Privacy

Privacy Policy

Effective July 6, 2026

Flockaway helps a group of friends or family plan and share a trip together. We built it to be private by default. This policy explains, in plain language, what we collect, why, who we work with, and the control you have.

Who we are

Flockaway ("Flockaway", "we", "us") is operated by Overwatch Data Services. You can reach us any time at hello@flockaway.app.

What we collect

• Your account. Your email address, which we use to send you a six-digit sign-in code (we do not use passwords), and a display name you choose.
• What you create on a trip. Moodboard ideas, timeline posts, itinerary details, album photos, safety-plan notes, meetup points, and emergency contacts you add, plus the hearts and likes you give. This content is visible to the other members of that trip ("your flock").
• Photos. Images you upload to a trip's moodboard, timeline, or album.
• Location, only if you turn it on. If you choose to share your location on a trip's map, we collect your device's location. See the section below, because we handle it deliberately narrowly.

We do not use third-party advertising or analytics trackers, and Flockaway contains no ad SDKs. We do not build advertising profiles about you.

How location works

The shared map is opt-in and built to collect as little as possible:

• You choose to share. Your location is only collected while you have turned sharing on for a trip.
• Only while the app is open. We use foreground location only. Flockaway does not track you in the background.
• Only your latest spot. We keep only your most recent position, not a history or a trail. Each update overwrites the last.
• Only your flock sees it. Your position is visible only to the members of that trip, never publicly.
• You can stop instantly. Turning sharing off deletes your position immediately.

How we use your information

• To provide Flockaway: to run your trips, show your flock's shared content, and keep the map and album working.
• To sign you in: your email receives a one-time code.
• To deliver invites: when you invite someone to a trip, we email them an invite link.
• To keep the service safe: to act on reports and enforce our rules.

We do not sell your personal information, and we do not use it for advertising.

Who we share it with

We use a small number of trusted service providers to run Flockaway. They process data on our behalf, only to provide their service:

• Supabase hosts our database, authentication, and file storage (in the United States).
• Resend sends your sign-in codes and trip-invite emails.
• Amazon Web Services hosts our website.
• Map tiles load from OpenFreeMap when you open a trip map. This is a standard web request for map imagery and does not require an account.

We do not share your information with advertisers or data brokers. We may disclose information if required by law, or to protect the safety of people using Flockaway.

Where your data lives

Your data is stored in the United States. If you use Flockaway from another country, you are sending your information to the United States for processing.

How long we keep it, and deleting your account

We keep your information for as long as your account exists. You can permanently delete your account and personal data at any time, right from the app. See how to delete your account for the exact steps and what happens to shared trips.

Your choices

• Access and edit your content directly in the app.
• Delete your account whenever you want, with no waiting period.
• Location is yours to control: it is off until you turn it on, and turning it off deletes your latest position.
• Block and report: you can block another member so you no longer see their content, and report a post or idea to the trip's owner.

How we protect your data

Traffic to Flockaway is encrypted in transit (HTTPS). Access to trip data is enforced per-user at the database level, so members only ever see the trips they belong to, and trip photos are stored in private buckets reached through short-lived, signed links.

Children

Flockaway is not directed to children under 13, and we do not knowingly collect personal information from them. Where a higher age of digital consent applies, that age governs. If you believe a child has given us information, contact us and we will remove it.

Changes to this policy

If we change this policy, we will update the page and the effective date above. Material changes will be communicated in the app where appropriate.