Privacy Policy

Information We Collect

We collect information about you in different ways:

• Account information: We may collect your name, email address, phone number, phone-verification status, and account identifier so we can authenticate you and provide your PointsFly account.
• Personal information: When you contact us, we may collect your name, email, and basic travel details to help you redeem points or plan travel. We never ask for credit card numbers, CVV, or banking passwords.
• Usage Data: We automatically collect information about your interactions with our website, such as pages visited, links clicked, search terms, device type, and browser type. This helps us understand how you use PointsFly and improve our services.
• Subscription information: When you subscribe, we receive the plan, payment provider, product or transaction identifiers, subscription status, renewal status, and access/expiration dates needed to verify and provide your subscription. Your payment details stay with Apple, Google Play, or Razorpay — we never receive them.
• Connected mailbox data: If you choose to connect Gmail or Yahoo Mail, we read only bank transaction alerts and (for Gmail) booking confirmations and loyalty statements, and we keep just the extracted structured details — never the original email messages. See the Email Access section for full details.
• Device and diagnostics: We may receive platform information, push-notification tokens, crash reports, error diagnostics, and support messages or attachments that you choose to send.

How We Use App Permissions

• Location: Used for maps, nearby places, location-based store alerts, and location-aware AIRA answers when you choose to use those features. Background location is used only when Store Alerts are enabled.
• Microphone: Used when you record a voice question for AIRA. The recording is uploaded for transcription and the temporary server file is deleted after processing.
• Camera: Used for supported QR or merchant-scanning features.
• Photos: Used only when you choose a photo or screenshot attachment for a bug report.
• Notifications: Used for reminders, alerts, and other notifications that you enable.

These permissions are optional where the related feature is optional. You can change permission choices in your device settings, although some related features may not work without them.

Subscriptions and Payment Data

Subscriptions are processed by the platform you buy on — Apple on iOS, Google Play on Android, and Razorpay on the web. We receive only what we need to verify your subscription, keep access active across your devices, and respond to renewals, cancellations, refunds, and expirations: the plan, provider, transaction identifiers, status, and renewal or expiry date. We never receive or store your card number or CVV.

How We Use Information

We use the information we collect in various ways, including to:

• Reply to your messages and inquiries
• Help you redeem credit card points for flights and hotel bookings
• Improve and personalize our platform
• Build smarter tools and features
• Send updates about PointsFly

We do not sell, rent, or trade your data. PointsFly makes money by helping you unlock better redemption value—not by selling your information.

How We Protect Your Data

We use standard security practices to protect your information. While no website can promise 100% security, we do our best to keep your data safe and limit access internally.

Third Parties

We may use trusted third-party services for analytics, email communication, hosting, and AI features. These services only get access to what's necessary to do their job and are bound by confidentiality agreements.

Our in-app assistant, AIRA, runs on PointsFly's own rewards data and uses OpenAI as its language engine. When you use AIRA, your message and limited account context are sent to OpenAI only to generate the wording of a response. This data is not used to train AI models, and we never send your full card numbers, security codes, or passwords. See the AIRA & AI section for full details, including the consent we ask for before you first use AIRA.

If you connect Gmail or Yahoo Mail, the extracted records are hosted on AWS and supported bank alerts may be parsed with OpenAI. This data is not used to train AI models, and we never sell or share your email data or use it for advertising, ad targeting, or profiling. See the Email Access section for full details.

If you click external links, those websites have their own privacy policies. We recommend reviewing them separately.

Cookies

We use cookies to understand how you use PointsFly and improve the experience. You can disable cookies in your browser settings if you prefer. The site will still work, but some features may feel limited.

Your Rights

You have the right to:

• Ask what data we have about you
• Request corrections to your data
• Request deletion of your data

Just email us at info@pointsfly.ai and we'll take care of it.

Changes to This Policy

As PointsFly grows, this policy may evolve. If we make meaningful changes, we'll update the date at the top of this page and notify you of any changes.

Contact Us

Have questions about your data or privacy? Contact us at info@pointsfly.ai.