Privacy Policy

Account information. When you sign in with Apple, we receive your name and email address (or a private relay address, if you choose to hide your email) and an identifier from Apple.

Collection data. The App stores which houses and copies you own, whether a copy is sealed, its manufacture date, your personal notes, and any flight details you add to a copy.

Social information. If you add friends by email or join a shared collection, we store your friends list, friend requests, and shared-collection membership.

Payment information. Subscriptions are processed by RevenueCat together with the App Store or Google Play. We never see or store your card details.

Usage and device information. We collect basic technical information — device type, OS version, app version, and approximate connection information — to operate and secure the App.

Flight lookups. When you enter a flight number, we send it to our flight data provider to retrieve the route, and use it for no other purpose.

Location (optional). With your permission, we use your location to show houses near you. You can change this anytime in your device settings.

We do not collect advertising identifiers, use third-party analytics or behavioral tracking, or access your photo library, contacts, or messages.

We use the information above to:

• Provide and sync your collection, favorites, and notes
• Enable friends and shared-collection features
• Process your Cabin Collection Pro subscription
• Fulfill flight lookups you request
• Secure the App and prevent fraud or abuse
• Provide support and respond to your requests
• Improve the App's features and reliability
• Comply with legal obligations

If you're in the EEA, UK, or Switzerland, we rely on: the performance of our contract with you, our legitimate interests in operating and securing the App, your consent for optional permissions such as location, and compliance with legal obligations. You can withdraw consent at any time without affecting processing already carried out.

We do not sell, rent, or trade your personal information.

With other users, at your direction. Friends and shared-collection members can see which houses you own and how many copies — never your personal notes or flight details.

With service providers, who access information only as needed to do their job and are contractually bound to keep it confidential: RevenueCat (subscriptions), Apple and Google (sign-in, billing, and maps), Expo (app updates and statistics), our flight data provider, and our cloud host.

We may also disclose information where required by law, or as part of a merger, acquisition, or sale of assets.

We keep account and collection data while your account is active — your collection is also stored on your device and can be removed anytime. Social data is kept while you remain friends or a shared-collection member. Payment records are kept as required by law. Logs are kept only briefly for security purposes. When you delete your account, we delete or anonymize your personal data except where we must retain it for legal reasons.

We encrypt data in transit with TLS, store credentials in your device's secure storage, rely on Apple and Google account security for authentication, and limit data access to authorized personnel and processors. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for processing. To exercise any of these rights, contact us below — we'll respond within the timeframe required by law. You can also lodge a complaint with your local data protection authority.

Clear the App's data or delete the App to remove everything stored on your device. Contact us to delete your account; this removes your account, collection, and social data from our servers, subject to legal retention requirements.

The App isn't directed at children under 13 (or the applicable minimum age in your country, such as 16 in the EEA), and Sign in with Apple enforces its own minimum age. We don't knowingly collect information from children — contact us if you believe a child has given us personal information, and we'll delete it.

Your information may be processed on servers outside your country, including in the United States and the European Union. Where required, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

Questions about this policy or your data? Write to us at support@jstt.me. We aim to respond within a reasonable timeframe, and no later than 30 days.

We may update this policy as our practices, technology, or legal requirements change. We'll update the date above and, where appropriate, notify you in the App. Continued use of the App after changes take effect means you accept the revised policy.