Privacy policy

Without an account

You can search flights and save trips without signing up. In that case:

• Your trips, itineraries and preferences (departure airport, light or dark theme) are kept only in your browser (localStorage). We do not receive them.
• To suggest a departure airport on your first visit we use your connection's country and your browser's time zone. We do not store them.
• The “Use my location” button finds the nearest airport inside your browser: your position is not sent to our servers.

With an account

If you sign in with Google or with a link by email, we keep:

• Your email and, if you use Google, your name and profile picture, to identify you and show your account.
• Your trips: the flights you save or the trips you plan by hand, their itineraries, your preferences and the stops you mark as visited, so you have them on all your devices.

When you sign in, the trips you already had in that browser are added to your account. When you sign out, they are removed from the browser and stay in your account.

AI itineraries

To create an itinerary we send an AI service the destination, the trip's dates and times and your preferences (pace, interests, transport). We do not send your name or your email. We use Google Gemini and, when it is not available, Anthropic Claude. Then we check the places with OpenStreetMap (Photon) and Wikipedia.

Services we use

• Vercel: hosts the website and the API.
• Supabase: database and sign-in. Your account data is stored in Frankfurt (European Union).
• Google: sign-in with Google (if you choose it) and itineraries with Gemini.
• Anthropic: itineraries with Claude when Gemini is not available.
• Open-Meteo: finds the towns you type when planning a trip.
• Ryanair and Wizz Air: we check their prices from our server. When you press “Book” you go to their website, where their own privacy policy applies.
• OpenStreetMap, Wikipedia, Wikimedia Commons and ExchangeRate-API: maps, descriptions, photos and exchange rates. Those requests come from our server, without any of your data.

Cookies

We only use the cookies needed to keep you signed in to your account. We use no advertising or analytics cookies.

How long we keep it

Your account data is kept while you have the account. A trip you delete is also deleted from your account. Your IP address is only used briefly to limit the number of itineraries per hour, and it appears in our hosting provider's technical logs, which are deleted periodically.

Your rights

You can ask us for a copy of your data, correct it, delete it (your account included) or object to its use. Write to us and we will answer within one month. If you think we have not handled your data properly, you can complain to the data protection authority of your country.

Children

Lowfly is not meant for children under 16.

Changes and contact

If we change this policy, we will update the date above. For any question about your data, write to us at: