Privacy Policy

Last updated: 2026-09-19

This policy explains what the Flighter Android app (name.gpm.flighter) does with data. It covers the app only.

The short version: Flighter keeps the flights you follow on your phone. There is no account, no server belonging to us, and — in this version — no flight-data service is contacted at all, because none is configured yet. That, and Flighter’s total lack of any location permission, are named below.

Who is responsible

Gabriele Proietti Mattia is the data controller for the processing described here. Contact: apps@gpm.name.

What leaves your device

Nothing, today.

Flighter is built to look up a flight’s status from a flight-data provider, but no such provider is configured in this version — choosing between the candidates (their coverage, their price, their free-tier limits) is still an open decision. Until one is chosen and wired in, following a flight or opening its card shows only what you typed — its number and the date — and a line saying no source is configured. Nothing is requested from anywhere, and nothing about a flight you follow is sent anywhere.

When a provider is added, this page will be updated first, naming it and saying exactly what a request to it carries — expected to be no more than the flight number and the date, with nothing that identifies you.

Writing in, and reading the answers

Flighter has a report screen — something is wrong, or an idea — and a messages screen where you can read what was written back. Both are optional and neither runs on its own: nothing is sent until you write something and press send.

What a report carries

What you wrote: whether it is a bug or an idea, the title and the description.
What makes it fixable: the app’s version, your Android version, the phone’s manufacturer and model, and your language tag. Typed into the message by the app — none of it is read from an identifier.
A screenshot, only if you pick one. Nothing is captured for you. The picture is shrunk and re-encoded on your phone, and what you see before sending is exactly what leaves it — so if part of the screen has nothing to do with the problem, remove it first.
Your email address, only if you type one. Without it a report is anonymous and cannot be answered; with it, it is how you get a reply.
A random identifier for that single report, so that sending twice on a bad connection is not counted as two. It is not a device id, it is not stored on your phone, and a second report gets a different one.

It goes to apps-management.gpm.name, a service run by the author. It is not shared with anyone, not used to build a profile and not published: reports are read, given a state and answered by hand.

No advertising id and no install id, ever — in a report or anywhere else.

Reading the answers, and the key that costs

A report is answered by email, to the address you typed into it. That is the whole of what is needed, and if you never open the messages screen nothing below applies to you.

That screen shows what you sent and everything written back, without going to find the mail. Since your reports are yours, it has to be sure it is you: it asks for the address and sends a six-digit code there. Once the code is checked the app keeps a key, and it is the one thing here that resembles a login, so it is worth being exact about it:

it hangs from the address you proved, never from your phone — nothing about the device goes into it, two phones that prove the same address get two separate keys, and removing the app throws the key away rather than recovering it;
it works for Flighter only, and opens nothing in any other app;
the service stores a one-way hash of it, not the key itself;
it stops working after a year without use, and Sign out withdraws it at the service and not only on your phone.

Sending a report needs none of this. You can report something having proved nothing, and that report carries no identifier of any kind.

Feature requests and votes

The same screen lists what people have asked for in Flighter, and lets you ask for something and vote. Reading that list costs nothing and needs no address. Asking and voting do, for one reason: one vote per person is a promise, and without something to hang it on the count would mean nothing.

What is published is the request itself, once it has been read. Never your address, and never who voted for what.

What stays on your device

Your watched flights. The flight number and the date, and which alerts you want for it — departure, landing, a delay past a threshold you set, a gate change, boarding — kept so the app knows what to watch. No last-known status is stored yet, because there is nowhere to fetch one from in this version.

All of it is in the app’s private storage and is included in Android’s backup, so a new phone keeps it. Uninstalling removes it, as for any app.

No location, at all

Flighter asks for no location permission of any kind, and this is a choice rather than an oversight: an app about somebody else’s flight has no reason to know where you are. You can check this for yourself in the app’s own permissions, or in Android’s settings — there is nothing to find.

Diagnostics

None, in either build. Flighter has no crash reporting and no usage statistics today, on Google Play or through the F-Droid repository. If that changes, it will be opt-in and named here before it ships.

What the app never does

No account and no sign-up, and no password anywhere. An email address only if you type one in yourself — to be answered about a report, to read those answers in the app, or to vote for a request — and never for anything else.
No account, sign-up or email address.
No advertising, and no sale or sharing of data with anyone.
No tracking, across this app or any other.
No background location, no movement history, no route recording.
No reading of your contacts, messages, call history, photos or files.

For readers in the EU/EEA and the UK: Gabriele Proietti Mattia receives no personal data from this app, so there is no processing on that side to which a legal basis under Article 6 would attach. No flight-data service is contacted in this version, so there is nothing outbound to describe there either.

Retention

A sign-in key stops working a year after you last use it, and is withdrawn the moment you press Sign out. Deleting the app removes the copy on your phone.

Reports are kept while they are useful — an open one until it is answered, a closed one as the record of a decision. A screenshot is part of the report it came with and goes when it goes. Ask and yours is deleted, including the address you sent it from.

Beyond reports, Gabriele Proietti Mattia holds nothing. On your device, your watched flights remain until you remove them or uninstall the app.

Your rights

Under the GDPR you may request access to, correction of, or deletion of your personal data. Because Gabriele Proietti Mattia holds no data about you from this app, there is nothing to access, correct or delete on that side; deleting the local data is done by removing a watched flight or uninstalling the app. You retain the right to lodge a complaint with a supervisory authority.

Write to apps@gpm.name for any request.

Children

Flighter is not directed at children under 13 and knowingly collects no data from them — or from anyone.

Changes

Material changes will be published on this page with a new date at the top, and significant ones will be noted in the app’s changelog.

Last updated: 2026-09-19