Updated
The short version
FLOAT is a travel app for families. We collect what it needs to hold your trip and help when a trip goes wrong, and little else. We don't sell your information, and we don't run ads or ad trackers. Some of what this page covers isn't in the app yet, including sign-in, email import and live flight alerts. We describe them now so the rules are set before they arrive.
You can ask us to show you, export or delete your data at any time by writing to floattravelapp@gmail.com.
Who we are
FLOAT is run by Float Travel, a small team based in the United States. In this policy, "we" means Float Travel. Questions or requests go to floattravelapp@gmail.com.
What this website collects
If you join the waitlist, we keep your email address, when and on which page you signed up, how you found us (for example a link with campaign tags), the wording you agreed to, and whether you confirmed and later unsubscribed.
A bot check from Cloudflare Turnstile runs on the sign-up form. It looks at your browser and connection to tell people from bots. Our host keeps standard server logs, such as IP address and pages requested, for security and to keep the site running.
The site uses no advertising cookies and no tracking pixels. If we add analytics later, we'll pick a privacy-friendly tool and update this page first.
What the app collects
The trip you build: flights, stays, booking references, the travelers on the trip with their names and ages, and any loyalty numbers you choose to add. It also holds what you add during a trip, such as photos of a bag tag or a receipt, notes, and the claim letters the app drafts for you.
Until you sign in, your trip stays on your phone. If you sign in with Apple or Google, we receive the name and email that service shares with us. Apple may give us a private relay address in place of your real one. Signing in lets us store your trip on our servers, so it syncs across devices and you can share it with the other adult on your trip.
If you turn on usage counts, the app sends simple counts, such as "a rescue was started". Those counts carry no trip details.
Confirmation emails
If you forward or paste a booking confirmation, we send its text to an AI model to pull out the details, such as flight numbers, dates and hotel names. You check each field before it's saved. We keep the details you confirm. We delete the email itself after that, because confirmations can contain passport or payment details we don't need.
AI in the app
Rule summaries, amounts, deadlines and letters come from the app's own rules engine. Where the app uses an AI model to read an email or order your options, it sends only what that task needs. We use Google's Gemini API on a paid plan. Google's terms for paid use say it doesn't use those prompts or replies to improve its products.
Who helps us run FLOAT
We share information only with companies that run part of the service for us, and only what each one needs: - Supabase stores accounts, trips and the waitlist, on servers in the United States. - Cloudflare runs our domain and provides the bot check. - Resend will send our emails once we start sending them. - Google provides the Gemini API and Google sign-in. Apple provides Sign in with Apple and push notifications. - When live flight alerts are on, FlightAware receives flight numbers and dates, never names.
We may also share information if the law requires it, or to protect someone's safety. If Float Travel is ever sold or merged, your information would move with the service, and this policy would still apply to it.
Children
FLOAT is for adults planning family trips. A parent can add children to a trip as travelers, with their names and ages. The app isn't meant for children to use on their own, and we don't knowingly collect information directly from children under 13. If you think a child has given us information, write to us and we'll delete it.
Your choices and rights
Wherever you live, you can ask us to show you what we hold about you, send you a copy, correct it or delete it. Write to floattravelapp@gmail.com and we'll answer within 30 days. When accounts arrive, deleting yours will delete your trips too.
Every email we send has an unsubscribe link. If you unsubscribe, we keep your address marked as unsubscribed so we don't add it again by mistake. If you ask us to delete it, we keep only a scrambled copy, so it can never be mailed again.
California residents have rights under the CCPA, including to know, delete and correct, and to opt out of sale or sharing. We don't sell personal information or share it for cross-context advertising.
How long we keep it
Trips and account details stay until you delete them or your account. Deleted data leaves our live systems within 30 days, and our backups cycle out within another 30. Waitlist details stay until you unsubscribe or ask us to delete them. Confirmation emails are deleted once you've checked the extracted details.
Security
Data travels encrypted and is encrypted where we store it. Database rules let each account reach only its own trips, and our secret keys stay on our servers and never ship in the app. No system is perfectly safe. If a breach affects your information, we'll tell you as the law requires.
Changes
When we change this policy, we'll post the new version here with a new date. For a change that matters, such as a new use of your data, we'll also tell you in the app or by email before it takes effect.