Privacy policy

last updated · 8 October 2026

This is a translation of the Italian text; if the two differ, the Italian version prevails.

Who processes your data

The data controller is Michelangelo Chiappero, Via Millaures 17, 10146 Torino (TO), P.IVA (VAT number) 12918240016. For any question about privacy, write to privacy@brointheair.com.

What data we process

• Account and sign-in: name, email, password or sign-in with Google, preferences, data about your sessions and about the devices you sign in with. For offline use we keep only the last time you downloaded your trips to your device, and from where (browser, Android app or iPhone app). If we invited you to the beta, also the name and email on the invitation.
• Trips and bookings: the confirmations you forward, paste, photograph or give us the link to, with their attachments, and the bookings, expenses and lists that come from them or that you create.
• Connected mailboxes, if you connect one (up to three): the address, the IMAP server and the app password you give us to read it. In each mailbox we look at emails that arrive after you connect it and, only if you choose to recover your past trips, those from the last 3 years sent by travel senders we know. For each one we read the sender and subject; for those that look like travel confirmations the artificial intelligence provider reads the beginning to decide whether it really is a booking, and we keep only those that are. We keep nothing of the others, not even the subject. We don't send emails, we don't mark anything as read and we don't move or delete anything in your mailboxes.
• Documents: the ones you upload to the Vault, such as your passport or driving licence, with number and expiry date.
• People you travel with: names and seats, and the email of the people you invite.
• Notifications and communications: the alerts we send you, the link to push notifications or to Telegram if you turn them on (in the Android app it's an identifier for your phone that Google's push service gives us), the reports you write to us.
• Location: only when you share it with the Bro to look for something near you.
• Technical and security data: IP address, pages requested and errors.

We don't ask you for special categories of data, such as health data. If you upload documents that contain them, we treat them like any other document.

Why we use it

• To provide the service to you, that is, to perform our contract with you.
• To keep it secure and working, our legitimate interest: logs, errors, app lock, abuse prevention, internal statistics.
• With your consent, which you can withdraw whenever you like: location, push notifications, Telegram.
• To meet legal obligations.

We don't use your data for advertising and we don't sell it.

Internal statistics are only aggregate numbers, such as how many confirmations arrive or how many questions the Bro gets each day: we derive them from the data we already have, without third-party tools, and they can't be traced back to a person. Only the people who run BroInTheAir see them.

Artificial intelligence

To read confirmations and for the Bro's answers we use an artificial intelligence provider in the United States. It receives:

• the content of the confirmations you send us, with their attachments (PDFs and images), including those we read from the connected mailboxes, and the beginning of the mailbox emails that look like travel confirmations, to decide whether they are;
• for the Bro, your question, the latest messages in the chat and the trip data needed to answer: travellers' names, booking details including the location of the booked places (for example hotels and ports), expense balances. For documents, it receives only the type, name and expiry date, not the number or the file. It doesn't receive your phone's location.

Requests are sent with the instruction not to store them. The provider states that it doesn't use this data to train its models and that it may keep it for a limited period for its own security checks. Artificial intelligence can make mistakes: check your bookings, which you can always correct. No decision with legal effects on you is made automatically.

Who sees your data in the app

• The people on your trip, guests included, see bookings, seats, expenses and balances. Guests can't edit bookings and expenses.
• The documents you share with the trip can be seen and downloaded by everyone on the trip, guests included; guests, however, can't add any. Private ones are seen only by you.
• The confirmations you forward are seen only by you; the bookings that come from them are seen by the people on the trip.
• The public link, if you turn it on, shows anyone who has it the dates, times and titles of the stops and the organiser's name, not the names of the others, prices or documents. It stays active until you turn it off.
• “Your world” compares you with other travellers only on the total kilometres flown, without showing who they are, and only when there are at least three people.

Providers

We rely on providers that process data on our behalf, each for what it needs, and that are required to protect it as described here:

• Hosting and backups, in the European Union: all the app's data.
• Email, in the European Union: the confirmations you forward and the emails we send you. The reports and emails you write to BroInTheAir arrive in the controller's mailbox, at an email provider that may also process them outside the European Union.
• Artificial intelligence, in the United States: what is described above.
• Notifications: the push services of Apple, Google or your browser and, if you connect it, Telegram, including outside the European Union. They receive the text of the alerts, which may contain the booking's name, times, codes and seats.
• Sign in with Google, if you use it.
• Error reporting, in the European Union: the technical details of an error, without the content of the request.
• Travel information, maps and searches, including outside the European Union: transport status, weather, exchange rates, maps, addresses, restaurants, photos and entry requirements. They receive the data of the single search, such as a flight number, a city, an address or, if you share it, your location; not your name or your email. If you give us the link to a confirmation, we download that page from the site that publishes it. Maps and some photos are loaded directly by your device, so those services see its IP address.

When a transfer outside the European Union involves personal data, it relies on the safeguards provided for by the GDPR: adequacy decisions, such as the EU-US Data Privacy Framework, or standard contractual clauses. We send the up-to-date list of providers and a copy of the safeguards to anyone who asks for them at privacy@brointheair.com.

The data providers that ask to be credited are listed in Data sources.

How long we keep it

• Account, trips, documents and notifications: for as long as you have the account. Trips, bookings and expenses you delete are erased completely after 30 days; failed jobs in the queue after 30 days.
• Forwarded confirmations: the original file and the attachments are deleted once at least 90 days have passed since the confirmation was imported or discarded and 14 days since the end of the trip it's for. The text is deleted along with the file; the bookings remain.
• Connected mailboxes: address, server and app password of each mailbox remain until you disconnect it from Account → Connected mailboxes, or until you delete your account. When you disconnect a mailbox, they're deleted immediately.
• Sign-in links: valid for 15 minutes. Trip invitations: 30 days. Export of your data: the link is valid for 7 days, then the file is deleted.
• Server logs: 14 days. Backups: up to 30 days.
• Error reports: for the limited period set by the provider.
• Feedback from the app: 90 days. While the app is in testing, when you send feedback we also collect the screenshot, the last actions taken in the app with the data entered, and the device's technical data; we keep them for 90 days and they're used only to fix defects. We never collect passwords or PINs. The text of the report reaches the developers by email.
• Location: it doesn't end up in your account or in the database; in approximate form it stays for at most one hour in the server's temporary memory.
• Chat with the Bro: we don't save it in the database; it stays on your device while the page is open.
• Identifier for push notifications in the Android app: until you sign out of the account on that phone or turn off notifications, or until the push service tells us it's no longer valid.
• On your device: so that the app also works without a connection, your phone keeps a copy of ongoing trips and of those in the next 14 days, of the pages and document files you open, and — if you've chosen a PIN — of a PIN verifier in a form that can't be read, from which the PIN can't be worked out. The copies last at most 30 days (60 for document files) and when you sign out of the account they're all deleted, along with that device's push notifications.

Your rights and deleting your account

You can ask to access your data, correct it, delete it, restrict its use, receive it in a format another app can read, object to processing based on our legitimate interest, and withdraw your consent. You can do a lot of this yourself: you edit bookings and documents, and from Account → Privacy and data you download your data or delete your account. For everything else, write to privacy@brointheair.com: we reply within a month. You can also lodge a complaint with the Garante per la protezione dei dati personali (the Italian Data Protection Authority).

If you delete your account, we immediately delete your account, your documents, forwarded confirmations, notifications, uploaded cover photos, your beta invitation and the connected mailboxes with their passwords. The trips you created disappear for the other travellers too: if you want them to stay, first pass the organiser role to another traveller who has an account. In trips organised by others your name remains, without a link to your account. What you delete may remain for up to 14 days in the logs and up to 30 days in the backups.

If you appear in someone else's trip

If someone forwards a booking you appear in, or adds you to one of their trips, we also process some of your data: name, seat and booking details, and your email if they invite you. We use it only for that trip: the people on the trip see it, it goes through the artificial intelligence provider when we read the confirmation, and it stays for as long as the account of the person organising the trip exists, unless you ask us to delete it. We don't notify you directly because we usually don't have your contact details. To find out what data of yours we have, to correct it or to delete it, write to privacy@brointheair.com.

Minors

BroInTheAir is meant for adults. The data of minors you travel with is entered by the adult who organises the trip.

Cookies

We only use technical cookies, which are needed for sign-in and security, and we save some preferences on your device, such as the theme. No analytics and no profiling. The details are on the Cookies and tracking page.

Security

We take appropriate technical and organisational measures to protect data, including encrypted connections, access control, app lock and protected backups.

If you connect a mailbox, the app password you give us is stored encrypted on our servers, is used only to read mail and never appears in your data export or in our logs. We don't use your account password: providers give you a separate password, which you can revoke with them whenever you like, and in any case you can remove it from Account → Connected mailboxes → Disconnect.

The app lock opens with the fingerprint or face recognised by your device, or with a six-digit PIN that you choose. Your fingerprint and face are recognised by the device and never reach us. In the Android app, when you turn on fingerprint unlock, the phone keeps a key that it uses only after recognising you, and we keep a copy of it to verify its response: you remove it from Account → Sign-in and protection, and it's deleted with the account. All that remains of the PIN on the server is a form that can't be read: we don't know it and we can't work it out. If you forget it, we send you a link to choose a new one, and after a new sign-in the PIN starts again from scratch.

Changes

If we change this policy, we update the date at the top. If the changes are significant, we tell you beforehand, in the app or by email.