Privacy Policy

Last updated: October 4, 2026

ClauTours ("the app") is a flight-search application. This policy explains what information we collect, why, and what you can do about it. Questions? Email us at [email protected].

What we collect

Account informationFirst name, last name, date of birth, gender, and email address you provide when you register. If you sign in with Apple or Google, we receive your name and email from them instead. Your password is stored only as a cryptographic hash — we never see or store it in plain text.

Usage dataThe flight searches you make (airport, date, direction) and the number of tokens each consumed (your quota balance).

Stored on your device onlyRecent airports, favorites, trip history, and your saved itineraries never leave your device and are not sent to our servers.

Location (optional)If you grant permission, your device location is used to suggest the nearest airport in the picker. It is not sent to our servers or stored.

Purchase statusIf you subscribe, we receive and verify Apple's signed transaction data (product ID, expiry) to unlock your plan. Payment details are handled entirely by Apple — we never see your card.

What we don't collect

No advertising identifiers, analytics trackers, or third-party cookies.
No data is sold or shared for marketing purposes — ever.
No contacts, photos, or other personal content on your device.

Third-party services

To operate the app we rely on a small number of service providers, each limited to what it needs:

A flight data provider — supplies the flight schedule data returned by your searches.
An email delivery provider — sends verification and password-reset codes to your address.
A cloud hosting provider — runs our backend and stores the data described above.
Apple — processes subscriptions and payments through your Apple ID, and optionally signs you in via Sign in with Apple.
Google — optionally signs you in via Google sign-in; our news feed requests public travel headlines from Google News.
GDELT — a public research database that supplies the travel-disruption news feed.

None of these providers receives data beyond what their function requires, and none may use it for their own marketing.

How long we keep data

Account and usage data is kept while your account is active. You can delete your account at any time from Settings → Delete account in the app, which permanently removes your account and associated data from our servers.

Your rights

Depending on your jurisdiction (including the EU/EEA under GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. To exercise any of these, email [email protected]. Account deletion is available directly in the app.

Security

All traffic between the app and our backend uses HTTPS. Passwords are hashed, email-sending credentials and flight-data API keys are held server-side and never embedded in the app.

Children

ClauTours is not directed at children under 13, and we do not knowingly collect their data.

Changes

If this policy changes, we'll update this page and the "last updated" date above. Significant changes will be communicated in-app.

Contact

ClauTours — [email protected] — clautours.com