Privacy Policy
Last updated: 2 October 2026 (draft for legal review)
Lofty ("Lofty", "we", "us") is a focus app. This policy explains what we collect, why we collect it, who we share it with, and the choices you have. We have tried to write it in plain language. If something is unclear, write to us at support@lofty.polaryslab.com.
Who is responsible for your data: Polarys Lab, [COMPANY_ADDRESS].
1. The short version
- We collect what we need to run your flights, sync your passport and handle your subscription. Nothing more.
- We do not sell your data. We do not show ads. We do not use advertising trackers.
- The apps you choose to quiet during flights stay on your phone. We cannot see them.
- We do not collect your location, contacts, photos, microphone or health data.
- You can export or delete your data inside the app at any time.
2. What we collect
Account details. Your first name, your email address (if you sign in with email, Apple or Google) and the sign-in provider ID. If you use "Hide my email" with Apple, we only see the relay address.
Flight data. Your flights (route, seat, focus type, planned and actual duration, completion), the task text you type, planner entries, stamps, settings and recap statistics. Task text is yours, so please avoid typing sensitive information into it.
Subscription data. Which plan you have, trial and renewal dates, and a purchase identifier. Payments are handled by Apple or Google. We never see your card number.
Device and usage data. App version, device model, operating system, language, time zone, crash reports and basic usage events such as "completed a flight". Where the law requires consent, we only collect optional analytics after you agree.
Notifications. A push token, if you turn on reminders, so we can send takeoff reminders.
Fly Together. If you use it, we process the invite code, the name you show to friends, your seat and flight progress, but only for people you have accepted as friends and only during a shared flight.
Support. Anything you send us when you write in.
Quiet apps (Screen Time). On iPhone, the apps you pick are stored by Apple on your device. Lofty receives no list of those apps. On Android, the app uses permissions you grant to detect which app is open and show a reminder. That information stays on the device.
3. How we use it
- To provide Lofty: run flights, keep your passport and planner, sync between devices
- To manage your subscription and restore purchases
- To send reminders you asked for
- To fix bugs, keep the service secure and prevent abuse
- To understand, in aggregate, which features people use so we can improve them
- To answer you when you contact us
- To meet legal obligations
4. Our legal bases (UK and EU)
- Contract: providing the app and your subscription
- Legitimate interests: security, bug fixing and basic product analytics, balanced against your rights
- Consent: optional analytics and push notifications where required. You can withdraw consent in the app settings at any time
- Legal obligation: tax, accounting and legal requests
5. Who we share it with
We use a small number of service providers who process data for us under contract:
| Provider | What for | Data involved |
|---|---|---|
| Supabase | Database, sign-in, sync, realtime | Account and flight data |
| RevenueCat | Subscription status | Purchase identifier, plan status |
| Apple and Google | Sign-in, payments, push delivery | As described by them |
| Mapbox | Map display | Map requests and IP address |
| Sentry | Crash reports | Device and error data |
| PostHog (or similar) | Product analytics, with consent where needed | Pseudonymous usage events |
We may also share information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business (we would tell you first). We do not sell or share personal information for advertising.
6. International transfers
Your data may be processed in countries other than yours, including the United States. When we transfer data from the UK or EU, we rely on approved safeguards such as Standard Contractual Clauses.
7. How long we keep it
- Account and flight data: while your account is open
- When you delete your account: removed from our live systems within 30 days, and from backups within 35 days after that
- Crash and diagnostic logs: up to 90 days
- Billing records: as long as tax law requires (usually up to 7 years), held by the app stores and our payment provider
8. Your rights
Depending on where you live, you can:
- see the data we hold about you and get a copy
- correct it
- delete it
- object to or restrict some processing
- withdraw consent
- move your data to another service
- complain to your data protection authority
In the app: You tab, Privacy and data, then Export my data or Delete account.
By email: support@lofty.polaryslab.com. We reply within 30 days (45 for California residents if we need more time and tell you why).
California (CCPA/CPRA). We do not sell or share your personal information, and we do not use it for targeted advertising. You can ask us to access, delete or correct your information. We will not treat you differently for exercising these rights.
Australia, Canada and others. We handle personal information in line with the Australian Privacy Principles and Canada's PIPEDA. You can ask for access or correction, and you can complain to us first, then to the Office of the Australian Information Commissioner or the Office of the Privacy Commissioner of Canada.
9. Age
Lofty is for people aged 17 and over. We do not knowingly collect data from anyone younger. If you believe a child has given us data, write to us and we will delete it.
10. Security
We use encryption in transit and at rest, access controls, row-level security on our database, and regular reviews. No system is perfectly secure, so please use a strong sign-in method and keep your phone updated. If a breach affects you, we will tell you and the regulator as the law requires.
11. Cookies and our website
The app does not use cookies. Our website is covered by the Cookie Policy.
12. Changes
If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top shows the latest version.
13. Contact
Polarys Lab
[COMPANY_ADDRESS]
support@lofty.polaryslab.com