Privacy Policy
Last updated 1 November 2026
In short. Your flights, stamps and settings live on your phone. To improve the app we collect usage analytics under a random ID, never your name. If you use group flights, an anonymous ID and your seats are stored on our server for a short time, and other passengers see only your seat, your flag and your stamp count. We don't show ads, sell your data or track you across other apps, and there's no account to create.
Wanderjet ("we", "us", "the app") is made by Ryan Creary in the United Kingdom, who is responsible for the personal data described here. Wanderjet was called Flight Focus until version 2.0; this policy covers both.
What lives on your phone
What you set up and everything you fly is kept in the app's storage on your iPhone:
- the name you give for your boarding pass, your goals, your home city and your daily focus goal;
- your flight history, passport stamps, stickers, streaks and stats;
- your settings, such as notifications, dark mode and globe style.
The app doesn't upload any of this as a record of you. Some of it is summarised in analytics, as described below; your name never is. Deleting the app deletes all of it. It may also be included in your iPhone's own backups, which Apple manages on your behalf.
Group flights
Group flights are optional. If you use them — by opening the Departures tab, booking or boarding a flight, opening your own flights to others, inviting friends or entering a boarding code — the app stores the following on our group-flights server:
- An anonymous account: a random ID the app creates. There's no email address, phone number or name.
- Your seats: which flights you booked or boarded, your seat, and when you booked, boarded, left or landed.
- What other passengers see: your home country's flag (unless you turn it off in Profile) and how many stamps you have.
- Flights you create: the route (between cities on the app's own list), the departure time and length, and the boarding code of an invite. If your home city isn't on the list, your flights leave from the nearest city that is.
Who sees what. People on the same flight see seats, flags and stamp counts — never names. Flights on the departures board and on the globe show their route, times and how many are aboard, not who. Anyone with an invite's boarding code can see that flight's route and times.
How long it's kept. Flights and the seats on them are deleted 7 days after they land. An anonymous account with nothing left on it is deleted after 30 days without use.
Deleting it yourself. Profile → Group flights → Delete my group-flight data deletes your anonymous account and your seats straight away. Flights you opened stay up for anyone still aboard, without a host.
Analytics
To understand how the app is used and what to fix, the app sends usage events to PostHog. For example: which onboarding steps are reached; flights started, landed or cancelled, with their destination and length; paywall views and purchase attempts; which tabs you open and which notifications you tap; group-flight actions; and error reports, which include the error message.
Alongside the events, the app sends some of your choices: your home city (as a code) and country, your daily goal, the goals you picked and what you said usually gets in the way, whether you have Pro and whether notifications are on. Everything is grouped under a random install ID and comes with technical details such as your device model, iOS and app versions, language and time zone.
PostHog also uses the IP address your phone connects from to estimate an approximate location (country and city). We never receive your precise location, and analytics never include your name or anything you type. They aren't used for advertising and aren't linked to who you are.
Subscriptions and purchases
Wanderjet Pro is bought through the App Store, and Apple processes the payment; we never see your payment details. RevenueCat, our subscription service, receives your App Store purchase information under an anonymous ID so the app knows whether Pro is unlocked. RevenueCat also passes subscription events (a trial starting, a renewal, a cancellation or a refund) to PostHog under the app's random install ID, so we can see how subscriptions relate to how the app is used. If you found the app through an Apple Ads ad, Apple tells RevenueCat which campaign and keyword it was, so we can see which ads work; this is Apple's own attribution and doesn't track you across apps or websites. Apple's privacy policy applies to the payment itself: apple.com/legal/privacy.
Permissions
Location (optional, once, during setup)
If you choose "Use my location", your iPhone's location is used once to find your home city, which iOS turns into a city name using Apple's location services. If that doesn't work, the app estimates your city from your IP address using ipapi.co or ipwho.is. Only the resulting city is saved, on your phone. You can pick your city by hand instead; the app works fully without location access.
Notifications (optional)
Break reminders, landings, boarding calls and the daily reminder are scheduled on your phone. Their content isn't sent to us.
Motion
When you look at a stamp or sticker, the app reads your phone's motion so it tilts and catches the light. The readings are used on the spot and never stored or sent.
Who processes data for us
| Service | What for | Where |
|---|---|---|
| Supabase | Group flights: the anonymous account, seats and flights described above | London, UK |
| PostHog | Usage analytics | United States |
| RevenueCat | Subscription status and Apple Ads attribution | United States |
| Apple | App Store payments; turning location into a city name | Apple's infrastructure |
| ipapi.co, ipwho.is | Estimating your city from your IP address, only if "Use my location" can't use your phone's location | Their own servers |
| Vercel | Hosting this website and counting its visits with Vercel Web Analytics, which uses no cookies and doesn't identify you | Global |
Where data is processed outside the UK, it's protected by those providers' standard contractual safeguards.
Your choices and rights
- Turn off your flag, or stop others joining your flights, in Profile → Group flights.
- Delete your group-flight data in Profile at any time, as above.
- Delete everything on your phone by deleting the app.
- Under UK and EU data protection law (and similar laws such as the CCPA), you can ask for access to, correction of or deletion of your data, or object to its use. Email us and we'll help — we'll ask a couple of questions to find your anonymous data, since it isn't tied to your name.
We rely on our legitimate interests to run group flights and to improve the app with analytics, and on our contract with you to provide Pro. You can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
Children
Wanderjet isn't directed at children under 13, and we don't knowingly collect their data.
Changes
If this policy changes, we'll update it here and change the date at the top. Material changes will also be noted in the app's release notes.
Contact
Questions, requests or concerns: ryan00724@gmail.com.