Short on purpose.

With an account: your email (if you share it — Apple can withhold it), display name, and the Apple/Google identifier you signed in with. As you use Crow: your searches (origin, destination, dates, cabin, travelers), the results we showed, saved trips and destination guides, and any fare watches. For notifications: your device push token. Automatically: basic network data such as your IP address, used transiently to rate-limit, block abuse, and set sensible defaults like currency and your nearest airport. While you're on a trip, with your permission, we use your precise location to find places near you.

No passport numbers, payment details, or government IDs — booking happens with the airline or agency, not on Crow. We don't buy data about you from brokers, and we don't run advertising networks.

Camera and microphone are used for menu/sign translation and conversation mode; this is processed on your device — we don't upload or store your photos, video, or audio.

We process your data to perform the service you asked for (running searches, saving your trips) — that's contract. Security, abuse-prevention, and improving Crow with aggregate, de-identified stats rely on our legitimate interests. The travel affiliate tag runs only on your consent, which you can withdraw anytime.

Crow sets no tracking cookies of its own and stores your cookie choice locally in your browser, not in a cookie. Our CDN (Cloudflare) may set a strictly-necessary security cookie, which is exempt from consent. The only non-essential tag is our travel affiliate partner's script — it loads only if you accept, and you can decline in one click or change it anytime via “Cookie preferences” in the footer.

We use trusted providers who process data on our behalf: Microsoft Azure (hosting, database, and AI generation), Cloudflare (content delivery and security), fare and imagery providers such as SerpAPI and Google (to fetch results and place data), an email provider (to send sign-in and alert emails), and Apple Push Notification service (to deliver alerts). Search parameters go to fare providers because that's how results exist — they get the query, not your identity. We never sell personal data.

Crow is operated by Glyphor, Inc. Your data may be processed in the United States and other countries where our providers operate; where required, transfers rely on appropriate safeguards such as the providers' Standard Contractual Clauses.

Account-linked data lives until you delete it or your account. You can delete your account and data anytime in the app under Profile → Delete account. Anonymous searches are de-identified within 90 days. Deletion requests are completed within 30 days.

If you're in the EU/EEA or UK (and, in substance, wherever you are) you can access, correct, export, delete, restrict, or object to the processing of your data, and withdraw consent. In the app: Profile → Delete account removes everything. You can download a copy of your data anytime at /api/me/export, or email [email protected] and we'll help. You also have the right to complain to your local data-protection authority.

Crow isn't directed to children under 13, and we don't knowingly collect data from them. If you think a child has given us data, email [email protected] and we'll remove it.

If this policy changes in a way that matters, we'll say so on the site before it takes effect — not bury it in a changelog.