Privacy policy
Last updated: 2 August 2026
1. Business and contact information
This service is operated under the trading name FareLume. Registered legal name: [PLACEHOLDER — legal entity name]. Registered address: [PLACEHOLDER — registered business address]. Company registration number: [PLACEHOLDER — company number, if applicable]. Data controller contact: [PLACEHOLDER — data controller / representative name].
For any privacy question or request, email hello@farelume.com.
2. Information we collect
- Account data: your email address, and — if you sign in with Google — the basic profile information Google returns (name and profile picture, where provided). We never receive your Google password.
- Subscription data: your subscription status, the Stripe customer and subscription identifiers, and the end date of your current billing period.
- Search data: a record of each successful flight comparison you run, including route, dates, passenger count, market and currency, plus a timestamp.
- Technical data: standard server logs and security information generated when your browser contacts our servers.
We do not collect or store your card number, and we do not request access to Gmail or any other Google service beyond email and basic profile.
3. How we use your information
- To create and secure your account and sign you in.
- To run flight comparisons and return results in your chosen market and currency.
- To apply your allowance of 30 flight comparisons per subscription week.
- To manage your subscription, renewals and cancellations.
- To respond to support and privacy requests, and to prevent abuse of the service.
We process this data to perform our contract with you, to meet legal obligations, and for our legitimate interest in operating a secure and functioning service.
4. Stripe, Google authentication and flight data providers
- Stripe processes all payments and stores your card details. We receive only your subscription status, identifiers and period dates. See Stripe's own privacy notice for how it handles payment data.
- Google is used only if you choose “Continue with Google”. We request your email address and basic profile only, and use them to identify your account.
- Flight data provider. Your search terms (route, dates, passengers, market, currency) are sent to a third-party flight data provider that returns live Google Flights results. Your name, email address and payment details are not sent.
- Hosting and database. Our application, authentication and database are hosted by our infrastructure providers on our instructions.
We do not sell your personal data and we do not use it for third-party advertising.
5. Data retention and deletion
- Account and subscription records are kept for as long as your account exists.
- Search history is kept so we can apply your weekly allowance and show your usage. It is retained for [PLACEHOLDER — search history retention period] and then deleted.
- Billing records held by us or by Stripe may be retained longer where tax or accounting law requires it.
- When you ask us to delete your account, we remove your account and search history within [PLACEHOLDER — deletion timeframe], except for records we must keep by law.
6. Your privacy rights
Depending on where you live, you may have the right to:
- Access a copy of the personal data we hold about you.
- Correct data that is inaccurate or incomplete.
- Delete your account and associated data.
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent where processing relies on it.
Email hello@farelume.com to exercise any of these rights. If you are unhappy with our response you may complain to your local data protection authority: [PLACEHOLDER — supervisory authority for your jurisdiction].
7. Cookies and local storage
We use cookies and browser storage that are necessary for the service: keeping you signed in, completing Stripe checkout, and remembering your chosen market and currency. We do not run advertising or cross-site tracking cookies.
8. Security and changes to this policy
Access to your data is restricted by row-level security rules so that you can only read your own records, and traffic is encrypted in transit. No service can promise perfect security.
If we change this policy we will update the date at the top of the page and, where the change is significant, tell you by email.