Privacy
Updated Oct 24, 2026
The Unflown web app today
The app reads and writes only the signed-in person's own Google data, in their own Google account. It doesn't store that data anywhere else, and it doesn't share or sell it.
The rest of this page covers the new version of Unflown.
The new Unflown, in early access
This policy explains what Unflown ("Unflown", "we", "us") collects, why, who we share it with, how long we keep it, and the choices you have. It covers our website, the Unflown apps, the emails you forward to us and the emails we send you (together, the "service"). The short version: we use your booking details to watch fares, make the claims you've authorized and remind you about credits. We never ask for airline or hotel passwords, and we never sell your data or use it for ads.
This policy is part of our terms. Words defined there mean the same here.
What we collect
What you give us, or ask us to collect for you:
| What | Why |
|---|---|
| Your first and last name, as on your bookings, and the email address you sign in with | Your account, sign-in, and messages about your credits and claims |
| Your date of birth, and the email address your airline bookings go to | Making claims, since airlines use these to find and verify a booking |
| Your time zone | Sending reminders at a sensible hour |
| Your agent authorization, your acceptance of our terms and your confirmation that you're 18 or older: what you agreed to, which version, when, the IP address and browser you used, and when you withdrew it | Proving to you and to airlines that you asked us to act, and keeping a record of our agreement |
| The emails you forward to trips@getunflown.com, including their attachments, the address they came from and their subject | Finding the booking or credit in them, and filing them in the right wallet |
| Other email addresses you add to forward from | Knowing that what they forward is yours |
| Booking details: confirmation codes, airline, flights, dates, routes, fares paid, who's on the booking and the email on the reservation, plus ticket and loyalty numbers when they're in what you forward or you add them | Watching the fare and making claims |
| Other travelers' names and, for claims, their dates of birth | Making claims on bookings they're on |
| Credits, gift cards and certificates: brand, code, amount, expiry, whose it is, and whether it's been used | Your wallet and reminders |
| Fare checks and claims: the fares we see, messages with airlines and their replies, and what each claim got | Making the claim, showing you what happened, and resolving problems |
| Payment details | Charging fees. Your card number goes straight to our payment processor; we keep only the card brand, the last four digits and the expiry |
| Fees and billing: amounts, dates, your billing choice and receipts | Billing, tax and accounting records |
| Your household: who's in the wallet, their roles, and the changes each person makes | Sharing your wallet and showing who changed what |
| Messages you send us, such as support requests and feedback | Answering you and improving the service |
| If you request an invite on our website: your email address, when you asked, and your IP address | Sending you an invite, and stopping abuse of the form |
| If you sign in with a code: your email address, when you asked and your IP address | Signing you in securely, and stopping abuse |
What we collect automatically when you use the service: your IP address, browser and device type, app version, time zone, the pages and features you use, and error reports. We use these to keep the service working and secure, to prevent fraud and abuse, and to fix problems. If you allow notifications on your phone, we keep a device token so we can send them.
What we get from others: your name, email address and whether it's verified from Google or Apple when you sign in with them; replies and credit details from airlines about claims you've authorized; payment status from our payment processor; and information a household member adds to a wallet you share. We don't buy data about you.
We never collect airline or hotel passwords, and we never sign in to your loyalty accounts. We don't ask for government ID numbers such as passport or Social Security numbers; please don't forward emails or add notes that contain them.
Information about other people
Bookings often include other travelers, and you may forward emails that mention them or invite people to your household. When you give us someone else's information, you confirm that you're allowed to share it with us for the purposes in this policy, and that you've told them about it where the law requires. For a child, you confirm that you're their parent or guardian or have their parent's permission. We use other travelers' information only to provide the service to you, to your household and to them, such as making a claim on a booking they're on.
People in your household can see a traveler's name in the wallet, but not a date of birth or reservation email once it's saved. Those are used only for claims.
Your email and forwarded emails
- We don't access your inbox. You add bookings by forwarding the airline's confirmation email to trips@getunflown.com, by hand or with a rule in your email. We receive only what's sent to that address.
- How we file them. We file an email in your wallet only when we can tell it's yours. Email we can't match to anyone is sent back, and we don't keep it.
- Forwarding confirmations. When you set up automatic forwarding, your email provider may send us a confirmation, which we use only to finish setting it up.
- Who sees them. We read each forwarded email only to enter what it contains. People in your household can see the emails forwarded to your shared wallet.
- How long we keep them. We delete the full email, with its attachments, once it's been entered or set aside, and no later than 30 days after it arrived. A short record of it stays in your wallet.
- Signing in. If you sign in with Google or Apple, we receive only your name, your email address (with Apple, possibly a private relay address) and whether it's verified. We don't get access to your email, contacts or files.
- Unflown's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we use it
- To run the service: keep your wallet, enter what you forward, watch fares, make the claims you've authorized, and send reminders and updates.
- To charge fees, send receipts, and keep billing, tax and accounting records.
- To communicate with you about your account, your claims, changes to the service or these policies, and support requests. These service messages aren't marketing, so they continue while your account is open.
- To keep the service safe: verify who sent an email, sign you in, prevent fraud, spam and abuse, and enforce our terms.
- To understand and improve the service. Where we can, we use information that's been combined or stripped of anything that identifies you.
- To comply with the law, respond to lawful requests, and establish, exercise or defend legal claims.
- For anything else, only with your permission.
We don't use your data to show you ads, and we don't build profiles of you to sell or to target you elsewhere. We may occasionally email account holders news about Unflown, and you can unsubscribe at any time. If you only asked for an invite, we use your email address for the invite and nothing else. We don't use automated decisions that have legal or similarly significant effects on you.
Who we share it with
- The airline on your booking, when we make a claim you've authorized: the details it needs to find and verify the booking, such as the passengers' names and dates of birth and the email on the reservation. Once the airline has them, its own privacy policy applies.
- Service providers who run parts of Unflown for us, such as hosting, email, sign-in, payments, support and security. They may use your data only to provide their service to us, under contracts that require them to protect it.
- Our payment processor, which receives your card details directly from you, plus your name, email address and the fees we charge, and handles them under its own privacy policy, including to prevent fraud.
- People in your household, who can see and, depending on their role, change the credits, flights and emails in the wallet you share. Whoever forwards an email to a shared wallet shares it with that household.
- Professional advisors, such as lawyers, accountants and auditors, under a duty of confidentiality.
- When the law requires it, or when we believe in good faith that it's needed to respond to a court order, subpoena or lawful government request, to enforce our terms, or to protect the rights, property or safety of you, other people or Unflown, including against fraud.
- If Unflown is sold, merged or reorganized, or its assets are transferred, including in a financing or in bankruptcy, to the new owner or its advisors, who must handle your data in line with this policy or tell you before changing how it's used.
- With your permission, or at your direction.
We may share information that's been combined or stripped of anything that identifies you, and we won't try to re-identify it. We don't sell your personal information or share it for cross-context behavioral advertising, and we don't use it to show you ads.
Cookies, this website and GPC
Our website uses no cookies of its own, no analytics and no advertising trackers. It loads its fonts from a third-party font service, which receives your IP address to send them, and our hosting provider keeps standard logs of visits. In the app, we use your browser's or phone's storage to keep you signed in, remember your settings, open your wallet quickly and protect the service. You can clear cookies and site data in your browser at any time, though you'll be signed out. Because we don't sell or share personal information, we have nothing to stop when your browser sends a Do Not Track or Global Privacy Control signal; we treat a Global Privacy Control signal as a request to opt out where the law gives you that right.
How long we keep it
| What | How long |
|---|---|
| Your name, sign-in email and time zone | While your account is open. Erased when you close it |
| Your date of birth and booking email | While your account is open. Deleted within 30 days of closing it |
| Your wallet: credits, flights, bookings, travelers, settings and history | While the wallet exists. If you're the last person in it when you close your account, it's erased then. A wallet you share stays with the rest of your household |
| Items you delete from your wallet | Removed from view at once. A record of them stays in your wallet's history until the wallet is erased |
| Forwarded emails, with their attachments | Until they've been entered or set aside, and no more than 30 days after they arrive. A short record (sender, subject, date, what was done) stays with your wallet |
| Emails we can't match to anyone | Not kept: they're sent back |
| Email addresses you add to forward from | Until you remove them or close your account |
| Agent authorizations and acceptance of our terms | For as long as a claim about our work for you could be brought, and at least as long as the law requires, including after you close your account |
| Fees, receipts and billing records | As long as tax and accounting laws require, generally seven years |
| Your card's brand, last four digits and expiry | Until you remove the card or close your account. Our payment processor keeps its own records under its own policy |
| Invite requests | Until you ask us to remove yours, or we no longer need it for invitations |
| Sign-in code requests, logs and device information | For a limited time, as long as we need them to protect accounts and prevent abuse |
| Support messages | As long as we need them to help you and keep a record of what we did |
| Information that's been combined or stripped of anything that identifies you | Without limit |
Copies in our backups are overwritten within a further 90 days, and aren't used in the meantime except to restore the service. We may keep something longer when the law requires it, or to resolve a dispute, prevent fraud or enforce our terms, and only for as long as that need lasts. To have an invite request removed, email privacy@getunflown.com.
Security
We protect your data with encryption and limit who can see it to the people who need to, to run the service, answer you or look into a problem. No method of storing or sending data is completely secure, and we can't guarantee that your data will never be accessed, disclosed or lost. Please keep your sign-in account and your email secure, and tell us at once if you think someone has used your account. If a breach affects your data, we'll tell you without unreasonable delay and as the law requires.
Your choices and rights
- See and correct your data in the app, and download a copy of it from the app.
- Delete items from your wallet, or close your account from Settings to erase it as described under How long we keep it.
- Withdraw your agent authorization by removing a booking or closing your account. Requests already made to an airline stay as they are.
- Choose daily, weekly or no reminder emails, and turn phone notifications off in your phone's settings. We'll still send messages about your account, claims, fees and changes to our terms.
- Remove a household member, or leave a household, and remove an address you forward from, in Settings.
- Remove your card once nothing is owed.
To use a right by writing to us, email privacy@getunflown.com from the email address on your account. We'll confirm it's you before acting, and may ask for more information to do so. You can ask someone to make a request for you; we'll need proof that you authorized them, and may ask you to confirm it directly. We'll answer within the time the law allows, usually 45 days, and tell you if we need longer. Some requests may be limited by law, for example where we need to keep records or where the request would reveal someone else's information; if so, we'll tell you why. We won't treat you differently for using any of these rights.
California and other US states
Several US states, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, give their residents privacy rights. Depending on where you live, they include the right to know what personal information we collect, use and disclose; to get a copy of it in a portable form; to correct it; to delete it; to opt out of its sale or sharing, of targeted advertising and of profiling with significant effects; to limit the use of sensitive information; and not to be treated differently for using these rights. We honor these requests from anyone in the United States, whether or not their state's law applies to us, in the way described under Your choices and rights. Where the law gives you one, you can appeal our answer to a request by replying to it; we'll answer the appeal within the time the law allows, and if we turn it down, you can contact your state attorney general.
Notice at collection for California residents. In the past 12 months, the categories of personal information we've collected, as California law names them, are: identifiers (such as name, email address, IP address and account ID); personal records (such as booking details and the last four digits of a card); characteristics of protected classifications (age, from a date of birth); commercial information (such as fares, credits, claims and fees); internet and device activity (such as how you use the service); and inferences limited to what's needed to run the service, such as which credits are about to expire. Dates of birth are collected only because airlines use them to verify a booking. We collect these from the sources and for the purposes above, and disclose each category for business purposes only to the recipients listed under Who we share it with. We don't sell or share personal information, haven't done so in the past 12 months, and have no actual knowledge of selling or sharing information about anyone under 16. The emails you forward may contain sensitive personal information; we use any sensitive personal information only as needed to provide the service you ask for, and not to infer anything about you, so there's nothing to limit. We keep each category for as long as described under How long we keep it.
California residents may also ask, once a year, whether we've disclosed personal information to third parties for their direct marketing. We haven't.
Outside the United States
Unflown is meant for people who live in the United States, and we don't offer the service elsewhere. We and our service providers store and process data in the United States and possibly other countries, whose data protection laws may differ from those where you live. If you use the service or visit our website from outside the United States, your data will be transferred to and processed in the United States.
If you're in the European Economic Area, the UK or Switzerland and visit our website or request an invite, we process the little we receive, such as your IP address and email address, because you asked us to (to answer an invite request) and for our legitimate interest in running and securing the website. You can ask us to access, correct or delete it, or object to how we use it, at privacy@getunflown.com, and you can complain to your local data protection authority.
Children
Unflown isn't meant for anyone under 18, and only adults can create an account. We don't knowingly collect information directly from children under 13, or from anyone under 16 for any purpose that would need their consent. A booking an adult adds may include a child's name and date of birth; we use those only for that booking, as described above. If you believe a child has created an account or given us their information, write to us and we'll delete it.
Other companies
The service links to airline, hotel and other websites, and to sign-in with Google or Apple. Those companies handle your data under their own privacy policies, not this one, and we're not responsible for what they do.
Changes to this policy
We may update this policy from time to time. If we change it in a way that matters, we'll email you or tell you in the app before the change takes effect, and update the date at the top. We won't use data we already hold in a materially different way without your consent where the law requires it.
Contact us
Questions, requests or complaints: write to us at privacy@getunflown.com.