Privacy Policy for Bordy

Last Updated: February 28, 2026

Introduction

This Privacy Policy describes how Bordy ("we", "us", or "our") collects, uses, and shares information when you use our mobile application (the "App"). We are committed to protecting your privacy and being transparent about our data practices.

Information We Collect

1. Information You Provide Directly

When you create an account and use the App, we collect:

• Account information: Email address, name, and password
• Profile details: Date of birth, nationality, and passport number (optional, for travel document storage)
• Flight data: Flights you add, custom notes, and trip details
• Notification preferences: Whether you enable notifications and your preferred settings
• Premium subscription data: Information about your subscription status

2. Information Automatically Collected

• Device information: Platform (iOS/Android), operating system version, and app version
• Usage analytics: How you interact with the app to help us improve the experience
• Error and performance data: Technical information about app crashes and errors
• Purchase information: Subscription and payment data processed through Apple/Google's payment systems

3. Information from Third-Party Services

• Flight data: When you search for or add flights, we retrieve flight information from FlightAware AeroAPI, including schedules, status, delays, gates, and aircraft information
• Airport and airline data: We use publicly available databases for airport and airline information

4. Information Stored Locally on Your Device

The following data may be stored on your device for performance and offline access:

• Recently searched airports and airlines
• Cached flight data
• User preferences and settings

How We Use Your Information

We use the collected information for the following purposes:

• Service delivery: To provide you with flight tracking, search, and management features
• Personalization: To show relevant flight information, statistics, and recommendations
• App improvement: To analyze usage patterns and improve app functionality, design, and user experience
• Customer support: To respond to your feedback and support requests
• Subscription management: To process and manage your premium subscription
• Error monitoring: To identify and fix technical issues and bugs
• Notifications: To send you flight status updates and important app updates (if you've opted in)

Third-Party Services

We use the following third-party services that may collect information:

FlightAware AeroAPI

• Purpose: Flight data retrieval (schedules, status, tracking)
• Data shared: Flight identifiers, airport codes, search queries

Apple App Store / Google Play Store

• Purpose: Payment processing for subscriptions
• Data shared: Payment information, purchase history (handled directly by Apple/Google)

Data Retention

• Account data: We retain your account and flight data for as long as you use the app. You can request deletion at any time.
• Analytics data: Analytics and error tracking data is retained according to our providers' policies (typically 90 days to 2 years).
• Cached data: Flight data cached via Redis is retained for short periods (2-10 minutes) to reduce API calls and improve performance.
• Local data: Data stored on your device remains until you uninstall the app or clear app data.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted connections (HTTPS/TLS) for all data transmission
• Secure password hashing for account credentials
• JWT-based authentication for API access
• Secure storage practices for data on our servers
• Regular security assessments and updates
• Limited access to personal data by authorized personnel only

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Opt-out: Opt out of analytics and marketing communications
• Withdraw consent: Withdraw consent for data processing where we rely on consent

To exercise these rights, please contact us at the email address provided below.

Children's Privacy

The App is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Push Notifications

The app uses push notifications to deliver flight status updates based on your preferences. These notifications are:

• Based on the flights you've added to your account
• Completely optional and can be disabled at any time through the app settings or device settings
• Not used to send marketing messages or advertisements

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending you a notification (if required by law)

Your continued use of the app after changes become effective constitutes acceptance of the revised policy.

European Users (GDPR)

We comply with the General Data Protection Regulation (GDPR) for users in the European Union.

Your GDPR Rights

As an EU resident, you have the following rights:

• Right of access (Article 15): Obtain confirmation of data processing and access to your data
• Right to rectification (Article 16): Correct inaccurate or incomplete data
• Right to erasure (Article 17): Request deletion of your data ("right to be forgotten")
• Right to restriction (Article 18): Limit how we use your data
• Right to data portability (Article 20): Receive your data in a structured, machine-readable format
• Right to object (Article 21): Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing
• Right to lodge a complaint: File a complaint with your local supervisory authority

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, including exercising your GDPR rights, please contact us at:

• Email: [email protected]
• Developer: Dmitry Yunkov
• App: Bordy

For GDPR-related requests, please clearly indicate "GDPR Request" in your subject line and specify which right you wish to exercise. We will respond within one month of receipt of your request, as required by GDPR.

By using the Bordy app, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and sharing of your information as described herein.