Privacy policy

Last updated: 20 October 2026

Airport Tally is an app for collecting the airports you've visited. This policy explains what data it handles, why, and what you can do about it.

Who is responsible

Airport Tally is published by Johannes Winberg, an individual in Sweden, who is the data controller. Contact: support@airporttally.app.

What the app stores, and why

• An anonymous account. On first launch the app creates an account with a random ID. There's no email address or password. We use it to save and sync your data.
• Your sign-in session, with the IP address and app information it came from, kept until you delete your account.
• Your airports. The airports you collect, wishlist or set as home, and when you changed them. This is the app's main purpose.
• Check-ins. When you tap Check in, the app sends your current position to our server once, to compare it with the airport's position. The position isn't stored. We keep only that a check-in happened: the airport, the method (GPS or photo) and the time (for a photo, when it was taken). A photo check-in reads the photo's location and time on your phone and sends them the same way.
• Finding airports in your photos. When you tap Find airports in my photos and then Scan my photos, the app reads the location and date of the photos you've given it access to, on your phone, never the images themselves. Nothing leaves your phone while it looks, and you can stop it at any time. You then choose which airports to verify, and for each one the app sends one photo's position and time, the same way as a photo check-in. The scan never uploads a photo. Your phone remembers when you last scanned, so the next scan reads only newer photos.
• Countries you've marked as visited without an airport.
• Photos you add, with a small thumbnail of each. Their location and other metadata are removed before upload. Whether each photo is public or Only me.
• Your username and flag, if you choose a username. The flag comes from your phone's region setting or your home airport, and you can change it.
• Friends, blocks and reports. Who you're friends with, who you've blocked, and any reports you send about people or photos (the reason, and an optional note).

Who can see what

• Your photos are public by default. Everyone who opens that airport in the app sees them, with your username and flag. Switch any photo to Only me to keep it to yourself. Until you choose a username, all your photos are Only me.
• Your friends can see your username, flag and home airport, and the airports you've collected, including which ones you've checked in at.
• Everyone using the app can see your username, flag, and your collected and verified airport counts on the global leaderboards, unless you turn this off in Profile.
• We look at reported photos and accounts to keep the app safe. We may hide or remove photos, and bar or delete accounts that break the terms of use. A photo reported by three people is hidden until we've reviewed it.

Where the data is kept

• Your data is stored by Supabase in Stockholm, Sweden (EU).
• This website and the support email are run through Cloudflare.
• The app is distributed by Apple and Google under their own privacy policies.
• Our providers keep short-lived technical logs, such as IP addresses, to run and secure their services.
• We don't use analytics, advertising or tracking, and we don't sell or share your data.

Security and providers

• Data travels encrypted (HTTPS). On our server, each account can read only its own data and what the app shows to others, and only the publisher can administer it.
• Three providers process data for us, only to run the service: Supabase (the app's database and photo storage), Cloudflare (this website and the support email) and GitHub (our internal alerts about reports, which include usernames and report reasons).
• They must protect it at least as well as this policy does. Where a provider can reach data from outside the EU, the transfer is covered by the EU's standard contractual clauses or the EU–US Data Privacy Framework.

Legal bases

• Contract: providing the app you asked for under the terms of use: your account, airports, check-ins, photos (including showing public ones to other travelers), friends and boards.
• Legitimate interests: keeping the app safe and fair, through reports, blocks and limits on check-ins.
• Your permission: your phone asks before the app uses your location, camera or photos, and you can withdraw that permission in your phone's settings at any time.

How long we keep it

• Until you delete your account. Deleting it removes your profile, airports, check-ins, marks, photos, friends and blocks.
• Reports: a report you filed about a person stays, without your identity, so moderation records stay complete. Reports about photos are deleted with your account.
• Backups: copies may remain in our provider's backups for up to 30 days before they're overwritten.
• On your phone: the app keeps its data in its own storage, which is deleted when you uninstall it. Your account can't be recovered without the app, so uninstalling also loses access to it.
• An account you leave behind: if you uninstall the app without deleting your account, the account stays until you ask us to delete it. An account without a username holds no name, email or phone number, so we can't tell which one is yours: delete it in the app before you uninstall.

Your rights

Under the GDPR you can ask to access, correct, export or delete your data, to restrict or object to its use, and to withdraw consent.

• Export: the app exports your airports as a CSV file (Profile → Export airports).
• Deletion: delete your account in the app (Profile → Delete account), or see airporttally.app/delete-account.
• Anything else: email support@airporttally.app.
• Complaints: you can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

Children

Airport Tally isn't directed at children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, the new version will be posted here with a new date. Significant changes will also be announced in the app.