Flynomadic - Privacy Policy

Last updated: November 1, 2026

This policy describes how the Flynomadic iOS app handles your data. Flynomadic is published by ByteVoid SAS ("we", "our", "us"). The bytevoid.io website has a separate privacy policy at /legal/privacy.

What Flynomadic is

Flynomadic designs trips. You describe your taste once (the stays you loved, what a room needs to get right, how you like to spend, how much flying a week deserves) and per trip you give a short brief. The app sends that information to our design service, which researches destinations, flights, and stays, and returns complete itineraries.

What we collect

  • Your taste profile: stays you name, room preferences, budget target and cap, spend style, flight tolerance, pace preference, seasonal preferences, things you do, wishlist, after-trip notes and whether you kept or skipped a stay, base city and optional country, travel party, the country of your passport if you choose one, and an optional first name.
  • Trip briefs and results: the origin, date window, party (with children's ages), pace, mood, budget, and free text you submit per trip, and the itineraries designed in response.
  • A device identifier: a random identifier created the first time you open the app and kept in the Keychain, so it survives a reinstall, used to apply fair-use limits. It is not your Apple ID and is not linked to your identity unless you sign in with Apple.
  • Purchase and entitlement data: if you buy a design or a membership, we record which product you bought and the entitlement it grants, linked to your device identifier, so the app can unlock your designs. Payment itself is handled by Apple; we never see your card details. Apple sends our server a signed notice each time a purchase or a subscription changes. This covers purchases, renewals, refunds and cancellations. The notice holds Apple's transaction identifier, the product, the price, the currency and the store country. Our design service keeps each notice without an end date. It also sends a copy to a server we run on Railway. We use the copies to check revenue and refunds. The notice holds no name and no email address. Our app adds no identifier of its own to a purchase.

An account is optional. Without one, we do not collect your name (beyond the optional first name), email, contacts, location, or photos. If you choose to sign in with Apple, see Optional account (Sign in with Apple) below for what that adds. The app does not use the advertising identifier (IDFA) and does not track you across apps and websites owned by other companies. It does measure installs and a few anonymous steps, see Measurement below.

Where your data lives

  • On your device: your taste profile and all trips are stored locally and work offline.
  • On our servers: when you ask for a design, our design service handles your brief and taste profile. Railway Corp. (United States) hosts the service in the Netherlands. The service keeps the design request and its result, linked to your device identifier. Railway keeps server logs. They can hold your device identifier and your IP address. Railway keeps them for 30 days.

Third-party processing

Designing a trip uses three processors on our behalf. Anthropic does AI research and composition (United States). SerpAPI does flight and hotel searches (United States). Railway hosts our servers. Your brief and taste profile, including your passport country if you choose one, are shared with the AI providers solely to design your trip. A search sent to SerpAPI carries the places, the dates and the size of your party, including the ages of children, and no name or contact detail. Apple processes your purchase (a design or a membership) as the payment provider for all in-app purchases; we receive confirmation that a purchase was made, not your card details. None of these providers are permitted to use your data for advertising.

Our alert system sends short messages to a private Telegram chat that only ByteVoid reads. A message can hold a coded reference to a device or to an Apple transaction. Only we can resolve the code. Telegram acts under its own terms and privacy policy.

Our web pages, including this page, and the short link flynomadic.ai pass through Cloudflare, Inc. (United States). Cloudflare sees the IP address and the request details of each visitor. It adds a security script to our pages. The website policy gives details.

International data transfers

ByteVoid SAS is established in France. Some of our providers are outside the European Economic Area and the United Kingdom. For each of them, we use the safeguard in this list. For the EEA, that is the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework. For the UK, that is the UK Addendum to those clauses or the UK extension to the Data Privacy Framework.

For the EEA, each transfer follows Chapter V of the GDPR. For the UK, each transfer follows Article 44A of the UK GDPR and meets the UK data protection test. Under that test, the protection after the transfer must not be materially lower than UK protection.

  • Anthropic Ireland, Limited (Ireland, the contracting entity). EEA: Standard Contractual Clauses. UK: the UK Addendum.
  • Railway Corp. (USA; our servers run in the Netherlands). EEA: Standard Contractual Clauses. UK: clause 9.4 of Railway's data processing terms. It uses the Data Privacy Framework if the recipient is certified, or the UK Addendum to the Standard Contractual Clauses.
  • AppsFlyer UK Ltd (United Kingdom, the contracting entity) and AppsFlyer Ltd (Israel). EEA: Standard Contractual Clauses, where no adequacy decision applies. UK: Standard Contractual Clauses with the UK Addendum. The Addendum names AppsFlyer Ltd (Israel) as importer.
  • Cloudflare, Inc. (USA). EEA: Standard Contractual Clauses, or the EU-US Data Privacy Framework. UK: the UK Addendum.
  • Fastmail Pty Ltd (Australia). EEA: Standard Contractual Clauses. UK: Fastmail names no safeguard yet.

Prices and research

Itineraries include prices researched from public sources at a stated date. They are estimates for your decision, always date-stamped, and should be verified at booking. Bookings happen on third-party sites you choose to open; those sites have their own privacy policies.

Optional account (Sign in with Apple)

You can use Flynomadic without an account. If you choose to sign in with Apple, we store your Apple-provided user identifier. We also store a copy of your taste profile and trips, so your file survives a new phone. The copy is encrypted in transit. We do not ask Apple for your name or email address. We never see your Apple password. Signing out keeps your data on the device; "Delete account." in Settings erases your account, your synced file, and the design records made under your account on devices still linked to it from our servers and, when our server holds the token Apple issued at sign-in and Apple confirms, revokes your Sign in with Apple access, immediately and permanently. A design that is still running at that moment can save its result on our servers afterwards.

Notifications

The app asks for notification permission only in context, to tell you when a design is ready, when it has stopped, or when it is time to come back and look at it. Notifications are optional and can be disabled at any time in Settings.

From version 1.1.6, our server can show the progress of a design on your Lock Screen and in the Dynamic Island (a Live Activity) and send the message that it is ready, through Apple Push Notification service. For this we store a push token for your device and one for each Live Activity. A Live Activity token is deleted when its design ends. The device token is deleted when you delete your data or your account.

Measurement

  • Anonymous counters: the app sends a few anonymous counters to a server we run on Railway Corp. (United States), in the Netherlands, for example the first open after an install, the start of a brief, the steps of a design, a finished design, the first open of a day, the first open of a week and the first saved trip opened in a week. Each counter carries only its name, what triggered it, the app version and build, the platform (iOS), and how the app was installed (App Store, TestFlight or a development build). The last three also carry the number of days since the app was first opened (0 to 30, or 31 for longer). No device, account, trip or purchase identifier travels with it. Like every request, a counter reaches that server with your IP address. Our server does not store it. Railway can keep it in its server logs for 30 days.
  • AppsFlyer: the app uses the AppsFlyer SDK, in its version without the advertising identifier, to count installs and app opens and to see which campaign brought an install. It sends AppsFlyer technical data. This is the device model, the iOS version, the app version and the IP address. It also sends an identifier for this app on your device (IDFV) and an identifier that AppsFlyer creates. AppsFlyer acts as our processor and may not use this data for its own purposes. AppsFlyer sends TikTok a message for each install in our install test. During the test, this covers every install, not only installs from TikTok ads. TikTok uses these messages under its own terms and privacy policy.
  • Apple SKAdNetwork: the app reports installs through Apple's SKAdNetwork, which tells an ad network that an ad led to an install without identifying you.

We use this measurement to know whether our campaigns work (legitimate interest). It never includes your taste profile, your briefs or your trips.

Export and deletion

  • Export: Settings → "Export my data." exports your full profile and all trips as JSON.
  • Deletion: Settings → "Delete everything." removes your profile and trips from the device and, on our servers, this device's design records and (when you are signed in) your synced file, immediately and permanently. With an account, Settings → "Delete account." erases your account, synced file, and the design records made under your account on devices still linked to it from our servers and, when our server holds the token Apple issued at sign-in and Apple confirms, revokes your Sign in with Apple access, immediately and permanently. A design that is still running at that moment can save its result on our servers afterwards. You can also email [email protected] to request deletion.

Legal basis and your rights (GDPR and UK GDPR)

We process your data to provide the service you request (performance of a contract) and to operate fair-use limits (legitimate interest). You have the right to access, correct, export, erase and restrict your data. You can object to processing that rests on legitimate interest. You can complain to us about how we handle your data. Write to [email protected]. We acknowledge each complaint within 30 days. You can complain to your supervisory authority. In France, that is the CNIL. In the United Kingdom, it is the Information Commission (ICO).

Retention

Local data stays until you delete it or remove the app (the device identifier, the identifier of the app's attestation key and, while you are signed in, the sign-in token stay in the Keychain). How long we keep data on our servers. Design requests and results stay until you delete them. Use Settings, or email us. A synced file stays until you delete it or delete your account. A sweep runs each time our server starts. It removes progress records of designs that ended over 30 days ago. It removes cached research older than 14 days. The cache holds places and dates and no device identifier. The sweep also removes a device push token that the app has not refreshed for 90 days. A Live Activity token ends with its design. A sign-in session stops working after 30 days. Three kinds of record stay after you delete your data. They have no end date. They are: a record for your device; the record of your app's attestation key; and Apple's purchase notices. The device record holds the device identifier, your design counts and your purchase. We keep these to stop abuse and to audit purchases. We also keep cost records of designs. They hold token counts and costs, and no link to you.

Children

Flynomadic is not directed at children under 16.

Changes to this policy

We may update this policy. The "last updated" date at the top reflects any changes. Material changes will be posted on this page.

Contact

For questions about this policy, email [email protected].

We host our email at Fastmail Pty Ltd (Australia). When you write to [email protected], Fastmail stores your message. We read your email address and your words. We use them only to answer you and to act on your request. We delete a message if you ask.