

9. Children’s Privacy

Flyga is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use the Service or submit any personal information to us. If a parent or guardian becomes aware that a minor has provided us with personal data, please contact us immediately so we can delete that information.

10. Data Security

We take the security of your information seriously and implement a variety of technical and organizational measures to protect it. These include:

  • Encryption: Data is encrypted both in transit (e.g., when data is sent between your device and our servers) and at rest (when stored in our databases), to prevent unauthorized access.
  • Sensitive Data Handling: We automatically detect and redact certain sensitive identifiers (for example, if a passport number is detected in an email, our system will attempt to remove or mask it). We also avoid storing highly sensitive data such as passport numbers or full credit card numbers in our systems.
  • Access Controls: We limit access to personal data to authorized personnel who need it to operate our service. Internal access to data is protected by role-based controls and is logged for security auditing.
  • Network Security: We use firewalls, intrusion detection systems, and services like Cloudflare’s security features to protect our website and databases from malicious attacks. Our infrastructure is configured following industry best practices for security.
  • Monitoring and Auditing: We maintain audit logs of system activity and regularly monitor for any suspicious behavior or vulnerabilities. We also periodically review our security measures and update them as needed.

While we strive to protect your personal information, please note that no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security. You use the Flyga service and provide personal data at your own risk, and you should also take steps to secure your own account (such as keeping your login credentials confidential).

11. Beta Status and AI Notice

Beta Service: Flyga is currently offered as a public beta. This means the service is still in development and testing. Features may change, be added or removed, and you may encounter occasional bugs or downtime. We will do our best to maintain reliability, but some issues are expected during this phase.

AI-Generated Content: Some Flyga features use artificial intelligence to provide travel suggestions and insights. AI-generated recommendations may be incomplete, inaccurate, or outdated. Always verify important travel details independently (for example, check your flight status with the airline, confirm hotel check-in times, etc.). Flyga is not liable for any decisions you make based solely on AI-provided content, as further explained in our Terms of Service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by email or via a prominent notice within the app or on our website. Please review this Policy periodically to stay informed about how we are protecting your information. The “Last Updated” date at the top indicates when the latest changes were made.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at [email protected]. We will do our best to address your inquiry promptly.