Privacy
Jetwren app privacy policy
This policy explains what the Jetwren app for iPhone and Android collects, why, who helps us run it, how long we keep things and how you stay in control. The Jetwren website and waitlist have their own privacy notice.
The short version
- You can use Jetwren without an account. We don't ask for your name, email or phone number.
- We store a random ID for your phone, your push notification token, and the flights you track, so we can send you alerts.
- If you choose to sign in with Apple or Google, we also store a sign-in ID and the email address they share with us (with Apple's Hide My Email, a forwarding address).
- Boarding pass details, saved images, notes, your home location and anything you type into a claim letter stay on your phone.
- We don't sell your data, we don't show ads, and we don't track you across other apps or websites.
- You can see what we store, export it and delete it at any time in Settings → Privacy.
1. Who is responsible
Jetwren is run by Muhammad Mujtaba, who is the controller of your personal data for the Jetwren app ("we", "us"). Contact: support@jetwren.com. Use this address for any privacy question or request.
2. What we collect, and why
2.1 When you use the app without an account
| What | Why we need it | Legal basis |
|---|---|---|
| A random ID for your phone, created when you first open the app, and a secret token the app uses to talk to our servers (we store only a scrambled copy, a hash, of the token). Whether the phone is an iPhone or Android phone. When the ID was created and last used. | To know which flights belong to which phone and to keep the anonymous account working. | Necessary to provide the app you asked for (performance of a contract). |
| Your push notification token from Apple or Google, and, on iPhone, the tokens for Live Activities on your Lock Screen. | To send you alerts and lock-screen updates. | Necessary to provide the app. Notifications only reach you if you allow them in your phone's settings, and you can turn them off at any time. |
| The flights you add or follow: flight number, date and route, whether it's your flight or someone else's, and when you added it. | To track those flights and tell you what changes. | Necessary to provide the app. |
| Your alert settings: which alerts you want, muted flights, quiet hours, your phone's time zone and 12- or 24-hour setting. | To send the right alerts at the right local time and hold them during quiet hours. | Necessary to provide the app. |
| Your answers to check-in questions, for example whether you paid for a seat. | To work out when free online check-in opens and closes for your fare and remind you. | Necessary to provide the app. |
| Share links you create. | To show your flight's live status to people you send the link to. | Necessary to provide the app. |
| Alerts we've queued or sent you. | To avoid sending the same alert twice and to retry if delivery fails. | Necessary to provide the app. |
2.2 If you sign in with Apple or Google (optional)
Signing in is never required. It backs up your trips and keeps them in sync across your phones.
| What | Why | Legal basis |
|---|---|---|
| Which provider you used (Apple or Google) and a sign-in ID from our sign-in service (Google Firebase Authentication). | To recognise you on each phone and join your trips into one account. | Necessary to provide the backup and sync you asked for. |
| The email address Apple or Google shares with us. With Apple's Hide My Email we only receive a forwarding address. We never ask for your name. | To show which account you're signed in with, and to stop the same email being linked to two separate accounts. We don't use it to send marketing. | Necessary to provide the account. |
| For Sign in with Apple on iPhone: a token from Apple. | Only so we can tell Apple to end Jetwren's access when you delete your account. | Necessary to provide the account, and to meet Apple's rules. |
| Your settings, trips, alert settings and share links, now belonging to your account instead of a single phone. | Same reasons as in 2.1, on every phone where you're signed in. | Necessary to provide the app. |
2.3 When you contact us
If you email support@jetwren.com (for example with "Contact support" in the app, which adds the app version and phone model to the email), we receive your email address and what you write. We use it to answer you. Legal basis: our legitimate interest in helping you, or performance of a contract when it's about the app you use.
2.4 Technical data when the app talks to our servers
Like any internet service, our servers receive your IP address and basic technical details with each request. We use them only to answer the request and protect the service from abuse (for example by limiting how many requests come from one address). Server logs that may include these details are kept for 14 days, then deleted. Legal basis: our legitimate interest in keeping Jetwren secure and working.
2.5 Flight information
To show flight status we ask our flight data provider about the flight number and date. We don't send them anything about you: no ID, no email, no name, no location. The flight information itself (times, gates, status) is public operational data, not personal data.
3. What stays on your phone
These never reach our servers:
- Names, seats and booking references read from a boarding pass you scan. The pass is read on your phone; only the flight number and date are used to find the flight.
- Boarding pass images you save, and your notes.
- Your home location and travel time, if you set up "Leave for the airport". The reminder is worked out on your phone.
- Names, addresses and email addresses you type into a compensation claim letter. You send the letter yourself, through your own email or messaging app.
The camera is used only to read a boarding pass barcode, and photo access only when you choose a picture of a pass. Jetwren doesn't use location services.
4. What we don't do
- We don't sell your personal data, rent it or trade it.
- We don't show ads in the app and don't share your data with advertisers or data brokers.
- We don't track you across other companies' apps or websites, and we don't read your phone's advertising identifier.
- We don't use analytics or crash-reporting tools in the app.
- We don't use your data to train AI models and we don't share it with AI services.
- We don't make decisions about you that have legal or similarly significant effects. The compensation check is an estimate that helps you decide whether to claim; the airline, or a court, decides.
5. Who helps us run Jetwren
We use these service providers. They process data only on our instructions and under contracts that require them to protect it.
| Provider | What they do for us | What they receive |
|---|---|---|
| Railway (Railway Corp.) | Hosts our servers and database. | Everything in section 2 that we store. |
| Google Firebase (Google) | Firebase Cloud Messaging delivers push notifications; Firebase Authentication handles sign-in with Apple and Google. | Push tokens and a Firebase installation ID; if you sign in, your sign-in ID and the email the provider shares. Firebase's tools also send technical details such as the phone model, operating system version and app version to Google so the service works. |
| Apple | Apple Push Notification service delivers alerts and Live Activity updates to iPhones; Sign in with Apple, if you use it. | Push tokens and the content of the alert (for example "Gate changed to B12"); for Sign in with Apple, what Apple's own privacy policy describes. |
| AeroDataBox | Provides flight status data. | Flight numbers and dates only. No personal data. |
| Vercel (Vercel Inc.) | Hosts the jetwren.com website, which also passes share-link pages through to our servers. | The IP address and browser details of people who open jetwren.com or a share link, to deliver the page. |
| Our email hosting provider | Hosts our support mailbox. | Emails you send us. |
Apple and Google also process data under their own terms when you use their sign-in, their push services or their app stores. Their privacy policies apply to that.
Other people and services you choose to involve
- People you share a flight with see the flight's public status, times and progress on the share page. They don't see your name, your other flights or anything about who shared it.
- Airline and claim websites. Some screens link to an airline's check-in or claim page, or to a claim company if you choose that option. When you open them you leave Jetwren, and their privacy policies apply. We don't send them your data.
- Your own apps. When you share a link or a claim letter, your phone's share sheet sends it through the app you pick.
Legal requests. We may disclose data if the law requires it, or to protect the rights, safety or property of users, the public or Jetwren, and only as much as needed.
6. Where your data is processed
Our providers may process data in countries other than the one you live in, including the United States. Where the law requires it, we rely on safeguards such as adequacy decisions or standard contractual clauses approved by data protection authorities, and you can ask us for a copy of the relevant safeguards.
7. How long we keep it
| Data | How long |
|---|---|
| Phone ID, push tokens, flights, settings and share links (no account) | Until you delete them in the app, or until the phone hasn't used Jetwren for 12 months, when we delete them automatically. |
| A flight you track | Deleted 90 days after the flight lands, unless you keep it in your trips. You can remove it, or delete everything, at any time. |
| Share links | They stop working 24 hours after the flight arrives, or as soon as you stop sharing. |
| Lock-screen tokens and queued alerts | Deleted after the flight ends, at the latest 7 days after arrival. |
| Account (if you signed in) | Until you delete your account. Signing out keeps the account so you can sign in again. |
| Waitlist sign-ups (if you joined on jetwren.com) | Until you unsubscribe, or until 6 months after launch if you haven't installed the app or opted in to product news, whichever comes first. Unconfirmed sign-ups are deleted after 30 days. See the website privacy notice. |
| Support emails | 24 months after your last message, unless we need them longer to deal with a legal claim. |
| Server logs | 14 days. |
| Backups of our database | Up to 7 days, after which deleted data is gone from backups too. |
8. Your rights and choices
Wherever you live, you can:
- See and get a copy of your data: Settings → Privacy → Export my data gives you a file with everything we store about your phone (or your account, if signed in), plus the trips on your phone.
- Delete your data: Settings → Privacy → Delete everything (or Delete account and data if you're signed in). It deletes your data on the phone and on our servers right away, including your account and all phones signed in to it, and ends Jetwren's access to your Apple ID if you used Sign in with Apple. Shared links stop working.
- Correct your data: change your flights and settings in the app at any time. Your email comes from Apple or Google; change it there and sign in again.
- Object to or ask us to restrict how we use your data, and withdraw any permission you gave. Turn off notifications in your phone's settings, or sign out in Settings → Account.
- Move your data: the export is a standard JSON file you can open in any text editor.
- Complain to the data protection authority where you live or work. We'd appreciate the chance to sort it out first: support@jetwren.com.
To use a right by email, write to support@jetwren.com. We answer within one month (we'll tell you if we need longer, as the law allows). We may need to check that the data is yours before acting. Because the app works without an account, we usually can't link an email to an anonymous phone; the fastest way is to use the export and delete options in the app on that phone.
If you've already deleted the app: without an account, the data on our servers can't be linked to you any more, and it's deleted automatically after the period in section 7. If you were signed in, reinstall Jetwren, sign in, and use Delete account and data, or email us from the address linked to your account.
9. Security
All traffic between the app and our servers uses HTTPS. The app keeps its secret token in the phone's secure storage (the iOS Keychain or Android Keystore), and our servers store only a hash of it. Our database is not reachable from the internet, and secret keys are kept out of our code. Access to these systems is limited to the people who need it to run Jetwren. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities where the law requires.
10. Children
Jetwren isn't designed for children and we don't knowingly collect personal data from children under 13. Signing in is meant for people aged 16 or over, or the minimum age for consenting to online services where you live. If you think a child has given us personal data, email support@jetwren.com and we'll delete it.
11. Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects how we use your data in a meaningful way, we'll tell you in the app before it takes effect. Earlier versions are available on request.
12. Contact
Muhammad Mujtaba, Jetwren · support@jetwren.com