Privacy Policy

Last updated: 28 September 2026

This policy explains what information AwardInsider collects when you use the website awardinsider.ai and the AwardInsider app, why we collect it, and the choices you have. AwardInsider is operated by Bruno Andrade, based in Australia (“we”, “us”).

What we collect

• Account details: your name and email address. If you sign in with a password on the website, the password is stored only in hashed form by our authentication provider.
• Sign-in codes: when you sign in with a code, we store a hashed version of the code, the email it was sent to, your IP address and the time. Codes expire after 10 minutes and can be used once. We keep these records to prevent abuse.
• Plan and billing status: your plan, subscription status and the customer reference from our payment provider. Your card details are handled by Stripe and never reach us.
• Your alerts and preferences: the airports, routes and cabins you follow, the channels you choose (email, Telegram, push) and settings such as your calendar view.
• Telegram: if you connect Telegram, the chat identifier the bot needs to message you.
• Push notifications: if you allow notifications in the app, the device token Apple gives us to deliver them.
• Technical data: standard server logs kept by our hosting and database providers, such as IP address, browser or device type and time of request.

How we use it

• To provide the service: show availability, keep you signed in and save your alerts and preferences.
• To send the alerts and messages you ask for, by email, Telegram or push notification.
• To manage your plan and billing.
• To keep the service secure and prevent abuse, such as automated copying of our data.

We do not sell your personal information, and we do not use advertising trackers in the website or the app.

Who we share it with

We use trusted providers that process information on our behalf, only as needed to run the service:

• Supabase (database and authentication)
• Vercel (website and server hosting)
• Stripe (payments)
• Resend (email delivery)
• Telegram (bot messages, only if you connect it)
• Apple Push Notification service (push notifications, only if you allow them)
• Cloudflare Turnstile (bot protection on the website sign-in and sign-up forms)
• Kiwi.com image service (airline logos are loaded from it, so it receives your IP address like any image request)

These providers may store data outside your country, including in the United States and other regions. We may also disclose information when required by law.

How long we keep it

We keep your information while your account exists. When you delete your account, we delete your profile, alerts, preferences, Telegram connection and push devices. We keep a minimal record of the deletion (email, name, plan and date) so we can answer billing questions, and our payment provider keeps the billing records it is legally required to keep.

Your rights and choices

• You can see and change your name and preferences in your account, and turn each alert channel on or off.
• You can delete your account at any time in the app (Profile, Delete account) or by writing to us.
• You can ask us for a copy of your data, to correct it, to delete it or to stop a particular use of it.

These rights apply under the Australian Privacy Act 1988 and, where they apply to you, the EU and UK GDPR and Brazil's LGPD. You can also complain to your local data protection authority, such as the Office of the Australian Information Commissioner.

Deleting your account and your subscription

Deleting your account does not cancel a paid subscription. Please cancel your subscription on the website first (Account, Manage subscription), then delete your account.

Children

AwardInsider is not intended for anyone under 16, and we do not knowingly collect information from children.

Changes to this policy

If we make important changes, we will update the date above and tell you by email or in the app.

Questions? Write to support@awardinsider.ai.