Privacy Policy

Last Updated: June 27, 2026

Introduction

MatchMyFlight respects your privacy and is committed to protecting it through our compliance with this policy.

This policy describes the types of information we collect when you use the MatchMyFlight mobile app (iOS and Android) and website, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information collected:

• Through the MatchMyFlight mobile app
• On our website at matchmyflight.com
• In email, text, and other electronic communications between you and us

Please read this policy carefully. By using MatchMyFlight you agree to this privacy policy. We may update it from time to time — continued use after changes means you accept those updates.

Information We Collect About You

Personally Identifiable Information (PII) — details that identify you directly, including:

• Name, email address, and phone number
• Profile photograph
• Gender, preferred languages, and age range
• Bank account details (for companions receiving payouts)

Travel Information — details you provide about your journey, including departure and destination airports, layover points, travel dates, confirmation codes, and traveller preferences. This information is used to match you with companions and to power in-app travel guidance.

Device & Usage Information — when you use the app, we may automatically collect your IP address, device type, operating system version, and general usage patterns. This helps us keep the app working reliably.

Firebase Cloud Messaging (FCM) Token — a device-level token generated by Firebase so we can deliver push notifications to you. See the Push Notifications section below.

Location Information — on travel day, the app may request your device's precise GPS location to detect airport proximity. This is explained in full in the Location Data section below.

We also note the following about how we collect information:

• Directly Provided: Information you give us when registering, filling in forms, or contacting support.
• Google Sign-In: If you choose to sign in with Google, we receive your name, email address, and profile photo from your Google account. See Google Sign-In below.
• Phone Verification: Phone numbers are verified using Twilio to send and verify a One-Time Password (OTP).
• Geoapify: We use Geoapify to display location-based airport information on the website.
• No Cookies: We do not use cookies for tracking or advertising purposes.

Location Data (Device GPS)

What we access: Your device's precise GPS location (latitude and longitude), provided through the geolocator Flutter package.

When we access it: Only while the app is open and in the foreground on your travel day ("When In Use" permission only). We do not request background location access, and location is never tracked when the app is closed or minimised.

Why we use it: To automatically detect when you are within approximately 1 km of an airport. This triggers personalised, stage-by-stage in-app guidance for:

• Departure: Check-in, security, and finding your gate
• Layovers: Connecting gate, lounge access, and transfer tips
• Arrival: Immigration, baggage claim, and ground transport options

How long it is kept: Your location data is not stored on our servers. It is processed entirely on your device in real time and is discarded the moment it is no longer needed for the current guidance step.

Platform permissions:

• Android: ACCESS_FINE_LOCATION permission
• iOS: NSLocationWhenInUseUsageDescription — "When In Use" only

How to revoke location access: You can turn off location permission for MatchMyFlight at any time:

• Android: Settings → Apps → MatchMyFlight → Permissions → Location → Deny
• iOS: Settings → Privacy & Security → Location Services → MatchMyFlight → Never

If you revoke location access, the airport proximity detection feature will stop working, but all other app functionality remains available.

Push Notifications

MatchMyFlight uses Firebase Cloud Messaging (FCM), a service provided by Google, to send you push notifications. When you install the app and grant notification permission, a unique FCM device token is generated and registered with our servers. We use this token to send you:

• Flight alerts (delays, gate changes, status updates)
• Companion match requests and approvals
• Travel reminders and in-app guidance prompts
• Account and service notifications

Your FCM token is tied to your device and account. It is not shared with third parties for advertising. You can turn off push notifications at any time through your device's notification settings (iOS: Settings → Notifications → MatchMyFlight; Android: Settings → Apps → MatchMyFlight → Notifications), or from within the app's settings. Turning off notifications does not affect your ability to use any other feature.

Firebase is operated by Google LLC. For more information, see Firebase's Privacy and Security documentation.

Sign In with Google

You may optionally create or access your MatchMyFlight account using Google Sign-In. When you do, Google shares the following information from your Google account with us:

• Your display name
• Your Google email address
• Your Google profile photo (if one is set)

We use this information to create and populate your MatchMyFlight profile. We do not receive your Google password. Your use of Google Sign-In is also subject to Google's Privacy Policy. You can disconnect Google Sign-In by contacting us at support@matchmyflight.com.

AI Assistant ("What's Next" and "Ask AI")

MatchMyFlight includes an AI-powered travel assistant that provides personalised guidance throughout your journey — answering questions and surfacing what to do at each stage of your trip.

When you interact with this feature, the following contextual information is sent to our AI backend to generate a response:

• Your flight route (origin, destination, layover airports)
• Your current travel stage (e.g. pre-departure, at layover, arrived)
• Live flight status information (where available)
• Airport or terminal context

We do not send personally identifying information (such as your name, phone number, email address, or account ID) to the AI backend. Only the trip context needed to generate a useful response is transmitted.

AI-generated responses are for guidance purposes only and should not be treated as definitive advice.

Your conversations with the AI assistant are saved to your account so you can pick up where you left off, and are retained under the same terms as your other account data (see "Data Retention" below).

If a family member you've added to a booking uses the AI assistant while travelling ("Traveller Mode"), their conversation is kept as a separate record tied to that trip, seeded with relevant trip details (flights, gates, check-in progress, any accessibility or pickup arrangements on file) so it can guide them in the moment. To keep that experience simple and uncluttered for the traveller, the app does not show them a history of past messages when they reopen it — but the conversation itself is still retained on our servers, for the same reasons noted above and to help us understand where travellers need more guidance. The account holder who arranged the trip does not have access to this conversation.

Real-Time Flight Status

To keep you informed of your flight's live progress, MatchMyFlight polls a flight status API using your booking confirmation code. This provides up-to-date information on:

• Flight progress and estimated arrival time
• Gate assignments and terminal information
• Delay notifications and schedule changes
• Baggage claim details upon arrival

Your confirmation code is used solely for this purpose and is not shared with third parties beyond what is necessary to retrieve flight status data.

The public tracking link (shareable with family or companions) provides only non-personal flight status information — no traveller names, contact details, or booking prices are included in that view.

Payments

MatchMyFlight processes payments for premium features and companion services through Stripe, a third-party payment processor. When you make a payment:

• Your card details (card number, expiry date, CVV) are entered directly into Stripe's secure payment interface and are never seen, transmitted to, or stored on MatchMyFlight's servers.
• We receive from Stripe only a payment confirmation, a transaction reference, and a redacted card summary (e.g. last four digits and card type) for your records.
• For companions receiving payouts, bank account details are collected and stored securely to facilitate transfers.

Stripe is certified to PCI Service Provider Level 1, the most stringent level of certification in the payments industry. Your use of Stripe is subject to Stripe's Privacy Policy.

How We Use Your Information

We use the information we collect about you for the following purposes:

• To create and manage your account, and to verify your identity via OTP (Twilio)
• To match you with paid companions based on gender, language, travel preferences, and route
• To deliver personalised, stage-by-stage in-app travel guidance (check-in, security, gate, layover, arrival)
• To detect airport proximity using on-device GPS and surface the right guidance at the right moment
• To track your live flight status and notify you of delays, gate changes, or schedule updates
• To power AI-assisted travel responses using your anonymised trip context
• To process payments and issue payouts to companions via Stripe and bank transfers
• To send push notifications about flight alerts, companion activity, and travel reminders (via Firebase)
• To communicate with you by email or phone for support, service updates, and policy changes
• To improve the app and understand how users interact with our features
• To comply with legal obligations and enforce our terms of service
• For any other purpose with your explicit consent

Disclosure of Your Information

We may disclose aggregated, anonymised information about our users without restriction. We may disclose personal information:

• To our subsidiaries and affiliates
• To third-party service providers who support our operations (Twilio, Firebase, Stripe, Google, Geoapify), who are contractually bound to keep your information confidential and use it only for the purposes we specify
• To a buyer or successor in the event of a merger, acquisition, or sale of all or part of Regan Software LLC's assets, where personal information is among the assets transferred
• To other travellers, only with your explicit consent — for example, when you approve a companion match and your contact is shared
• To comply with any court order, law, or legal process, including responding to government or regulatory requests
• To protect the rights, property, or safety of Regan Software LLC, our users, or others

We do not sell your personal information to third parties. We do not share your data with advertisers.

Third-Party Services We Use

The following third-party services process data as part of how MatchMyFlight works. Each has its own privacy policy.

• Twilio — phone number verification via OTP. Twilio Privacy Policy
• Firebase (Google) — push notifications via Cloud Messaging; crash reporting and analytics. Firebase Privacy
• Stripe — payment processing. Stripe Privacy Policy
• Google (Sign-In) — optional account authentication. Google Privacy Policy
• Geoapify — map and location display on the website. Geoapify Privacy Policy

Accessing and Correcting Your Information

You can review and update most personal information directly in the app by visiting your account profile page.

To request access to, correction of, or deletion of your personal information, email us at support@matchmyflight.com. Please note that deleting your personal information requires deleting your account. We may decline to make a change if it would violate a legal requirement or cause the information to become inaccurate.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We also retain information to comply with legal obligations, resolve disputes, and enforce our agreements.

Your on-device GPS location is not retained at all — it is processed in real time and immediately discarded. AI assistant conversations (both your own and, where applicable, a traveller's in-journey conversation) are retained as described in "AI Assistant" above, not deleted at the end of a session.

When you delete your account, we remove your personal information from active systems within a reasonable time, subject to legal or regulatory obligations that may require us to retain certain records.

Data Security

We implement technical and organisational measures designed to protect your personal information from unauthorised access, use, alteration, or disclosure. Payment card data is handled entirely by Stripe and never touches our servers.

No method of transmission over the internet or electronic storage is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential — please do not share your password with anyone.

Children Under the Age of 13

MatchMyFlight is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we may have inadvertently collected information from a child under 13, please contact us immediately at support@matchmyflight.com and we will delete it promptly.

Google Play Data Safety

In accordance with Google Play's Data Safety requirements, here is a summary of data collected and how it is used:

• Precise location — collected on travel day (app in use only); used for airport proximity detection; not shared with third parties; not stored on our servers
• Name, email address, phone number — collected for account creation and identity verification
• Profile photo — collected for profile display and companion matching
• Financial information — payment processing handled entirely by Stripe; we store only transaction references
• App activity and usage data — collected to improve the app experience
• Device identifiers (FCM token) — used to deliver push notifications

Data is not sold to third parties and is not used for advertising.

Changes to This Privacy Policy

We may update this privacy policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If we make material changes to how we treat your personal information, we will notify you through a notice in the app or on our website homepage.

We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Information

If you have questions or concerns about this privacy policy or our data practices, please contact us:

support@matchmyflight.com

Regan Software LLC