This Privacy Policy explains how FlyLUCIA collects, uses, shares, and protects personal information when you use our mobile app. It applies from the effective date above and replaces any earlier privacy notice for the app.
FlyLUCIA is operated by António Aires, based in Portugal. For the purposes of applicable data protection law, António Aires is the data controller responsible for your personal information.
Postal address: Av. Estados Unidos da América n39A, 1700-165, Portugal.
You can reach us using the contact details at the end of this policy or through Help & support in your Profile tab.
We collect information you provide directly, information generated when you use the app, and limited technical data needed to run the service.
Account and profile: first and last name, username (handle), email address, phone number, sign-in code, Instagram username, profile photo, airline, role, job title or position type, theme preference, and onboarding preferences such as preferred destinations, referral source, and similar crew-life preferences you choose to share.
Roster and scheduling: the duty, days off, flight destinations, dates, and related roster details you enter in the app.
Social and swaps: friend connections you accept, swap requests and responses, and the limited roster information shared with friends or swap counterparts as described below.
Subscriptions: subscription status and entitlement information. We do not collect or store payment card numbers.
Affiliate program (optional): if you ask us to contact you about the affiliate program, we store your chosen contact method and details so our team can reach you.
Communications: messages you send to support and records needed to handle your requests.
Push notifications: a device push token if you allow notifications, used to send app alerts such as swap updates.
Sign in with Apple: if you use Apple to sign in, we receive the information Apple shares with us, such as your name and email address, according to your Apple settings.
Product analytics: when analytics is enabled, we collect usage events such as screen views and an internal user identifier linked to your account email to understand how the app is used. This is described further under Product analytics.
Authentication records: Supabase, our authentication provider, processes your email and sign-in code and may log security-related events connected to your account.
We use personal information to provide and improve FlyLUCIA, including creating and securing your account, syncing your profile and roster, enabling friend connections and swap workflows, delivering push notifications you enable, managing subscriptions, and responding to support requests.
We use affiliate contact details only after you request to be contacted, so our team knows who to reach and how.
We use product analytics internally to understand app flow and improve user experience. Analytics is not used for advertising or retargeting.
We may use information to maintain security, prevent abuse, enforce our terms, and comply with legal obligations.
Legal bases under the GDPR: we rely on performance of a contract to provide the app and related features; legitimate interests for security, service improvement, and internal product analytics; and consent where required, such as for push notifications, photo library access, and affiliate contact requests.
FlyLUCIA does not show advertising in the app.
We do not send marketing emails.
We do not use your information for retargeting or cross-context behavioral advertising.
We do not sell or share personal information for cross-context behavioral advertising.
We do not use third-party advertising or tracking technologies for ads.
With other crew members you connect with: when you add friends, those friends can see limited roster information you share through the app — currently days off you have chosen to make visible in that context. Other users cannot search for or browse your profile.
With swap counterparts: when a swap is accepted, each party sees the information needed to complete that swap. Roster details are shared only in connection with swaps you agree to.
With service providers who process data on our behalf, including Supabase (hosting, authentication, database, and file storage in the EU), RevenueCat (subscription management), Apple App Store and Google Play (in-app purchases and payments), PostHog (product analytics hosted in the EU), Resend (sending internal operational emails when you request affiliate contact), and Expo (push notification delivery). These providers may only use your information to perform services for us, subject to appropriate safeguards.
When required by law, to protect rights and safety, or in connection with a business transfer, if ever applicable.
We do not sell your personal information.
Photo library: we ask for access only so you can choose a profile photo. We do not access your photos for any other purpose.
Notifications: if you allow notifications, we use them for app alerts such as swap activity. You can turn notifications off in your device settings at any time.
Paid features are available through the Apple App Store, Google Play, and RevenueCat. Payment processing is handled by those platforms. FlyLUCIA does not receive or store your full payment card details.
RevenueCat and the app stores may process purchase history and subscription status so we can provide access to paid features.
FlyLUCIA and our providers send transactional emails only — not marketing. This includes authentication emails from Supabase, such as email verification, sign-in code reset, and other account-security messages tied to your account.
If you request contact about the affiliate program, we send an internal operational email to our team with the details needed to follow up. That email is sent only after you ask to be contacted.
We use PostHog, a product analytics service hosted in the EU, to understand how people move through the app and where we can improve flow and experience.
Analytics data is used internally only. It is not sold, not used for advertising, and not used for retargeting. When enabled, analytics may include your account identifier, email address linked to your account, and screen-level usage events.
We keep analytics data only while your account is active. When you delete your account in the app, we remove your profile and associated analytics data from PostHog without undue delay, alongside deletion from our other systems.
We keep personal information for as long as your account is active and as needed to provide the service, comply with law, resolve disputes, and enforce our agreements.
If you create an account but do not subscribe, your account and associated data may be removed automatically after three days.
If you delete your account in the app, we remove your personal data from our systems without undue delay. This includes your profile, roster, swap and friend data, and analytics data in PostHog. Some information may be retained only where the law requires it.
We use reputable providers and reasonable technical and organizational measures to protect personal information, including encryption in transit and access controls through our infrastructure partners.
No method of transmission or storage is completely secure. Please use a unique sign-in code and keep your device secure.
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to certain processing of your personal information, and to data portability where applicable.
You can update much of your profile information in the app. You may withdraw consent for optional features such as notifications or photo access through your device or in-app settings where available.
You can delete your account and personal data at any time from Help & support in Profile. For other privacy requests, contact us using the details below.
If you are in the European Economic Area or UK, you also have the right to lodge a complaint with your local data protection authority. In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).
FlyLUCIA is operated from Portugal. Our primary service providers for account data and app storage use infrastructure in the European Union.
If personal information is processed outside your country, we take steps required by applicable law to protect it, such as using providers in the EU or appropriate safeguards where transfers occur.
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, provides you with specific rights regarding personal information.
Categories collected: identifiers (such as name, email, phone, username); customer records (profile and account information); commercial information (subscription status); internet or app activity (product analytics events); and other information you provide (roster, swap, and support content).
Sources: you, your device, your use of the app, our service providers, and Apple when you use Sign in with Apple.
Purposes: providing the app, authentication, swaps and social features, subscriptions, support, security, internal analytics, and legal compliance.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
Your California rights may include the right to know what personal information we collect and how we use it, to delete personal information, to correct inaccurate personal information, and not to receive discriminatory treatment for exercising these rights.
To submit a request, contact us at the email or Instagram listed below. We will verify your request as required by law.
FlyLUCIA is intended for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, please contact us so we can take appropriate steps.
We may update this Privacy Policy from time to time. When we do, we will revise the effective date and make the updated policy available in the app. Continued use of FlyLUCIA after an update means you accept the revised policy, to the extent permitted by law.
For privacy questions, rights requests, or account-related matters, contact António Aires / FlyLUCIA at customersupport.lucia@gmail.com or @flying.lucia on Instagram. You can also find these details under Help & support in your Profile tab.