FahrenFlight
ItalianoFahrenFlight Privacy Policy
Last updated: 29 October 2026
FahrenFlight is an app for keeping a diary of your travels on a globe, playing the Gate, climbing the Sky League and meeting other travellers. This policy explains which personal data we process, why, for how long and with whom, under Regulation (EU) 2016/679 (the "GDPR") and the Italian Personal Data Protection Code (Legislative Decree 196/2003).
1. Who the controller is
The data controller is Catalin Florin Coada, Via Rodolfo Morandi 18, 20068 Peschiera Borromeo (MI), Italy.
For any privacy question, or to exercise your rights: [email protected].
No data protection officer (DPO) has been appointed, as one is not required for this processing.
2. In short
- Your photos stay on your phone. We do not upload them to any server, with a single exception that you choose: a Gold Postcard shared with a link (section 4.7).
- You can use the app without an account. In that case your trips, points and badges stay on the phone only.
- With an account, the text of your trips and your progress are saved in the cloud, so you can find them again on another phone.
- Other users only see your nickname, your avatar and your bio, if you wrote one.
- No advertising, no profiling, no tracking across other companies' apps. We do not sell or hand over your data.
3. What stays only on your phone
This data never reaches us or our providers:
- the photos and videos of your trips and the photos you take at places to see, with the location where they were taken;
- the reels the app creates;
- chat messages and voice messages, except the text of a message you choose to report (section 4.15);
- the trip backup files you create with "Save a copy" (you manage them, for example by saving them in Files or iCloud Drive);
- the app preferences: language, appearance, notifications;
- your trips, points and badges, until you create an account.
If you delete the app, iOS deletes this data with it.
4. What data we process, and why
4.1 Your account
If you create a FahrenFlight account we process:
- your email address and account identifier;
- the sign-in method you chose: email and password, Apple, Google or Facebook. With Apple you can hide your email: in that case we receive an address relayed by Apple;
- your nickname, your avatar and, if you write one, your profile bio (at most 150 characters);
- the creation and last update dates.
We never see your password: it is handled by Google's Firebase Authentication.
Why: to let you sign in and keep your data separate from everyone else's. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). How long: until you delete your account.
4.2 Trips and progress in the cloud
With an account, the app saves in the cloud:
- the text of your trips: title, dates, place, description, rating and the other fields you write. Not the photos;
- your progress: miles, FahrenPoints, badges and their unlock dates, Gate results, Sky League seasons, your FahrenCoins transactions and the Gold Postcards included in your subscription.
Why: so you can find them again if you change phone or use two. Legal basis: performance of the contract. How long: until you delete the trip or the account.
4.3 Your public profile
Your nickname, avatar and bio are visible to other users who have an account, for example when your routes cross or you challenge each other. Nothing else in your account is visible to others: only you can read your trips and your progress.
4.4 Facebook friends (optional)
If you sign in with Facebook and turn on friend discovery, Facebook tells us which of your Facebook friends use FahrenFlight and have turned on the same discovery, so the app can suggest them to you. To do this we store your Facebook identifier for FahrenFlight and your choice. We do not keep your friends list.
Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by turning discovery off in the app. How long: while discovery stays on, or until you delete your account.
4.5 Challenges
When you challenge someone with a link, our server keeps: your nickname, your avatar, the language, the codes of the ten questions, the scores, and the nickname and avatar of whoever accepts. Anyone who opens the link sees your nickname and your avatar, even if they are not one of your Flighters.
Legal basis: performance of the contract. How long: 30 days from the creation of the challenge, then it is deleted.
4.6 Notifications
Notifications for the Gate, national holidays, nearby places, challenges and messages are created by your phone, and you can turn them off one by one in your profile, or all of them in iOS Settings.
To let you know when someone has played your challenge, our server keeps the notification token of your phone that Apple gives us, linked to your account, together with the app language.
Legal basis: performance of the contract, with the permission you grant to iOS. How long: as long as the phone renews it; if it is not updated for 120 days, we delete it.
4.7 Gold Postcards shared with a link
If you share a Gold Postcard on WhatsApp, the app uploads the image of the front (your photo, the place and the date) to our server and gives you a link. Whoever opens the link sees the postcard. The page is not indexed by search engines and the link cannot be guessed. Next to the image, not visible, we keep your account identifier, so we can act in case of abuse. Anyone can report the postcard: a report removes it immediately.
Legal basis: your request to share it (performance of the contract). How long: 30 days, then it deletes itself.
⚠️ If there are other people in the photo, make sure they agree before you share it.
4.8 Purchases: Business Class and FahrenCoins
Purchases are handled by Apple (App Store) or Google (Google Play): they receive the payment and your card details, which we never see. From them we only receive confirmation that a purchase took place (which product and its status). An active Business Class subscription is remembered on the phone; the FahrenCoins balance is saved in your account, if you have one.
Legal basis: performance of the contract. How long: the FahrenCoins balance until you delete your account.
4.9 Location
Only while you use the app, and only if you allow it in iOS, the app uses your phone's location for two things:
- letting you know when you are near a place to see;
- checking that a photo of a place was really taken there.
The calculation happens on the phone: your location is not sent to our servers. It is only saved together with the photo of the place, on the phone.
Legal basis: your consent, given through the iOS permission, which you can withdraw at any time in Settings.
4.10 Camera, photos and microphone
The app uses the camera and your photos for your trips and your profile, and the microphone for voice messages, only if you allow it in iOS. What comes out of them stays on the phone (section 3), except the Gold Postcards you share with a link (section 4.7).
4.11 Weather
To show you the weather at a destination, the app sends the name or the coordinates of that place to Open-Meteo, a weather service. It does not send any account data; like any internet service, Open-Meteo sees the IP address of the request.
Legal basis: legitimate interest in offering you the feature (Art. 6(1)(f) GDPR).
4.12 Message translation
Translating chat messages uses Apple's translation on the phone: the text does not reach us.
4.13 Security and abuse prevention
To protect the service:
- the app proves to our servers that it is the genuine app with Firebase App Check, which relies on Apple's device checks;
- our servers limit the number of requests per IP address and per account, processing the IP address only for as long as necessary;
- the servers' technical logs record only events (for example "challenge created"), not content or people.
Legal basis: legitimate interest in the security of the service and in preventing fraud (Art. 6(1)(f) GDPR).
4.14 Support
If you write to us, we process your email address and what you write, only to reply to you. The email the app prepares includes the app version and the phone model, which you see before sending it. We keep the correspondence for 24 months.
4.15 Reports
If you report a Flighter, one of their messages or someone you met in a challenge, the app sends our server the reason you chose, who you are reporting (their identifier and the nickname you saw), the challenge if one is involved and, if you report a message, the text of the message. If you have an account, also your identifier; if you do not, we keep instead a shortened, irreversible fingerprint of your IP address, used only to limit abuse. The report reaches our support by email, and we review it within 24 hours. The person you report does not find out who reported them.
Why: to keep the app safe and enforce the rules in the Terms of Use. Legal basis: legitimate interest in the safety of users (Art. 6(1)(f) GDPR). How long: 24 months, then it deletes itself.
5. Who we entrust data to
We are helped by providers who process data on our behalf, as processors (Art. 28 GDPR):
| Provider | For what |
|---|---|
| Google (Firebase Authentication, Cloud Firestore, Firebase App Check) | account, trips and progress in the cloud, public profile, security |
| Cloudflare, Inc. (Workers, KV, D1, Email Routing) | servers for challenges, shared Gold Postcards and reports, challenge notifications, email forwarding |
| Apple (notification service) | delivery of challenge notifications |
When you choose to sign in with Apple, Google or Facebook, or to buy from the App Store or Google Play, those services process your data as independent controllers, under their own privacy policies. The same applies to Open-Meteo for the weather.
We do not give your data to anyone else, except where the law requires us to (for example at the request of a court).
6. Data outside the European Union
Some providers may process data in the United States or in other countries outside the EU. In those cases the transfer is protected by the EU-US Data Privacy Framework, which Google, Cloudflare and Meta participate in, or by the European Commission's standard contractual clauses.
7. No advertising or tracking
The app does not show advertising, does not build profiles of you for commercial purposes and does not track you across other companies' apps and websites. The Facebook kit is used only for sign-in: automatic event logging and advertising identifier collection are turned off.
8. How long, in summary
| Data | How long |
|---|---|
| Account, public profile, trips and progress in the cloud | until you delete your account |
| Challenges | 30 days |
| Shared Gold Postcards | 30 days, or until the first report |
| Challenge notification token | while the phone renews it, at most 120 days without an update |
| Support correspondence | 24 months |
| Reports | 24 months |
| Data on the phone | until you delete it or delete the app |
9. Deleting your account
You can delete your account in the app, in Profile → Account → Delete account. We immediately delete the account, the public profile, the nickname, the Facebook link, and the trips and progress saved in the cloud. Challenges and shared Gold Postcards expire within 30 days anyway; if you want them gone sooner, write to us. Data that is only on your phone stays there until you delete the app.
10. Your rights
You have the right to ask us to access your data, correct it, erase it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest. You can withdraw your consent at any time, without affecting what was done before. To exercise them, write to the address in section 1: we reply within one month.
If you believe the processing breaks the law, you can lodge a complaint with the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or with the authority of the EU country where you live.
11. Children
FahrenFlight is not intended for children. To create an account you must be at least 14 years old, the minimum age in Italy for consenting on your own to the processing of data in online services; in other countries it may be higher. Below that age a parent's consent is required. If we find an account belonging to a minor without consent, we delete it.
12. Security
Data travels encrypted (HTTPS). Access to data in the cloud is set up so that everyone can read only their own data, except the public profile. No system is one hundred per cent secure: if an incident affected your data, we would let you know as the law requires.
13. Changes
If we change this policy, we update the date at the top. If the changes are significant, we tell you in the app.
14. Contact
Catalin Florin Coada — Via Rodolfo Morandi 18, 20068 Peschiera Borromeo (MI), Italy — [email protected]
*This is a translation. In case of any difference, the Italian version prevails: fahrenflight.app/privacy.*