Privacy policy

What is stored on your phone

Flights, documents and their expiry dates (for visas — the country, entries and how many days you may stay), loyalty cards with tier and points, “miles credited” marks, your name, email, phone, social handles, birth month (if you add it — for Emirates mile expiry), trips without a flight and day limits per country, My people and their documents, companions on your flights, your profile photo and settings.

All of this lives in a database inside the app. Delete the app and the data on your phone is deleted too. The copy of your flights in your account (if you signed in) stays until you delete the account.

Account and sign-in

You sign in with Apple or with a code sent to your email. The app works without signing in, but sync, family, friends and travel buddies need an account.

For your account we store your email (with Sign in with Apple, the one Apple shares, including a private relay address), a permanent user number from Apple, your name if you add it, the app language, and when the account was created and last used.

The email code is valid for 10 minutes, and we keep only a one-way hash of it. Code emails are sent by Resend. Disposable email addresses aren't accepted. To stop bots, the server counts sign-in attempts per IP address and keeps only a one-way hash of the address, for one hour.

Your sign-in is kept in the phone's secure storage (Keychain). The server keeps only a hash of the sign-in key and the device type (“iPhone”). A sign-in that isn't used for 180 days expires.

Device check (App Attest): when you sign in, the iPhone confirms through Apple that this is the genuine Airstamp app on a genuine device. The server keeps the public key created in the phone's secure chip and a hash of the device token. We receive no face, fingerprint or Apple ID data in the process.

Flight sync

When you're signed in, flights are copied to the server and back: route, date, flight number, airline, aircraft, times, seat, cabin and fare, terminal and gate, your marks, and how the flight was added (manually, boarding pass, email). Never copied: booking references, documents, passports, loyalty cards, My people and companions on flights.

A deleted flight is deleted on the server too. A deletion marker (without the flight's details) is kept for 30 days so the flight also disappears from your other phones.

An incognito flight is kept for you only: family, friends and travel buddies don't see it.

You can sign out at any time: the data on your phone stays, and so does the copy on the server until you delete your account.

My people and companions

In My people you keep the people you travel with: name, relationship, surname and given name in Latin letters, date of birth, and their documents — passports, visas, insurance. This stays on your phone only and is never sent to our server, even when you're signed in.

The app finds companions on a flight in booking emails and boarding passes: passenger name, seat, child or adult. This is also stored on your phone only.

When you add another person's details, especially a child's, make sure they or their parent are fine with it. We use these details only for trip checks on your phone. An Airstamp account isn't meant for children under 13 — a parent can keep a child's documents in My people.

Logbook for kids: a child’s logbook — their flights, pages, stamps, cover and the crew’s signatures — is kept in My people on your phone. A child doesn’t need an account. A copy goes to your account only if you connect your child’s phone (see “Your child’s phone”).

Family

People you invite with a link see your flights from yesterday onwards (except incognito ones): route, date, flight number, airline, departure and arrival times, plus your name and profile photo. They don't see your seat, cabin, fare or booking reference.

They get notifications about departure, delays, cancellations, arrival and the baggage belt — but not about boarding.

An invitation link works for 7 days. You can see who follows you and remove anyone; they then get nothing more.

Friends

Friends see what you allow in friend settings: stats (flights, kilometres, hours, countries, airports, airlines), medals, upcoming flights and overlaps — the same flight, airport or city on the same dates. Stats and medals are shared by default; flights and overlaps are off.

For stats, the phone sends the server only the totals, not your list of flights, and counts only confirmed flights (boarding pass, email, loyalty card, live status).

Travel buddies and public profile

If you turn on “Show me to travel buddies”, people with Airstamp on the same flight or in the same airport on the same day can see your public profile: name, photo, Instagram and Telegram — whatever you allow. Your seat, other flights and onward route aren't shown. It's off by default.

We only treat someone as a travel buddy if their flight is confirmed (boarding pass, email, loyalty card or live status) and their account is more than a day old.

Your profile photo is stored on our server (Cloudflare R2) at a random link, which we give only to people you've allowed to see it.

You can hide any travel buddy or report them. A report — the reason, name, photo and profile links — goes to an Airstamp moderator in Telegram; we may then remove the photo or turn off the public profile.

Location

Used to estimate the trip to the airport. The app reads your location only while it's open, and no more than once every ten minutes.

Coordinates never leave your phone. We don't ask Apple or Google for place names: the city in your account is taken from the nearest airport in a built-in directory.

Map and globe

The globe and maps are drawn with Mapbox. To show them, the app downloads map tiles — countries, coastlines, city names — from Mapbox’s servers. Like any website, Mapbox sees your IP address and which tiles are loaded. Your flights, your location and the plane’s position are drawn on the phone itself and are not sent to Mapbox. We switch off Mapbox’s usage statistics (telemetry).

For in-flight mode, the map along your route is downloaded about a day before the flight — the whole world on any connection, details along the route only on Wi-Fi — and kept on the phone so the globe works without internet. Which tiles are downloaded reflects roughly where you’re flying; Mapbox doesn’t receive the flight number, dates or your name.

Camera and photos

The camera reads boarding pass barcodes, scans visas and passports — yours and your companions' — and takes your profile photo. Barcodes and document text are read on the phone itself (Apple Vision on iPhone, ML Kit on Android); the app keeps only the fields it filled in — country, number, dates, name — and the photo is neither stored nor sent anywhere.

Your profile photo is sent to the server only if you're signed in, resized to 512 pixels.

Face ID

Your face is checked by the phone's system. The app only receives “it's you” or “it's not you” and never sees any face data.

Live flight status

Around the day of an upcoming flight, the app asks our server for its status: gate, terminal, baggage belt, delays. The request contains only the flight number, the date and the departure and arrival airports — no name and no account.

Our server gets the answer from flight data providers (AeroDataBox and AirLabs) and keeps it for a short time (from 5 minutes to a few hours), keyed by flight number and date, so everyone on the same flight shares one request. It is not linked to you.

To limit abuse, the server counts requests per IP address. It keeps only a one-way hash of the address, for one hour, and never stores it next to the flight.

Requests that cost us money (a flight we haven’t seen before, a status that isn’t cached) also carry a random install number made up by the app — not your Apple ID and not an advertising ID — and whether you have Pro. The server uses it only to count today’s searches per phone: it keeps a one-way hash of the number for one day, never next to the flight. Delete the app and the number is gone.

When anyone looks up a flight number, our server remembers that number’s schedule — airports and times — to answer later lookups of the same flight without asking the data providers. This is about the flight, not about you.

Flights from email (only if you use it): the app gets a personal address like [email protected]. Emails you forward there are read automatically to find flights — number, date, airports, departure time, booking reference and the names of passengers on the booking (to show who's flying with you). The email itself is not stored: we keep only what we found and the subject line, until the app picks it up or for 30 days at most. Turn it off in the app and the address and everything found are deleted.

Gmail connection (only if you connect it): Airstamp asks Google for read-only access to your Gmail (gmail.readonly). The app searches only for travel emails — from airlines and travel agencies, or with booking-related subjects — downloads them from Google straight to your phone and finds flights there, including in PDF attachments (tickets and itinerary receipts), which are also read on the phone. The app may also check for new emails in the background when iOS lets it run — the same way, only on the phone. Emails and their contents never leave your phone: they are not sent to our servers or to anyone else, not used for advertising and not used to train AI models. The access key is kept in your phone’s secure storage (Keychain). Disconnect in the app and we revoke the access at Google and erase everything found from your phone. Airstamp’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Other mail by IMAP — Yandex, Mail.ru, iCloud, Yahoo and others (only if you connect it): you create an app password in your mail settings and paste it into Airstamp. The password is kept only in your phone’s secure storage (Keychain) and is sent only to your mail provider’s server. The phone connects to that server directly over an encrypted connection and only reads: folders are opened read-only, emails aren’t marked as read, and nothing is deleted, moved or sent. The app looks only at travel emails — the same way as with Gmail — in your inbox and your own folders, skipping spam, trash, sent and drafts, and finds flights on the phone, including in PDF attachments. It may also check for new emails in the background when iOS lets it run. Emails and their contents never leave your phone and are not sent to us. Disconnect in the app and the password and everything found are erased from your phone; you can also delete the app password in your mail settings.

Yandex can also be connected by signing in with your Yandex ID instead of an app password: Airstamp asks Yandex for read-only access to your mail (mail:imap_ro) and your email address. The sign-in returns to airstamp.app for a moment and straight back to the app; nothing is stored there. The access key is kept in your phone’s secure storage (Keychain) and is sent only to Yandex’s mail server. Disconnect in the app to erase it; you can also revoke access in your Yandex ID settings.

To tell which service handles your mail, the app recognises well-known addresses by their domain. For an address on your own domain it asks public DNS (Cloudflare) which service receives that domain’s mail — only the domain is sent, never your address.

Files you share with Airstamp: when you share a PDF ticket, a screenshot, text or a link from another app, it is read on your phone to find flights and is not sent to us. Screenshots are read with on-device text recognition, and the copy of the file is erased right after reading.

Online check-in: when you open an airline's check-in from Airstamp, the app fills in your booking code and surname on the airline's website and, when you tap the button, your passport details (number, expiry date, date of birth, nationality, sex). These details are stored only on your phone and go only into the airline's form — just as if you had typed them yourself. They are not sent to us. You always submit the form yourself.

Within a day of departure the app also asks our server where the aircraft operating your flight is coming from, and the weather at your departure and arrival airports. These requests contain only the flight number and date, or the airport codes. Weather comes from the Aviation Weather Center (aviationweather.gov) via our server.

You can turn live status off in Account → “Live flight status”. Then the app makes no requests at all.

Automatic check-in

If you turn on automatic check-in for a flight (with a separate consent), the phone sends our server the booking reference and the details of everyone checked in on that booking — you and companions with a passport in My people, up to 6 people: surname and given name, passport (number, nationality, issue and expiry dates, place of issue), date of birth, sex and seat preference, plus the phone number you enter for the airline; the server adds your account email. The airline needs an email and phone for every passenger, so companions get yours. The server keeps them encrypted until check-in opens, then passes them to our check-in partner (Flyo Technologies; data is processed in India) and deletes them right away. The partner checks the passengers in on the airline's website and deletes the data within 48 hours. Share your companions' details only with their consent.

Airstamp saves the boarding pass from automatic check-in (a PDF) on your phone so it opens without internet. If you add a boarding pass to Apple Wallet, the barcode is read on your phone, and the barcode plus the flight details for that card (flight, route, date and time, terminal, gate, seat, passenger name and booking reference — what's already printed on the pass) go to our server. The server signs the card with an Apple certificate and sends it straight back to the phone without storing anything. The card then lives in Wallet, where you can delete it.

We never choose or pay for paid seats. Turn automatic check-in off before check-in opens and the data is deleted immediately. The feature appears only once the partner is connected. Your first automatic check-in is a gift for signing in; so the gift isn't given twice, we keep a one-way hash of your email or Apple ID and a “gift used” mark — even after the account is deleted.

Travel eSIM

If you buy an eSIM in Airstamp, our server receives the plan, the country, the flight it's for and your push token. We pass our eSIM partner (eSIM Access, Redtea Mobile, Hong Kong) only the order number and the plan — no name, email or phone. The partner sends back the eSIM details: its number (ICCID), activation code and a QR-code link, and later its status, data used and expiry. The server keeps them with the order to show the eSIM in the app, send notifications (“ready”, “10% left”, “ends tomorrow”, the after-landing tip) and top up data.

When the eSIM is installed, the mobile operator and the partner see the technical number of your phone's eSIM chip (EID) — installation isn't possible without it. You enter card details in the payment provider's window: Airstamp never sees or stores them.

eSIM purchase records are deleted together with the account.

Your child's phone

Your child's logbook lives on your phone. If you connect your child's phone, your account on our server keeps a copy of the logbook: the child's name, the logbook flights (date, route, flight number, aircraft, flight time, the child's seat, countries flown over) and the pages — notes, stickers, crew signatures. We don't send passports, dates of birth, bookings or other people, and the server discards anything extra by itself.

Your child has no account, email or password: their phone connects with a code you show in your app. The server keeps only a hash of that phone's key and when the logbook was last opened. Your child's phone shows only the logbook — no ads, analytics, purchases, travel buddies or friends. What your child adds there, you see too.

Disconnect your child's phone or delete your account and the logbook copy, codes and keys are deleted from the server right away. By connecting the phone, you consent on your child's behalf.

Pro purchases

If you're signed in, the app sends our server the Apple-signed record of your Pro purchase: purchase number, product, dates and expiry (for One trip — the day it starts). The server checks Apple's signature and remembers until when you have Pro — automatic check-in needs this. The record contains no payment details. It's deleted with your account.

Notifications

Check-in, departure and arrival reminders are scheduled on the phone itself, so the arrival reminder with your terminal and baggage belt shows up even without internet.

Alerts about gate changes, delays, cancellations and your baggage belt come from our server as push notifications. For these, the app sends the server your phone's push token (a random address issued by Apple or Google for delivering notifications to this app) together with the flight number, date, airports and app language. If you're signed in, the token is linked to your account so you get alerts about the flights of family members you follow.

The server keeps this only while the flight is near and deletes it two days after the flight date. Notifications are delivered through Expo's push service and Apple or Google.

Turn off “Live flight status” in Account, or notifications for Airstamp in your phone settings, and the server stops sending them; turning off live status also deletes your push token from the server.

Link for family

If you tap “Link for family”, our server creates a page at airstamp.app/f/… showing your flight's status, gate and landing time, and stores the flight number, date and airports — plus your first name if you've added it in Account, so the page says “Stan is flying”. Anyone you send the link to can open it; search engines are asked not to index it. The link is deleted two days after the flight.

You can turn the link off at any time on the flight screen, and the page will say it was turned off. An incognito flight gets no link at all. To leave your name off, switch off “Name on family links” in Account.

We count how many times family-link pages are opened and how many times the “Get Airstamp” button on them is tapped — as daily totals only, not tied to a link, a device or a person.

Flight on the Lock Screen

From four hours before departure until an hour after landing, your flight can appear on the iPhone Lock Screen and in the Dynamic Island: a countdown, the gate, then the baggage belt.

To keep it up to date while the app is closed, the app sends our server the card's push address (a random token Apple issues for this one card), the flight number, date and departure airport, and the card's text in your language: airport codes, city names and labels. No seat, no booking reference, no name. The server sends updates directly through Apple (APNs) and deletes the record when the card closes — at the latest two days after the flight.

Turn it off in Account → “Flight on the Lock Screen”.

Crash reports

If the app crashes, it sends a technical report to Sentry (Functional Software, Inc.), the crash-reporting service we use: which code failed, the phone model, iOS and app versions. Reports contain no name, flights, documents or location. Before sending, the app strips the query part of web addresses and drops console output; it doesn't record screens or sessions.

Turn it off in Account → Data → “Crash reports”.

Calendar

“Add to calendar” opens the phone's own calendar window with the flight filled in, and you decide whether to save it. Airstamp asks only for permission to add events and never reads your calendar.

Who else processes data

Cloudflare — servers, database and photo storage. Apple — sign-in, device check, push notifications, the Lock Screen card and the certificate for Wallet cards. Expo — push delivery and app updates. Resend — sign-in code emails. Sentry — crash reports. AeroDataBox and AirLabs — flight status (flight number and date only). Aviation Weather Center — weather. Google — only if you connect Gmail. Mapbox — map tiles for the globe and maps. Your mail provider (Yandex, Mail.ru, Apple and others) — only if you connect your mail by IMAP, and only between your phone and their server. Telegram — reports to our moderator. Flyo Technologies (India) — only if you turn on automatic check-in. eSIM Access (Redtea Mobile, Hong Kong) — only if you buy an eSIM.

“File a claim” for compensation opens the AirHelp website with the airports, date and flight number in the link. AirHelp's own terms apply from there.

We don't sell data, show ads or share data with ad networks.

When data leaves your phone

Without an account — only for live flight status, alerts, the family link, the Lock Screen card and crash reports, as described above. With an account — also your flights, photo and profile settings for sync, family, friends and travel buddies. Otherwise only when you act: when you turn on automatic check-in, export your flights to a file and choose where to send it, or open an airline's website. The airline's own terms apply on its website.

How to delete everything

Account → “Delete account”: the account, flights, photo, family and friend links, profile settings, reports, check-in requests, eSIM purchases, Pro purchase records and logbook copies for your children's phones are deleted from the server right away.

Account → “Erase all data”: flights, documents, My people, cards, personal details and photos are deleted from your phone. This can't be undone, so export your flights first.

This website

airstamp.app has no ads and no cookies, and nothing tracks you across sites. We count visits with Cloudflare Web Analytics, which uses no cookies and doesn't identify you: we only see totals such as page views, countries, browsers and which page you came from. Family-link pages also keep the daily totals described above.

If you leave your email in the “Get notified” form, we store it with the sign-up date to email you once when the app launches. It isn't used for anything else or shared with anyone. To remove your address, write to [email protected].

The site is hosted on Cloudflare. As the host, Cloudflare processes technical request data such as IP addresses under its own privacy policy.

Your rights and changes

You can ask for a copy of your account data, or for it to be corrected or deleted — write to [email protected]. You can export your flights to a file at any time.

If we start collecting anything new, we'll update this policy before the update is released; the revision date is at the top.

Questions — [email protected].

Contact

[email protected]