Flight Focus Privacy Policy
Effective: 16 October 2026
Information Flight Focus uses
Flight Focus uses the display name you enter, anonymous room/session identifiers, selected origins and destination, itinerary choices, readiness and focus state, timestamps, and connection status to operate a private two-person room. Guest focus does not require an account, email address, advertising profile, or payment information.
Optional accounts and cookies
You may create an optional account to use Shared Passport. The service stores your display name, account and consent timestamps, and opaque session credentials. Local development accounts also store a handle and one-way passphrase verifier; the passphrase is never stored in readable form. Production Google sign-in stores Google’s issuer and stable account subject identifier—not your Google password—and may use the name Google supplies as your display name. Short-lived OIDC transaction data is used to protect the redirect. HTTP-only cookies keep guest-room and account sessions separate. Account sessions have a maximum life of 30 days and can become invalid after 7 days of inactivity; signing out or deleting the account revokes them sooner.
Google account sign-in
When you choose Continue with Google, your browser goes to Google for authentication and returns through Flight Focus’s server. Google may receive technical information such as your IP address, browser, the requested scopes, and the Flight Focus client identifier. Flight Focus requests identity confirmation for sign-in, saving a completed journey, or sensitive reauthentication; the Google client secret remains on the server. Google’s processing is governed by the Google Privacy Policy.
Location
Device location is requested only after you choose the location button. Coordinates are sent once to the Flight Focus server to select a nearby commercial airport. Precise coordinates are not stored in the room or shown to the other participant. If permission is denied, manual search remains available.
Storage and retention
An HTTP-only session cookie restores your anonymous participant slot. Room and session credentials are stored as digests rather than readable bearer values. Rooms expire after 24 hours and are removed by the service’s expiry process; operational encrypted backups may retain expired records until the operator’s backup-retention window ends.
A save invitation expires 24 hours after it is created. If both room participants do not separately agree in time, no Shared Passport is activated and expired unresolved offers are removed by the service’s cleanup process. Security, consent, and operational records may remain where needed to enforce choices, prevent duplication, and operate the service.
Shared Passport data
When both participants independently agree, Flight Focus creates a private two-person Passport. A persistent stamp can include the resolved city and airport, destination, completion time, completed focus minutes, route, playful layovers, travel theme, and public catalog coordinates used to draw route arcs. It does not include live location, precise home location, timer pauses, browsing history, or public social activity. Passport members can also choose a shared weekly goal and timezone. The service calculates weekly progress from completed saved journeys; shared journey contributions are not a competitive ranking.
Passport stamps and goals persist after the anonymous room expires so the two active members can return to them. They remain private to those members and are not used to create a public profile, feed, directory, or partner search.
Google Maps
Google Maps is optional. On a configured deployment, it loads after both participants agree on a destination to show a locked, non-interactive destination-area map with the associated arrival airport pinned. During focus, it also shows a locked in-flight route using the departure, playful layover, and destination airport coordinates shared in the room. Interactive Street View or 3D content is loaded only during an authorized layover or after both focus sessions land. Google may receive technical information such as your IP address, browser, referring site origin, requested map coordinates, and its API key in order to provide that content. Google’s processing is governed by the Google Privacy Policy. Flight Focus does not cache or scrape Google imagery.
Sharing and security
Room state is shared only with the two authenticated room participants. Flight Focus does not sell personal information. The server applies origin checks, private credentials, secure production cookies, request validation, and restricted logs. No internet service can guarantee absolute security.
Your choices
You can use manual airport search instead of geolocation and the static guide instead of Google exploration. In account controls you can export your account, consent, goal, stamp, and rematch data as JSON; hide a journey from your own Passport view and export; leave a Passport; or delete your account after re-authentication. Hiding a journey does not remove the other member’s copy. Leaving does not delete the other person’s account.
Account deletion revokes sessions and removes the reusable handle and passphrase verifier. If the other Passport member remains active, shared journey and consent facts can be retained for that member while your identity is replaced with a neutral “Former partner” label. If no active member remains, the Passport is removed. Operational encrypted backups may retain prior records until the operator’s backup-retention window ends. For privacy requests, email support@kraaven.dev.
Contact
For support or privacy requests, email support@kraaven.dev.