Privacy Policy

This privacy policy applies to the Vyntara app (hereby referred to as "Application") for mobile devices that was created by Lance Goff (hereby referred to as "Service Provider") as a Commercial service. This service is intended for use "AS IS".

Information Collection and Use

The Application collects information when you download and use it. This information may include:

• Your device's Internet Protocol address (e.g. IP address)
• The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
• The time spent on the Application
• The operating system you use on your mobile device

Camera & Photo Access

The Application may request access to your device's camera for the following purposes:

• Non-Rev Pro Verification: To capture a photo of your airline employee ID for identity verification. The photo is uploaded to Vyntara's private secure storage and processed by AI (xAI Grok) for initial review, with manual admin review as a fallback. Verification photos are automatically deleted 30 days after the verification decision is made (approval or rejection). The 30-day retention period exists to support dispute resolution and audit requirements. You may request earlier deletion at any time by contacting hello@vyntara.app. If you submit your ID while offline, the photo is stored only on your device and uploaded to this secure storage automatically once your connection returns; if it still cannot be sent after 7 days, it is deleted from your device and you will be asked to verify again.
• Profile Photo: To take or select a profile photo for your account. Profile photos are stored in Supabase Storage and are associated with your account for as long as it remains active.
• Memory Lane: To photograph boarding passes and travel moments. These photos are stored in Supabase Storage as part of your personal travel history and remain accessible for as long as your account is active. You may delete individual Memory Lane photos at any time from within the Application.
• Support Chat: When you contact us through in-app Support, your messages and any photos or screenshots you attach are stored in our private secure storage (Supabase) and used solely to respond to and resolve your support request. They are visible only to you and our support team — never to other users. You may close or delete your support conversation at any time from within the app.

Camera access is only used when you actively choose to take or upload a photo. The Application does not access your camera in the background.

Crew Schedule Import (Verified Pilots & Flight Attendants)

If you are a verified airline pilot or flight attendant, the Application offers an optional Crew Schedule Import feature that lets you upload a PDF or screenshot of your crew schedule (for example, a CCI or Crew Portal export) so the Application can automatically parse your trips, working flights, deadheads, and layover hotels into your account.

How the upload works:

• What you upload: One or two files per submission (PDF, PNG, JPG, JPEG, or HEIC). You choose the files manually using your device's file picker. The Application never accesses your schedule system, email, or cloud storage on its own.
• Where the file goes first: The file is uploaded over an encrypted connection to Vyntara's private Supabase Storage bucket (named "crew-schedules"), in a folder scoped to your user ID. Only Vyntara's backend service role and you can access this folder. Other Vyntara users cannot see or list it.
• Sending to xAI (Grok) for parsing: Before any file is sent to xAI, the Application shows you a consent screen that names xAI (Grok) as the AI processor and explains what the file will be used for. You must tap "Continue" to proceed. If you tap "Cancel," nothing is sent and no schedule is imported. Once you proceed, the file is read by Vyntara's "parse-crew-schedule" backend function and sent to xAI's Grok service strictly for parsing. xAI processes the file to extract schedule data and does not retain the file or use it to train their models. Crew Schedule Import is not available without using xAI; if you do not want xAI to process your schedule, do not upload one.
• What we keep: After parsing finishes (successfully or unsuccessfully), the uploaded file is automatically deleted from Supabase Storage within 24 hours. The parsed structured data — trip identifier, flight rows (origin, destination, time, role: working / deadhead / commuter), and layover airport/hotel references — is saved to your account in the "crew_trips," "flights," and "crew_layovers" tables and stays there until you delete the trip from within the Application. The raw response from xAI is not stored; only the extracted structured data is kept.
• Deleting imported data: You can delete any imported trip at any time from the Trips view inside the Application. Deleting a trip removes the trip row, the associated flight rows, and any linked layover rows. To request earlier deletion of the underlying upload file, or full deletion of all crew schedule data we hold for you, contact hello@vyntara.app.
• Who can see imported data: Crew schedule data is private to your account. It is not shared with other Vyntara users, advertisers, or analytics providers. The only third-party processor that ever sees your schedule file is xAI (for parsing), and only at the moment you submit it.

Location Data

The Application uses your device's location only when you actively use features that require it:

• Map display: When viewing maps, MapBox temporarily receives your general location solely to render the map view — this data is not stored by Vyntara or used for analytics, advertising, or any other purpose.
• Hotel search: Hotel searches are based on the city or destination you specify, not your current GPS location.

Vyntara does not continuously track or store your location. Location access can be disabled in your device settings at any time.

Push Notifications

The Application uses OneSignal to deliver push notifications such as flight alerts and account updates. When you opt in to notifications, the following data is shared with OneSignal:

• A unique user identifier (your Supabase user ID)
• Your device push token (provided by Apple or Google)
• Basic device information (OS version, app version)

You can disable push notifications at any time through your device's system settings. OneSignal's handling of this data is governed by their own Privacy Policy.

Subscription & Purchase Data

The Application uses RevenueCat to manage subscriptions and in-app purchases. When you subscribe or make a purchase, RevenueCat receives transaction data from Apple or Google (such as purchase receipts and subscription status) to validate and manage your entitlements. Vyntara does not directly collect or store your payment information — all billing is handled through the App Store or Google Play. RevenueCat's handling of this data is governed by their own Privacy Policy.

Hotel Bookings

Vyntara enables hotel reservations through our travel partner LiteAPI (operated by Nuitée). When you complete a hotel booking through Vyntara, the following information is shared with LiteAPI and the hotel you have selected:

• Your full legal name (required by hotels for check-in)
• Email address
• Phone number (if provided)
• Booking dates, room preferences, and guest count
• Special requests you provide

Payment information is handled directly through LiteAPI's PCI-compliant payment processor. Vyntara does not see, collect, or store your payment card numbers, billing address, or other payment-specific information.

LiteAPI is the merchant of record for hotel bookings. Cancellation policies, refund eligibility, and dispute resolution are governed by the hotel's policies and LiteAPI's terms, not Vyntara. Hotels and their staff may use the booking information to provide your stay, contact you regarding your reservation, and meet legal requirements.

For LiteAPI's privacy practices, see their Privacy Policy.

Booking history and confirmation details are retained in your Vyntara account so you can reference past stays. You may delete individual bookings from your account at any time within the Application.

The Service Provider may use the information you provided to contact you from time to time to provide you with important information, required notices, and marketing promotions.

For a better experience, while using the Application, the Service Provider may require you to provide certain personally identifiable information. The information that the Service Provider requests will be retained by them and used as described in this privacy policy.

iOS Waitlist & Email Communications

When you sign up for our iOS waitlist or notification list, we collect your email address for the sole purpose of notifying you about Vyntara product availability and updates. Specifically:

• What we collect: Your email address, the signup source (e.g., iOS waitlist), a record that you affirmatively consented to receive emails, and the timestamp of that consent.
• Why we collect it: To notify you when Vyntara launches on iOS and to occasionally send important product updates.
• How we use it: Email is used only for the communications described above. We do not sell, rent, share, or provide your email address to any third parties, and we do not use it for third-party advertising.
• Consent: We only send you marketing emails if you actively checked the consent box at signup. You can withdraw consent at any time.
• Unsubscribe: Every marketing email includes a one-click unsubscribe link. Once you unsubscribe, we mark your record accordingly and stop all future marketing emails.
• Data retention: We retain your email address until you unsubscribe or request deletion. After that, we delete or anonymize your record within a reasonable time.
• Deletion requests: You may request deletion of your email from our records at any time by contacting hello@vyntara.app.

Your rights (GDPR / CCPA): If you are located in the European Economic Area, the United Kingdom, or California, you have additional rights with respect to your personal data, including the right to access, correct, port, or delete your data (the "right to be forgotten"), the right to restrict or object to processing, and the right to know what categories of personal information we collect and the purposes for which it is used. We do not sell personal information. To exercise any of these rights, contact us at hello@vyntara.app and we will respond within the timeframe required by applicable law.

Third-Party Access

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

Vyntara also collects diagnostic and usage data — such as app performance metrics, crash reports, feature usage, and error logs — to operate, secure, maintain, and troubleshoot the Application.

The Application utilizes the following third-party services, each with their own Privacy Policy regarding data handling:

The Service Provider may disclose User Provided and Automatically Collected Information:

• As required by law, such as to comply with a subpoena or similar legal process;
• When they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• With their trusted service providers who work on their behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.

Use of Artificial Intelligence

The Application uses Artificial Intelligence (AI) technologies provided by xAI (Grok) to power specific features. Each AI feature only sends data to xAI when you actively trigger it, and you are shown an in-app consent screen naming xAI before any data is sent. The current AI-powered features are:

• Non-Rev Pro verification (airline employee ID photo): An automated check that reads your uploaded ID photo and proposes verification. You can opt for manual review instead and skip xAI entirely.
• Crew schedule parsing (verified pilots and flight attendants): An automated parse of an uploaded schedule PDF/screenshot to extract trips, flights, and layovers. See the "Crew Schedule Import" section above for full retention and deletion details.
• Suggested nearby places and travel context: Cached, anonymized prompts that do not include personal identifiers.

xAI processes the data we send strictly to return the requested result. xAI does not retain the inputs or use them to train its models. Vyntara does not store the raw xAI responses; only the structured output the feature needs is saved. All AI processing is performed in accordance with this privacy policy and applicable laws. If you have questions about the AI features or data processing, please contact the Service Provider.

Opt-Out Rights

You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.

Data Retention Policy

The Service Provider will retain User Provided data for as long as you use the Application and for a reasonable time thereafter. If you'd like them to delete User Provided Data that you have provided via the Application, please contact them at hello@vyntara.app and they will respond in a reasonable time.

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.

The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discovers that a child under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider (hello@vyntara.app) so that they will be able to take the necessary actions.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.

Changes

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about our practices, please contact the Service Provider via email at hello@vyntara.app.