1. Data collected & service providers
Supabase (Account & app data): When you sign in with Google or Apple, the email address and account identifier shared by your sign-in provider and any display name you enter in Profile are stored in Supabase. Your saved departure airports, language/currency settings, route price alerts, and outbound booking click records are processed to provide core app features.
Push notifications (Expo Push): When you grant notification permission, your device’s notification registration (Expo push token) is stored to deliver price-drop and alert notifications. Signing out or deleting your account deactivates or deletes this registration.
Product analytics (PostHog): Screen views and feature usage are measured via PostHog. Unless you grant explicit analytics consent during onboarding or in Profile settings, analytics events remain in anonymous mode without being linked to your personal account identifier.
Advertising (Google AdMob & UMP): Ads are served on the Free tier via the Google Mobile Ads SDK. If you turn on Personalized ads (the consent switch at first launch, or Profile → Preferences → Personalized ads), Google may use your device advertising ID and your ad interactions to show more relevant ads; on iOS this also requires your permission in Apple's tracking prompt (App Tracking Transparency). If you leave it off, deny the iOS prompt, or decline in Google's consent form where it is shown, only non-personalized ads are requested. To learn how Google uses data, see How Google uses information from sites or apps that use its services and Google's list of ad technology partners. Premium members see no ads.
Subscription management (RevenueCat): RevenueCat is used to verify Premium entitlements and synchronize App Store / Google Play subscriptions. Payment card details are processed directly by the app stores; WhenGo never receives or stores your payment card numbers.
2. Consent, location & ad preferences
IP-based approximate location (ipapi.co): Automatic IP-geolocation via ipapi.co is never called before onboarding and explicit consent are completed. Without consent, the default departure airport is derived locally from your device region/locale settings (for example, IST for Türkiye, JFK for the United States, YYZ for Canada).
Device GPS location: OS foreground location permission is requested only if you explicitly tap to detect your nearest airport; WhenGo never tracks your location in the background.
Changing your preferences: During first-launch onboarding, the Analytics & ad consent switch defaults to off, and your choice also sets your Personalized ads preference. At any time after onboarding, you can turn off Usage analytics in the app under Profile → Preferences (or App preferences when signed out), which disables account-linked analytics capture and automatic ipapi.co IP-location lookups, and you can turn Personalized ads on or off in the same place.
3. Retention, account deletion & your rights
When you delete your account in the app via Profile → Delete Account, your authentication record, profile, preferences, saved alerts, push tokens, notification history, and in-app search history (the routes, months, and stay lengths you searched) are deleted immediately, while analytics events remain unlinked and anonymous.
Search history. When you search for fares or event flights, we keep the route, month, and stay length you searched, plus (if you are not signed in) a device identifier, on our servers to run the app and to prevent abuse (rate limiting). These records are not shared. Even without deleting your account they are deleted automatically after at most 90 days; event search sessions are deleted when they expire (about 30 minutes). Searches made as a guest before signing in cannot be linked to your account, so they are deleted at the end of the 90-day period rather than at the moment of account deletion.
If you cannot access the app, you may email support@deadpixelworks.com from your registered email address with the subject line "Account deletion". Email deletion requests are processed within at most 30 days. See the Account Deletion page for full details.
You may submit access, correction, deletion, or opt-out inquiries under applicable data-protection laws (including KVKK, GDPR, US state privacy laws, and PIPEDA) to support@deadpixelworks.com.
4. United States (CCPA/CPRA) & Canada (PIPEDA) disclosures
California (CCPA/CPRA) & US state privacy disclosures: In the preceding 12 months, WhenGo has collected the following categories of personal information to operate the app and, if you opt in, to show personalized ads: (a) Identifiers (email address, sign-in provider identifier, optional display name, Expo push token and, only if Personalized ads is on and, on iOS, you allow tracking, your device advertising ID collected by Google's ad SDK); (b) Commercial / entitlement status (Free or Premium subscription tier verified via RevenueCat); (c) Internet or application activity (saved departure airports, route price alerts, outbound booking click records, PostHog product analytics events and ad interaction data); and (d) Coarse geolocation (approximate city/airport region via ipapi.co only when consent is enabled, or one-time foreground GPS nearest-airport lookup when explicitly requested by you).
Sale, sharing and opting out ("Do Not Sell or Share"): Dead Pixel Works LLC does not sell your personal information for monetary consideration. If you turn on Personalized ads, Google may receive your advertising ID and ad interaction data to show more relevant ads, which may count as sharing for cross-context behavioral advertising under the CCPA/CPRA. To opt out, keep Profile → Preferences → Personalized ads off (it is off by default); this stops personalized ad requests, and the choice is saved to your account when you are signed in. On iOS you can also deny or revoke tracking in Settings → Privacy & Security → Tracking, and you can decline in Google's consent form where it is shown. You can also turn off optional analytics and automatic IP-location processing at any time under Profile → Preferences → Usage analytics.
Your US privacy rights & non-discrimination: Residents of California and other US states with applicable privacy statutes have the right to know and access the personal information we hold, request correction of inaccurate information, request deletion (immediately in-app via Profile → Delete Account or by emailing support@deadpixelworks.com), and exercise these rights without discriminatory treatment. Verified requests sent to support@deadpixelworks.com are completed within at most 30 days.
Canada (PIPEDA) disclosures: For residents of Canada, personal information is collected, used, and disclosed only for the identified purposes described in this policy under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You may withdraw consent to optional analytics and approximate IP-location lookups at any time in Profile → Preferences → Usage analytics, delete your account in-app via Profile → Delete Account, or submit an access, correction, or consent-withdrawal request to support@deadpixelworks.com (processed within at most 30 days).