SkyReview · Privacy policy

Last updated 29 September 2026

SkyReview lets travellers read and write reviews of their flights. This policy explains what information the app uses, why, how long we keep it and the rights you have. We only collect what the app needs to work. It is written for the EU/EEA (GDPR), the UK and California (CCPA/CPRA).

Who we are

SkyReview is run by Ignacio Sanchis Gonzalez, based in the Netherlands, who is the "controller" of your personal data. You can reach us at the contact address at the bottom of this page.

What we collect

Your account: when you sign in with Google (or Apple), we receive your name, email address and profile photo. We create a SkyReview profile with your name, photo and, if you add one, a short bio. We also record when you accepted the terms of use.
Your reviews: the flight you reviewed (airline, route, flight number, aircraft), your star rating, text, any photos and video you add, and when you posted it.
Views: we count how many times each review is shown to other people, to show authors their views. We only store the numbers, never who viewed a review.
Your activity: reviews you mark as helpful, reviews you report (and the reason), and people you block.
Technical data: our hosting and logo providers receive your IP address and basic request details when the app talks to them, as any internet service does.
On your device only: your sign-in session, your language and video-autoplay setting, recent searches, reviews you have not posted yet (with their photos and video), the last airport you explored, which milestones you have seen and short-lived cached flight schedules.
We don't collect your location, contacts, advertising identifiers or payment details. We don't use analytics or advertising tools, and we don't track you across other apps or websites.

What is public

Reviews are public: anyone using SkyReview can see your review together with your name, profile photo, bio and how many reviews you have written.
Your email address is never shown to other users.

Why we use it (legal basis)

To run your account and show your reviews, ratings, rankings and profile — necessary to provide the service you asked for (GDPR art. 6(1)(b), contract).
To keep the community safe and the service working: handling reports and blocks, refusing offensive language, daily posting limits and banning abusive accounts — our legitimate interest in a safe, spam-free app (art. 6(1)(f)).
Photos and camera: with your permission (all photos, or only the ones you pick) the app shows your photos and videos so you can choose some for a review; only the ones you choose are uploaded. It uses the camera and microphone only when you take a photo or video. You can change these permissions in the iPhone Settings at any time.
To meet legal obligations, for example if a court or authority lawfully requires information (art. 6(1)(c)).
We do not sell or share your personal information, and we do not use it for advertising or profiling.

Who helps us run SkyReview

Supabase (database, accounts, photo storage) — hosted in the European Union (Stockholm, Sweden).
Google and Apple — only to sign you in, when you choose them.
AeroDataBox (via RapidAPI) — provides flight schedules. We only send airport codes, dates and flight numbers; no personal information.
Aviasales airline logo service (pics.avs.io) — shows airline logos; it receives your IP address when a logo loads.
Apple Maps — shows the Explore map.
Some of these companies are based outside the EU (for example in the United States). Where your data leaves the EU, they protect it with the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

Your account, profile and reviews: until you delete them.
Delete a review at any time from its ⋯ menu. Delete your whole account from Profile → Delete account: this immediately and permanently removes your profile, reviews, photos, helpful votes, reports and blocks, and withdraws SkyReview's access to your Google account.
Our hosting provider may keep copies in backups for a short time after that, until the backups are overwritten.
Cached flight schedules contain no personal data.

Your rights

You can access, correct and delete your information: edit your bio and reviews in the app, or delete your account there.
You can download a copy of your data in a machine-readable format (JSON) from Profile → Download my data (data portability).
You can object to or ask us to restrict processing based on our legitimate interest.
We answer requests within one month. Email us for anything you cannot do in the app.
You can complain to a data-protection authority — in the Netherlands the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the authority where you live.

California residents

In the last 12 months we collected identifiers (name, email), user content (reviews, photos) and internet activity (IP address), from you and your sign-in provider, for the purposes above.
We do not sell or share personal information and do not use sensitive personal information.
You have the right to know, access, correct and delete your personal information, and we will not treat you differently for using these rights.

Children

SkyReview is not intended for anyone under 16. By signing in you confirm you are 16 or older, and we do not knowingly collect information from children. If you think a child has an account, contact us and we will delete it.

Security

Data is sent over encrypted connections (HTTPS) and protected by access rules so only you can change your own content.

Changes

If we change this policy, we will update it here and change the date at the top. For important changes we will tell you in the app.

Contact

skyreview.app@gmail.com