Privacy

Who we are

MyFareWatch watches flight fares for the trips you ask us to watch. MyFareWatch runs on cloud services. Our website is delivered through a worldwide network, and the locations of the services we use are listed below. Questions about your information go to privacy@myfarewatch.com, and we aim to respond within 30 days.

What we keep

We collect only the information we need to provide the service.

When you first open the app, we create a guest account for you. It holds your time zone, the currency and region your device uses, and the kind of device. Your device keeps a sign-in token, and we keep it too, with the kind of device and when it was last used.
If you add an email address, we keep your name, email address and password. We keep the password only as a hash, which cannot be read back. To confirm the email we send a code that works for 10 minutes, and we keep only its hash.
Your trips. This includes what you write to the assistant and its replies, as well as each trip's destinations, dates, airlines, budget and other preferences you provide. Its settings, such as how often it is watched and which notifications you want. The results of each watch: the fares the sites showed, with the site, the page's address and the time. If you confirm a home airport, that too.
Notifications. For each browser where you enable notifications, we keep the push address provided by your browser, security keys that allow only that browser to receive your notifications, whether you're using a phone or computer, the app version, and when the browser last connected.
Payments. Only accounts with an email address can buy a pack. Your card details go to Stripe and never reach us. We keep what you bought, the amount, the currency, the date, Stripe's references, the payment's status and the details Stripe sends us about it, such as the name, email and country entered at checkout. We also keep your balance and its history.
Pages of this website. The website's pages, though not the app, set cookies that keep each page secure. They expire after 2 hours, and our server keeps your IP address and browser name with them for that long. Cloudflare, which protects the site, sets a cookie of its own for up to 30 minutes.
Technical logs. Our servers log requests and errors, with the time, the address asked for and the IP address, for a short time, to keep the service running and secure.

What we don't do

We don't use advertising, analytics or tracking tools, and we don't sell or rent your information.
We don't use your location. We may suggest a home airport and currency based on your device's time zone, but we never use GPS.
The app sets no cookies. It keeps your sign-in token and settings in your browser's or phone's own storage.

How we use it

To watch your trips: write each trip's instruction, read the fares, compare them with the last watch and write the result.
To tell you about them, with the notifications and emails you turned on, and notices about your balance.
To answer your questions about your trips, from your own results only.
To take payments and keep your balance.
To keep the service secure, find faults and prevent abuse, for example with limits on messages and sign-in attempts.
To meet legal duties, such as keeping payment records for tax.

We use your information for nothing else.

The AI assistant

The AI assistant uses AI models provided by other companies to understand your trip and write the short summary at the top of each result. We send them:

what you write, the trip as gathered so far, your home airport, region, currency and time zone, and the date;
to answer a question about your trips, a summary of your trips and their latest results;
to write a result's sentence, the fares from that watch.

We never send them your name, email address, password or payment details.

We use OpenRouter to send these requests to the AI company that provides the model. Currently, those companies are Google, Amazon and Anthropic. We use paid models only, and none of these companies uses what we send to train its models. Nothing you write and nothing in your results is used to train any AI, by them or by us. An AI provider may keep a request for a short time to operate its service and prevent abuse, subject to its own privacy terms. Your trip only needs destinations, dates and preferences, so please avoid including anything else in your messages.

These services see some of your information so that MyFareWatch can work:

Laravel Cloud United States

Hosts our app and API. Everything we keep.
Neon United States

Stores our database. Everything we keep.
Cloudflare Worldwide

Protects and delivers the website, checks for bots, and routes email sent to our addresses. Your IP address, browser details and the website's cookies, and email you send us.
Fly.io Australia (Sydney)

Runs the fare watcher. It receives the destinations, dates and airlines needed to search for your trip, but not information that identifies you.
OpenRouter United States and other countries

Run the assistant. What the assistant is sent, above.
Stripe Australia and the United States

Takes payments. What you enter at checkout.
Postmark United States

Sends our email. Your email address and our emails to you.
Sentry United States

Helps us find and fix technical problems. Error reports may include what went wrong, the web address where it happened and your browser type. It does not receive what you sent us, your password or your IP address, though an error's own message can quote what was being handled.
Google, Apple, Mozilla Worldwide

Deliver notifications to your browser. Your browser's push address, and our notifications, encrypted so they cannot read them.

The travel sites the fare watcher reads see it search a trip's route and dates, from our servers, with nothing that identifies you. When you open a link to a booking site, you leave MyFareWatch and that site's own privacy policy applies. Links marked "commission" pass through Travelpayouts, our affiliate partner, which records the click.

We share your information with no one else, unless the law requires it.

Where it is kept

Our servers and database are in the United States. Our fare watcher runs in Sydney, Australia. Some of the services listed above may handle your information in other countries. We use services that keep it secure and use it only to do their job for us.

How long we keep it

Fare results: we delete each watch's fare results 14 days after the watch. The cost of each watch remains in your balance history.
Your account and trips: while your account exists, until you delete a trip or the account. Deleting a trip deletes its messages, instruction, settings and results at once.
A guest account: if you don't use a guest account for 30 days, we delete the account and everything stored in it.
Notifications are deleted when you turn them off, sign out, block them in your browser, or their push service says they have stopped. We then keep only a fingerprint, which cannot be turned back into the address or the keys, for 90 days, so that a stopped subscription is not used again.
Sign-in codes work for 10 minutes.
A website session and the IP address with it: 2 hours.
Payment and balance records stay after you delete your account, for tax and for payment disputes, with your name and email address taken out.

Your choices

Access and change your information. You can view your trips, results, balance and history in the app. You can also change your currency and home airport under Account. For anything else, or a copy of what we hold about you, email us.
Delete a trip from its screen in the app.
Delete your account in the app by going to Account, then Delete account (for a guest without an email address, the button says Delete my data). An account with a password will be asked for it again. Your account and devices will be signed out, and everything in the account will be deleted except the payment records described above. You can also email privacy@myfarewatch.com from the address on the account, and we delete it within 30 days.
Stop notifications in Account, with Unsubscribe on any notification in Chrome, or in your browser's or phone's settings. Each trip's Notify me setting chooses which watches notify you.
Stop emails as each one says.
Sign out on a device to remove its sign-in token and its notifications.

Security

Every connection is encrypted. Passwords and sign-in codes are kept only as hashes. Card details never reach us. Notifications are encrypted for your browser alone. Access to our systems is limited to the people who need it to operate MyFareWatch.

Children

MyFareWatch is for adults. Trips are currently intended for adult travellers only. We do not knowingly keep information about children. If you think we have, email us and we will delete it.

Changes to this page

When what we keep or who sees it changes, we update this page and its date. If a change matters to how your information is used, we tell you in the app or by email before it takes effect.

Questions and complaints

Email privacy@myfarewatch.com. We aim to respond within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.