Privacy Policy
Effective [effective date]
This policy explains what [Company legal name] ("touchdowned", "we", "us") collects when you use the touchdowned app, the trip pages at touchdowned.app and this website, and what we do with it. It covers two kinds of people: travelers, who use the app, and pickup contacts, whom a traveler asks us to keep posted and who never need the app.
Your mobile number and text message consent.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from every category of sharing in this policy and will not be shared with any third parties. We use mobile numbers only to sign travelers in and to send the flight updates a pickup contact agreed to receive. Our SMS provider processes numbers only to deliver those messages on our behalf.
We do not sell personal information, and we do not use it for advertising.
1. What we collect
From travelers
- Sign-in details: your US mobile number or your email address, and the one-time codes used to verify it.
- Profile: the name you choose to show your pickup contacts.
- Trips: the flights you add (airline, flight number and date) and the reminders you choose.
- Pickup contacts you add: each person's name and the phone number or email address you choose. If you pick someone from your phone's address book, the app opens the system contact picker and reads only the contact you pick. We never upload or read the rest of your address book.
- Subscription status: whether you have a paid plan, which product and when it renews or ends. We never see your card or payment details; Apple or Google handle payment.
- Device push token: if you allow notifications, a token that lets us send push notifications to your device.
From pickup contacts
- Your name, and the phone number or email address the traveler gave us.
- Your consent status: whether you confirmed, opted out or have not answered yet, when, and how (reply YES, tap Confirm, reply STOP or use an opt-out link).
- The texts you send to our number, such as YES, STOP or HELP.
- A record of each message we sent you and whether it was delivered.
From everyone
- Technical data: your IP address, browser or device type and request logs, collected by our hosting and infrastructure providers when you use the app, a trip page or this website. We do not use analytics or advertising trackers, and this website does not set cookies.
- Messages to us: anything you send when you contact support.
Flight data
We get flight status, gate, terminal and aircraft position data from a flight data provider. This is about the flight, not about you, and we send the provider only the flight number and date, never your name or contact details.
2. How we use it
- To sign you in and keep your account secure.
- To send a pickup contact one invitation, and, only after they confirm, the flight updates the traveler chose.
- To show the live trip page and tell the traveler whether each pickup contact has confirmed.
- To honor opt-outs, so someone who replied STOP or opted out gets nothing further.
- To apply plan limits and provide the paid plan.
- To answer support requests, prevent abuse and keep the Service running.
- To meet legal obligations.
We send only transactional messages about a specific flight. We do not send marketing texts, and we do not use pickup contacts' details for anything except that traveler's flight.
3. Who we share it with
We share personal information only with the service providers below, who process it on our behalf under contract and only to provide the Service. Mobile opt-in data and consent are never shared with third parties, as stated above.
| Provider | What they do for us | What they receive |
|---|---|---|
| Supabase | Database, sign-in and server functions | All account, trip and contact data we store |
| Twilio | Sends sign-in codes and flight update texts, receives replies | Phone numbers and message text |
| Resend | Sends sign-in codes and flight update emails | Email addresses and message text |
| AeroDataBox | Flight status and position data | Flight numbers and dates only |
| RevenueCat, Apple, Google | In-app subscriptions | Your touchdowned account ID and purchase details |
| Expo | Delivers push notifications to travelers | Push tokens and notification text |
| Cloudflare | Hosts this website and the trip pages | Technical data such as IP addresses |
| OpenFreeMap | Map images on trip pages | Technical data such as IP addresses |
Within a trip, the traveler sees each pickup contact's name and whether they confirmed, and anyone with a trip link sees the traveler's first name and the flight. We may also disclose information if the law requires it, to protect someone's safety or our rights, or as part of a merger or sale of the business, in which case this policy keeps applying to it.
4. How long we keep it
- Flight status and aircraft positions: deleted 7 days after the flight lands.
- Trip pages: the link stops working 24 hours after landing, or as soon as the traveler stops updates.
- Trips, pickup contacts and message history: kept while the traveler's account is open, so they can see past trips, and deleted when the traveler deletes the account.
- Account and subscription records: kept until you delete your account.
- Opt-outs: our SMS provider keeps a record of numbers that replied STOP so they get no further texts, even if a traveler adds them again.
- Infrastructure logs: kept by our providers for a limited period for security and debugging.
5. Your choices and rights
- Pickup contacts: reply STOP to any text, or use the opt-out link on the trip page or in any email. To have your details deleted from a traveler's trips, email us at [privacy email].
- Travelers: delete a trip or contact in the app, or delete your whole account in the app's settings. Deleting your account deletes everything it owns: your trips, pickup contacts, message history, push tokens and plan record. It does not cancel an App Store or Google Play subscription; cancel that in your store settings.
- Notifications: turn off push notifications in your device settings at any time.
Depending on where you live, including California and other US states, you may have the right to know what we hold about you, get a copy, correct it, delete it, and not be discriminated against for asking. We do not sell or share personal information for cross-context behavioral advertising. To make a request, email [privacy email]. We will verify the request by confirming you control the phone number or email address involved, and respond within the time the law requires.
6. Security
We use encryption in transit, access controls that limit each account to its own data, and unguessable trip links. Provider credentials are kept on our servers, never in the app. No system is perfectly secure, so please keep your trip links private.
7. Children
touchdowned is not for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information, email [privacy email] and we will delete it.
8. Where data is processed
We are based in the United States and store data in the United States. If you use touchdowned from elsewhere, your information is transferred to and processed in the United States.
9. Changes to this policy
We will post any update here with a new effective date, and tell travelers in the app or by email before a material change takes effect.
10. Contact us
[Company legal name]
[Mailing address]
[privacy email]