Privacy Policy
Introduction
SoGoJet ("we", "us", "our") shows you flight fares we have checked and hands you to a booking partner when you want to book. This policy explains what we collect when you use the app or the website, why, and who else sees it.
SoGoJet does not take bookings or payments, in the app or on the website. When you book, you do it on our partner’s site, and they collect the traveller and payment details they need under their own privacy policy.
Information We Collect
Account information, if you sign in: your email address, your name if your sign-in provider shares it or you enter it in Settings, and the account identifier our authentication provider issues for you. If you sign in with Apple, Google or TikTok, we receive the identifier and email that provider releases to us, including Apple’s private relay address if you chose to hide your email. We never receive your password for any of those accounts.
Saves and swipes: the destinations you save, and which cards you viewed, skipped or saved. If you are signed in they are stored with your account id, so your saved trips follow you to other devices and your feed is ordered by what you liked. As a guest they stay on your phone.
App events: things like saving a destination or tapping through to our booking partner, with the destination, the route and the screen you were on. These are stored without your account id.
Searches: the text you type into search or the trip planner is used to answer it. It is not stored against your account, but it can appear in our server logs, which we keep for up to 14 days. Text you type into the trip planner or the AI search is sent to Anthropic to write the answer (see below).
Departure airport: the airport you choose, or, if you allow location, the nearest one, worked out on your phone. Your location itself does not leave your phone; the airport code does. It is sent with your requests so we can show fares from it, and it is stored in handoff records.
Device and connection information: app version, operating system version, device model, and your IP address. Your IP address is used to rate-limit abuse and, when you tap through to our booking partner, to estimate roughly where you are connecting from, so we can check whether we may send you to a partner from your state. Our web server logs record IP addresses and the addresses requested, and are kept for up to 14 days.
Identifiers: a random diagnostics ID created when you install the app (shown in Settings), sent with sign-in diagnostics so we can investigate sign-in problems; and, if you allow notifications, your device’s push notification token, stored with your account id when you are signed in.
Crash and performance data: if the app crashes or hangs, Apple’s MetricKit gives us a diagnostic report with your app version, iOS version and device model. It does not include your account id.
Handoff records: when you tap through to our booking partner we record the route, the dates, the number of travellers, the price the card showed you and when that fare was checked, which screen you tapped from, your departure airport, a random click id, and (if you are signed in) your account id. We also store a keyed, daily-rotating hash of your IP address, which tells us “same network twice today” and cannot be turned back into the address without our key. We keep these to know what we are being paid for and to answer a complaint that the app showed one price and the seller charged another.
Bookings, from our partner: our booking partner later tells us, for a click id, whether it led to a booking, and the booking’s value and status, so we can be paid. If you were signed in when you tapped through, we can connect that booking to your account.
What We Do Not Collect
We do not collect your precise location. If you allow location, the app uses it on your phone to pick the nearest departure airport, and only that airport code leaves your phone.
We do not use advertising identifiers, we do not track you across other companies’ apps or websites for advertising, and we do not sell or share your personal information for advertising. There is no advertising SDK in the app.
We do not collect traveller details, card details or billing addresses. Your booking partner does, on their own site.
How We Use Your Information
To order the destinations in your feed from what you have saved and swiped.
To show fares from your departure airport.
To keep your saved trips on every device you sign in on.
To send notifications you allowed.
To detect and limit abuse of our search capacity, and to apply the state check described above before sending you to a partner.
To account for what our partner pays us, and to answer complaints about a price.
To improve the service. We do not use a third-party analytics product; we learn from our own records and logs.
We do not use your information to make automated decisions with legal effects, other than not sending you to a booking partner from a state where we cannot do that yet.
Who Else Sees Your Information
Hostinger: hosts our servers. Our database runs on our own server there, and everything we store about you is stored there.
Clerk: authentication and account management (Sign in with Apple, Google or TikTok). Clerk holds your name, email and sign-in identifiers; we do not hold your sign-in credentials.
Apple, Google and TikTok: if you sign in with one of them, they know you signed in to SoGoJet. Apple also delivers push notifications.
Travelpayouts / Aviasales: our booking partner. When you tap through, we open their site inside the app with the route, the dates, the number of travellers, our partner id and a random click id. Your name, email, account id and phone number are not sent and are not available to them from us. Because their site loads on your phone, they receive what any website receives, such as your IP address and device type. They later tell us whether a click led to a booking, and its value and status, so we can be paid. Each time you tap through, we also send your IP address to Travelpayouts to estimate your location for the state check. Once you are on Aviasales or a seller’s site you are on their service, under their privacy policy, and what you do there is between you and them.
Duffel: we use it to check fares. It receives routes and dates only, never anything about you.
Anthropic: writes trip plans and answers the AI search. It receives the destination, the trip length and style, and any text you type into those features, and never your account details.
Unsplash: destination photos. Your phone loads them from Unsplash, so Unsplash receives your IP address and device information, as any image host does.
Resend: delivers the email we send, such as a reply to you. It receives the recipient address and the message.
We do not currently run any error-reporting service. Our server error monitoring (Sentry) is present in the code but is switched off and receives nothing; if we turn it on, we will update this policy in the same change.
We share information with law enforcement only where we are legally required to, and we will tell you unless we are forbidden from doing so.
Cookies & Local Storage
On the website we use browser localStorage to keep your preferences (departure airport, currency, haptic settings) and session state on your own device. In the app the same preferences, and a guest’s saves, are kept on your phone. We do not use third-party tracking cookies, and there is no advertising or analytics tag on the site.
Your Rights
Access: you can request a copy of the personal data we hold about you.
Deletion: you can delete your account from Settings, or ask us to delete it. Either removes your saved trips, swipes, preferences and push tokens, and cuts your account id from handoff records, within 30 days.
Correction: you can ask us to correct anything we hold that is wrong.
Data export: you can request an export of the data we hold about your account, including saved trips, swipes and handoff records.
Opt-out: you can use the app as a guest without an account. Your saves stay on your phone, but the app still sends the usage, diagnostic and handoff information described above, without an account id.
If you are in California, the EU or the UK, you have these rights under your own law as well, and we do not charge for exercising them or treat you differently for doing so. We do not sell personal information, so there is nothing to opt out of on that front.
Data Retention
We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days.
Handoff records, and what our partner reports about them, are kept for as long as we need them to account for commission and tax, which we expect to be up to seven years. Deleting your account does not delete these records, but it removes your account id from them, so they no longer point to you.
Server logs are kept for up to 14 days.
Aggregate figures that no longer identify anyone (how many people searched a route, how many cards were swiped) may be kept indefinitely.
Contact Us
Questions about this policy, or to exercise any of the rights above: privacy@sogojet.com. We aim to respond within one business day and in any case within the time your law allows.
SoGoJet is currently operated by an individual developer rather than an incorporated company. When an operating entity is formed, its legal name and registered address will be published here.