Privacy Policy

§0. Summary

• Vayuh is a flight tracker. To track your flights, we keep:
  • your Google account’s name and email;
  • the flights you add;
  • any trip details you choose to enter;
  • your notification settings.
• If you turn on calendar import, Vayuh reads your calendar on your phone to find flights. Only each flight’s airline, flight number and departure time is sent to Vayuh. Nothing else from your calendar leaves your phone.
• We don’t sell your personal information. We don’t show ads. We don’t use your information for advertising.
• Usage analytics, crash reports and performance data are collected only if you tap Accept. They never include your account, your flights or what you search. You can turn them off at any time in Settings › Analytics.
• You can delete your account and its data in the app (Settings › Delete Account) or at www.vayuh.app/delete-account.

§1. Who we are

Vayuh is provided by Vayuh LLC, a Texas limited liability company, 206 Sarnella Way, Hutto, TX 78634, United States (“Vayuh”, “we”, “us”). We decide how your personal information is used; in EU/UK terms, we’re the “controller”.

• Privacy contact: privacy@vayuh.app.

§2. Your account

You sign in with Google. Google gives us your name, email address, profile photo link and a Google account identifier. Firebase Authentication, a Google service we use, records these, the time you created your account and when you last signed in, and gives you a Vayuh account ID.

On your first sign-in, the app also saves a copy of your name and email in your Vayuh account record.

Your profile photo is loaded from Google when the app shows it.

Why: to create and secure your account, show your profile, and keep your flights in step across your devices.

§3. Flights you track and details you add

When you add a flight, or Vayuh finds one in your calendar, we store it in your account. That record holds:

• the flight’s identifier (airline, flight number and scheduled departure);
• its scheduled times;
• whether you added it or it came from your calendar;
• whether it’s active, archived or deleted;
• when it changed.

If you choose, you can also add:

• your seat and seat type;
• your cabin class;
• whether the trip is for business or leisure;
• your booking reference.

Why: to show the flight and keep it current, send the alerts you asked for, and show the same list on every device signed in to your account.

§4. Flights you delete

When you delete a flight, we keep a short record of it in your account:

• airline and flight number;
• departure date and time;
• departure and arrival airports and our flight-data provider’s reference for the flight, when known;
• when you deleted it.

This stops calendar import, on any of your devices, from adding it again. The record stays until you add that flight back yourself or delete your account.

So that your other devices learn about the deletion, we also keep a deletion marker on the flight for 30 days. It holds only what’s needed to keep the flight deleted on every device: not your seat, seat type, cabin class, travel reason or booking reference.

§5. Analytics, crash reports and performance data, only if you tap “Accept”

When you set up Vayuh, we ask whether you’ll share usage analytics. Unless you tap Accept, none of this is collected. You can change your choice at any time in Settings › Analytics.

If you accept, we use Google Analytics for Firebase, Firebase Crashlytics and Firebase Performance Monitoring. They collect:

• Usage events: for example, which screens you open, which kind of search you ran (by flight or by route), how many results it found, and which settings you change.
  • Events never include your Vayuh account ID, flight numbers or the text you type.
• Device information: app version, device model, OS version, and a random ID for this app installation. Google derives an approximate location (about city level) from a masked IP address. We don’t collect your device’s advertising ID.
• Crash reports: what the app was doing when it crashed, and a random ID for this installation.
• Performance data: app start time, screen rendering, how long network requests take (web addresses without their query details), and your IP address, which Google uses to map performance by region. Firebase also records app sessions for these reports.

We don’t let Google use any of this for advertising.

If you turn analytics off:

• the app stops this collection on that device;
• the app clears the analytics data stored on that device and starts a new analytics ID, so later use can’t be linked to earlier use;
• data already collected is kept for the periods in §10.

§6. Calendar import (optional)

Calendar import is off until you turn it on. Vayuh can find flights in your calendar in two ways.

a) Your phone’s calendar (the Android Calendar permission).

• Which calendars: on your phone, Vayuh reads the calendars that belong to you. It skips hidden calendars, calendars shared with you without owner access, subscribed calendars (holidays, birthdays, feeds), and other people’s calendars you can manage. To tell which calendars are yours, it reads each calendar’s account and owner name, on the phone only.
• What it reads: each event’s title and times (including time zone and repeat rules). It doesn’t read event locations, notes or attendees.
• What it keeps and sends: for each event whose title shows it’s a flight, it keeps the airline, flight number and times on your phone, and sends only the airline, flight number and departure time to Vayuh to track the flight.
• What never leaves your phone: other event titles, all other event details, your calendar names and accounts, and event IDs.

b) Your Google Calendar (only if you tap “Connect” in Settings).

• Access: through Google’s own consent screen, you give Vayuh read-only access to the events on the Google calendars you own (scope https://www.googleapis.com/auth/calendar.events.owned.readonly). Vayuh can’t change your calendar.
• What it reads: on your phone, Vayuh reads your main Google Calendar to find your flights. It reads the events that mention “flight” and the events Gmail adds from your emails, such as flight, hotel and restaurant bookings. For those events it reads the title, location and notes, start and end times, repeat information, whether the event was cancelled, and whether you declined it.
• What it keeps and sends: as with your phone’s calendar, it keeps the airline, flight number and times of the flights it finds on your phone, and sends only the airline, flight number and departure time to Vayuh. Nothing else from your calendar is saved or sent to Vayuh.
• Your access token: Google Play services keeps it on your phone. Vayuh’s servers never receive it, and the servers never connect to your Google Calendar.
• Disconnecting: at any time in Settings, or on your Google Account’s third-party connections page (myaccount.google.com/connections). Deleting your account in the app also revokes access. If you delete your account by email, remove Vayuh’s access yourself on that page.

Both ways:

• History: import looks at past and upcoming events, so past trips can appear in your history.
• Re-reads: while import is on, Vayuh checks your calendar again periodically, and it checks Google Calendar as soon as you tap Connect.
• Turning import off: turning calendar import off or disconnecting Google Calendar doesn’t remove flights already imported. Delete them in the app, or delete your account.

Google API Services User Data Policy: Vayuh’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Information from your Google Calendar is used only to find and track your flights in Vayuh. It’s never used for advertising, never sold, and never used to train AI or machine-learning models. People at Vayuh don’t read it unless you ask us to (for example in a support request), it’s needed for security, or the law requires it.

§7. Notifications

To send flight alerts and live updates to each device, we store, per app installation:

• a push token and the Firebase installation ID;
• whether notifications, flight alerts and live updates are turned on;
• which notification features that version of the app supports;
• which one or two flights its live notification is showing.

We also schedule each flight’s alerts ahead of time, and keep records that stop duplicate notifications.

Firebase Cloud Messaging (Google) delivers notifications. They contain flight details and statuses, and a coded recipient value that isn’t your account ID.

§8. Searching and viewing flights

• Search: your search (airline and flight number, or airports, plus a date) is sent to our servers to find matching flights. Results are cached by search, without your account ID: most for minutes or hours, and none for more than 7 days.
• Viewing: while flights are on your screen, the app tells our servers which ones you’re viewing, so we can refresh them sooner. We record when each flight was last viewed, without your account ID, for 2 days. We also keep, with your account, a usage counter that protects the service from abuse.

§9. What we don’t collect

• Location: Vayuh doesn’t ask for your device’s location. If you accept analytics, Google estimates an approximate (city-level) location from a masked IP address (§5).
• Advertising ID: we don’t collect it.
• Never collected: contacts, photos, files, emails or messages, health data, browsing history, or which apps you’ve installed.
• Ads: Vayuh shows no ads and contains no advertising SDKs.

§10. How long we keep information

Where a period above ends automatically, deletion can complete up to about a day after it ends.

We don’t keep separate backups of your account data, so once it’s deleted it’s gone from our systems within about an hour.

§11. Who we share information with

We don’t sell your personal information. We don’t share it for advertising.

We use these service providers. They process information for us, on our instructions:

Flight and weather data providers. To show flight information, our servers send flight numbers, airline and airport codes and dates to our flight-data providers. To show arrival weather, we send the arrival airport’s map coordinates to our weather provider. These requests come from our servers and never include your name, email, account ID, IP address or anything else that identifies you.

Airline logos in the app are loaded from FlightAware’s website, which receives your device’s IP address and the codes of the airlines whose logos the app shows (in your flights, search results and airline suggestions).

Other recipients:

• Legal and safety: we disclose information when the law requires it, or to protect the rights, safety and security of our users, Vayuh or others.
• Business changes: if Vayuh is sold or merged, your information may transfer to the new owner under this policy. We’ll tell you before a different policy applies.

§12. Where information is processed

Our servers run in the United States: Cloud Functions in Google Cloud’s us-central1 region, and our Cloud Firestore database in the United States.

If you’re in the EEA, the UK or Switzerland, your information is transferred to the United States:

• Google LLC is certified under the EU-U.S. Data Privacy Framework, the UK Extension and the Swiss-U.S. Data Privacy Framework, and also offers Standard Contractual Clauses.

§13. How we protect information

• Data is encrypted in transit (HTTPS/TLS; the app allows no unencrypted connections) and encrypted at rest by Google.
• Each account can read only its own data.
• Our server functions accept requests only from the genuine app (Firebase App Check).
• Deleting an account needs a recent sign-in.
• Your Google Calendar access token is sent only to Google, with each Calendar request, and never to Vayuh’s servers.
• The app’s data is excluded from Android backups.

No system is perfectly secure. If a breach affects you, we’ll tell you as the law requires.

§14. Your choices and rights

In the app:

• Delete your account: Settings › Delete Account. This deletes, from our servers, your account, flights, booking details, deleted-flight records, notification tokens and settings, and removes the app’s data from that phone.
• Delete a flight: in the app.
• Calendar import: turn it off in Settings, or revoke the Calendar permission in Android settings. Disconnect Google Calendar in Settings.
• Analytics: Settings › Analytics.
• Notifications: in Settings or Android settings.

On the web: request account deletion at www.vayuh.app/delete-account.

By email (privacy@vayuh.app): ask for a copy of your data, a correction, deletion, or anything else about your privacy.

• We’ll ask you to write from your Google account’s email address, or to confirm the request by email.
• We answer within one month (EEA/UK) or the time your state’s law sets (for example, 45 days), and we’ll tell you if we need longer.
• Copies of your data are provided by email.

EEA, UK and Switzerland: you have the right to:

• access, correct, delete or port your data (Arts. 15-17, 20);
• restrict or object to its use (Arts. 18, 21);
• withdraw consent at any time (Art. 7(3));
• complain to your data protection authority, or in the UK the ICO.

Everyone, including people in US states with consumer privacy laws (for example Texas or California): wherever you live, you can ask to know, access, correct, delete and get a copy of your information. Those laws also give a right to opt out of the sale of personal information or of targeted advertising; we do neither. We won’t treat you differently for using these rights. If we deny your request, you can appeal by replying to our answer.

Do Not Track: Vayuh doesn’t track you across other companies’ apps or websites, so it doesn’t respond to browser Do Not Track signals.

§15. Legal bases (EEA and UK)

You must provide your Google account details to use Vayuh. Calendar import, booking details and analytics are optional.

§16. Children

Vayuh isn’t for children. You must be 18 or older to use it. We don’t knowingly collect personal information from children under 13 (under 16 in the EEA and UK). If we learn we have, we delete it.

§17. Changes to this policy

We post changes here and update the date at the top. If a change materially affects how we use your information, we’ll tell you in the app or by email before it takes effect.

§18. Contact

Vayuh LLC, 206 Sarnella Way, Hutto, TX 78634, United States. Email: privacy@vayuh.app.