Privacy Policy

Sky Recap ("we," "our," or "us") provides a flight statistics visualization service. This policy explains what data we collect, how we use it, and your rights regarding that data.

Account Information

When you sign in with Google, we receive and store your name, email address, and profile picture. This data comes from your Google account via OAuth 2.0.

Gmail Data (Read-Only)

We request read-only access to your Gmail to search for flight confirmation emails. We only search for emails matching airline and flight-related keywords. We never read, access, or store any other emails. Email content is sent to an AI service for flight data extraction and is not stored after processing.

iCloud Mail Data

If you connect an iCloud Mail account, we store your app-specific password encrypted with AES-256-GCM in our database. This password is used to connect to Apple's IMAP servers to search for flight confirmation emails. As with Gmail, we only search for airline and flight-related emails, and email content is not stored after processing. You can disconnect your iCloud account at any time, which removes the stored password.

Flight Data

We store extracted flight details including airline, flight number, route, dates, cabin class, and booking references. This data powers your flight statistics and recap cards.

Session Data

We store session tokens, IP addresses, and user agent strings for authentication and security purposes.

• Generate your personalized flight statistics and recap cards
• Enable sharing of your flight recap via public links (opt-in)
• Authenticate your identity and maintain your session
• Process flight confirmation emails to extract travel data

We use the following third-party services to operate Sky Recap:

• Google OAuth & Gmail API — Authentication and email access. Subject to Google's Privacy Policy.
• Anthropic (via AWS Bedrock) — Processes email content to extract flight details. Email content is sent to Anthropic's Claude model hosted on AWS Bedrock. Content is processed in transit and is not stored by the AI service.
• Apple iCloud — If you connect an iCloud Mail account, we access Apple's IMAP servers to retrieve flight confirmation emails. Subject to Apple's Privacy Policy.
• Neon (PostgreSQL) — Hosts our database where your account and flight data is stored.
• Vercel — Hosts our application and stores shared recap card images.
• Amazon Web Services (AWS) — Processes email scanning jobs via a message queue. No user data is stored in AWS beyond temporary job metadata.

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data is only shared with the third-party services listed above as necessary to provide the service.

If you choose to share your flight recap, your name, profile picture, and flight statistics are made publicly visible via a unique link. This includes aggregated data such as total flights, distances, and time in the air, as well as route details (airport codes and cities), top airlines, and countries visited.

We use essential session cookies for authentication only. We do not use any analytics, tracking pixels, or third-party advertising cookies. We do not track your browsing behavior.

All data is transmitted over HTTPS. OAuth tokens are stored encrypted in our database. iCloud app-specific passwords are encrypted with AES-256-GCM before storage. We use refresh tokens with offline access to maintain your Google connection without storing your Google password.

Your data is retained as long as your account is active. You can request complete deletion of your account and all associated data at any time by contacting us at support@skyrecap.com. Upon deletion, all your flight data, session data, and OAuth tokens are permanently removed from our systems.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Revoke Gmail access at any time from your Google Account settings
• Export your flight data

Sky Recap is not intended for use by anyone under 13 years of age. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be communicated via email or a notice on our website. Continued use of Sky Recap after changes constitutes acceptance of the updated policy.

For questions about this privacy policy or your data, contact us at support@skyrecap.com.