Datenschutzerklärung

1. Who is responsible for your data

HyperActives is made and run by The Burrowbridge Group, LLC, a South Dakota limited liability company, at 519 W 22nd St Ste 300 #251343, Sioux Falls, South Dakota 57105-1745, United States. We are the data controller. You can reach us at support@hyperactives.com.

2. What we keep, and where it comes from

Everything below is given to us by you, through the app.

• Your email address. It is your account. We send a six-digit code to it when you sign in, and a note when a forwarded email could not be filed. We also send your trip to it the day before each of your trips, and a copy of a trip whenever you ask for one. If you turn it on, we also tell you there when a forwarded email adds to a trip or changes a booking. You can switch the day-before email and these notes off in Settings › Notifications, and the forwarding note in the Inbox. Now and then we may also send a note or an announcement from HyperActives; you can turn those off in Settings › Notifications › Messages from us, or from the email itself. Replies to your own questions always arrive.
• Your phones and tablets. For each one you sign in on: the platform (iPhone or Android), the app version, when it was added and last used, and a key the app makes so that only that device can use its session. We never see your phone's serial number or advertising identifier, your contacts, your photo library or your location.
• Browsers you sign in on. For each one: a short name for it (such as "Chrome on Mac") and when you signed in and last used it. We keep only a scrambled copy of the cookie's token.
• Passkeys, if you add one. If you add a passkey, we keep its public key, a name for it (such as "iPhone"), and when it was added and last used. Your fingerprint, face or screen lock never leaves your device; we never receive them.
• Your settings. What you choose in Settings, such as your language, so your devices, our emails and our notifications agree. On Automatic we keep the language your app last showed, for the same reason.
• Your trips. The name, home city, dates and tags of each trip; its stops; and each booking you add: kind, name, reference, place, times and, for a flight, the airline, airports, seat, gate and terminal. We keep exactly what you enter, and the app works out the rest on the phone.
• Costs, if you add them. A receipt you type or scan into a trip: the shop or restaurant, the day, the currency, the amount, the lines you keep, how many people it covered and how many of them work pays for, who paid it and who shares it (by the names you give), which payments between you you've marked as settled, and a note. The picture of the receipt stays on your phone; we never store it.
• Costs from your confirmations. When a confirmation you forward or paste states what you paid, or will pay, for a booking, we keep that amount with the booking as a cost on your trip. You can turn this off under Costs.
• A cover photo, if you add one. A photo you choose for a trip's cover, cropped on your phone with its location and camera details removed before we receive it. Only you and the people you share that trip with can see it. Remove it, or the trip, and it is deleted.
• Your home address, if you add one. If you add one in Settings, we keep it on your account to work out when to leave for the airport, and send it to Apple Maps only to find it on the map. Hotel addresses from your bookings are sent to Apple Maps the same way. We never use your phone's location.
• Airports on your trips. To show how the airports on your trips are doing, we look up airport delays and flight boards from FlightAware and the US FAA. We send them airport codes only, never your name, trip or flight. The answers are shared by everyone and kept for at most a day. The weather at an airport comes from Apple Weather, as for your trip's cities, using only the airport's position.
• Trains you follow. When you follow a train, we look up its live times and platform from SNCF's public feed, which we download whole, so nothing about your train is sent. To show a train's timetable days ahead, we ask SNCF for that train by its number and date only; nothing else about you or your trip is sent.
• Forwarded confirmations, if you switch forwarding on. Nothing is read until you turn it on in the app. You then get a private forwarding address, and that address is what tells us the mail is for your account: anything sent to it is read and filed, whichever mailbox it comes from, so keep it to yourself. You can replace it with a new one in the app at any time, and the old one stops working at once. For each email sent to it, we keep the booking it described (kind, name, reference, places and times), the sender's domain (such as ba.com), the subject line, when it arrived, whether it came from your own sign-in address, and what the reader made of it: its confidence in each field, the short pieces of the email it quoted to show where a value came from, and whether we filed it, asked you about it, or set it aside. Once an email is filed, the email itself is not stored. If we could not file it, we keep its text for up to 3 days so you can ask us to read it again, then delete it. We never store the sender's address or any attachment. A confirmation you paste into the app or share to it from another app (its text, a screenshot, or a PDF's text or first page), or a photo or screenshot of a booking you choose, is read and kept in the same way. A link you share is never opened. We never store the picture. We never reply to these emails; if one could not be filed we may tell you at your sign-in address and with a notification, which you can switch off. Turn forwarding off in Settings at any time; the address stops working and the bookings you kept stay.
• Reminders, if you turn them on. Reminders are worked out on your phone from the trips it already holds and are kept on your phone; turning them on sends nothing new to us.
• Your phone's calendar, if you use it. If you add your trips to the calendar on your phone, the app writes them there with your permission, in a calendar of its own or one you choose. When you ask, the app also shows the plans already in your calendar for a trip's days, so you can add them to that trip. Nothing about your calendar is sent to us, except an event you choose to add, which becomes a booking on your trip. The events the app writes are kept with whichever account that calendar belongs to, such as iCloud or Google.
• A calendar link, if you make one. A private address your calendar app reads to show your trips, with references and seats. Anyone who has it can read it; you can stop it in the app at any time.
• A link with MyTravelStatus, another product of ours. If you have an account with both under the same email address, and both have confirmed it, the two link by themselves, and both apps tell you. Neither app sends the other your email address: each turns it into a code only the two apps can work out, and compares codes. When they match, we learn that you have a MyTravelStatus account and which plan you are on there, so we can show the right day counts. HyperActives sends MyTravelStatus the countries and dates of your trips, never airlines, hotels, references or costs, so it can count your days; MyTravelStatus sends back how many days you have left for each trip and, on its Pro plan, what each trip does to the day limits you set there. You can turn the link off in Settings in either app; while it is off, nothing moves either way. Trips already sent stay in MyTravelStatus until you remove them there.
• A trip you share by link, if you choose to. Nothing is shared until you make a link for a trip. Anyone who has the link can then see that trip's flights, stays and dates, and, unless you switch it off, whether a flight you track has left or landed, without signing in. The page never shows booking references, seats, costs or street addresses, and never where the aircraft is. It stops showing the trip when you stop sharing, delete the trip, or 30 days after the trip ends. We keep only a scrambled form of the link, so we cannot show it to you again or to anyone else.
• An expense report you share by link. Anyone with the link sees that trip's costs, never references or addresses. You can stop it at any time, and it stops by itself after 60 days.
• The people on a booking. When a confirmation names travellers, we keep those names with the booking, and remember which name is yours so a companion's booking is not shown as your own. If you say who you travel with on a trip, we keep those names with that trip, so their bookings for those dates join it. They get nothing from us.
• Notes, if you write one. A note you add to a flight is kept with that booking for you alone. It never appears on a shared link, to the people you share trips with, in a calendar feed or in an email. It is deleted with the booking, the trip or your account, and it is included when you export your trips.
• A flight you share live, if you choose to. Nothing is shared until you send a live link for a flight. Anyone who has the link can see that flight's number, cities, times, whether it has left or landed, and its arrival terminal, without signing in. It never shows your name, booking reference, seat, notes or where you are staying, nor where the aircraft is. It stops by itself an hour after the flight lands, or sooner if you stop it or delete the flight. We keep only a scrambled form of the link.
• Your people, if you share. If you invite someone to see your trips, we keep their email address only until they accept, or for 7 days, to send one invitation. Once they accept, we keep who shares with whom, what each person sees (all trips, personal or work), and the name you choose for them to see you by. They see your flights, hotels and plans with times, never booking references, costs, receipts, addresses or forwarded emails. Any trip can be kept to yourself. Either of you can stop at any time, and the other isn't told. You get a reminder every few months of who sees your trips.
• Friends' trips, if you add them. A trip you keep for someone else, such as a friend or a family member: the name you give it and its bookings, kept just as your own trips are. We use them only to show you that trip and to follow its flights for you. They are never sent to MyTravelStatus and never counted as your own travel. We never contact the person, and they get nothing from us.
• What a booking was before it changed. When a later email changes a booking, we keep what it was before (up to ten changes) so you can undo it. If a confirmation states a free-cancellation or payment date, we keep that date with the booking.
• A page to print. When you ask for a printable page of a trip, we make a private page with your booking references that works for 15 minutes.
• Export and import. You can export everything at any time. We record that an export was made, not what was in it. A file you import is read to make your trips and is not kept.
• Sample trips, if you add them. You can add invented sample trips to your own account and remove them whenever you like. They are never shared and never reach your calendar.
• Reset my account. It removes your trips, bookings, costs and links, and keeps the account and its change history.
• A demo, if you try one. You can try the app without an account. A demo holds invented trips and nothing that identifies you. If you add a real trip to it, that is stored with the demo and nowhere else. A demo ends after 24 hours and is deleted within a day of that, or at once when you choose "Sign in with your own account". Text you paste and pictures you scan in a demo are not read or kept; you are shown an invented example instead.
• Your messages with us, if you write to us. What you and we write in Help & support or by email to support@hyperactives.com, with its subject, topic and times. If you tick "Let support see my account details", we see counts and settings at that moment, never what's in your trips. Our emails about a conversation say there's a new reply and link to it. If you write to us by email without an account, our reply comes by email. "Remove" hides a conversation from you; we keep it until the period below ends or you close your account.
• A change history. Each change to a trip is written to a log we keep with your account, so a mistake can be understood and undone. It holds the record as it was, nothing more.
• Error and usage counts. We count errors, sign-ups and requests by kind and day. No addresses, no identifiers, nothing you typed.
• When the app crashes or a screen fails, it sends us a report: the app version, the phone model and system version, and where in our code it failed. It holds nothing from your trips. Reports are kept for 90 days. The same switch turns them off.

Sign-in codes expire within minutes and are stored only as a hash. Rate-limit counters, which stop someone guessing codes or forwarding addresses, are keyed by a hash and are gone within the hour, except a count of wrong sign-in codes, kept while its 24-hour pause lasts, and a count of demos started from a network, kept for up to a day, to stop misuse. Counts of invitations sent, and of each account's flight lookups and receipt pictures, are kept for a day.

3. What we do not do

• No advertising, and no selling or sharing of your data for anyone's marketing.
• No outside analytics or tracking scripts, on this website or in the app. We keep our own counts of which features, screens and buttons are used, never what you type or what's in your trips, under a scrambled code rather than your account. Counts are kept for 90 days, then only totals. Turn it off in Settings › Privacy › Help improve the app. One cookie, and only once you sign in on the website: it keeps you signed in, holds a random token and nothing else, and lasts 30 days or until you sign out.
• No location tracking. The app does not ask for your location.
• Nothing on this website or in the app is loaded from a third party: fonts, maps and images are ours.
• We never ask you to rate, share or invite, and send no promotional notifications. An invitation goes only when you send one.

4. Why we use it

To run the service you asked for: to sign you in, keep your trips, show them on your devices and, when a flight is tracked, tell you about changes. That is the contract between us. We also have a legitimate interest in keeping the service secure (the device keys, the rate limits, the change history), in counting errors and crashes so we can fix them, and in counting which features are used so we can make the app better. You can turn that off at any time in Settings. The MyTravelStatus link rests on our legitimate interest in showing you your day counts; you can object at any time by turning it off in Settings.

5. Who else touches your data

Each of them is bound by a contract that limits what they may do with the data to the job above. We do not sell data, and apart from the MyTravelStatus link described in section 2, we give it to nobody else unless the law requires it.

6. Where your data is

On Cloudflare's platform, which runs in data centres around the world including the United States. If you are in the European Union or the United Kingdom, your data is transferred to the United States under the standard contractual clauses in our contracts with the providers above.

7. How long we keep things

• Your account and everything in it: until you delete it.
• A device: until you remove it in Settings, sign out on it, or a year after it was last used.
• A website sign-in: 30 days, or until you sign out (a demo's ends with the demo).
• Passkeys: until you remove one or delete your account.
• The change history: with the account, and deleted with it.
• Error and usage counts: a year, with nothing personal in them.
• A flight's live link: until an hour after the flight lands.
• Flight records: 90 days after the flight. What a tracked flight was (the plane and its times) stays on your booking until you delete the trip or your account.
• The MyTravelStatus link and the day counts it sent us: until you turn it off, change your email address or delete your account.
• A forwarded email we could not file: 3 days.
• Support conversations: 24 months after the last message, or 12 months for one from an email address with no account. Closing your account deletes them at once.
• A demo account and everything in it: 24 hours, then deleted within a day.

8. Your rights, and deleting your account

You can see and change everything we hold about you in the app. To delete your account, open Settings, then Account, then Delete my account: the account and every record in it are removed at once, from our live database and the change history. If our team deleted the account at your request, we keep a note that it was done, with no address or content. See how to delete your account. If you are in the EU, the UK or a US state with a privacy law, you also have the right to a copy of your data, to correct it, to object to or restrict its use, and to complain to your data protection authority. Write to us at support@hyperactives.com for any of these and we will answer within a month.

9. How we protect it

Every connection is encrypted. A phone's session belongs to that phone and is signed by a key that never leaves it; a website session is a secure cookie that only this site can read. Sign-in codes are short-lived and rate-limited. The change history is chained so that it cannot be altered quietly. HyperActives is operated by The Burrowbridge Group, LLC. Our staff can access your account information and the messages you send us when needed to run the service, help you, and keep it secure. They do not look at your trips, bookings, receipts or forwarded emails.

10. Children

You need to be 18 to use HyperActives on your own. If you are 16 or 17, you may use it with a parent's or guardian's consent. It is not meant for anyone under 16, and we do not knowingly keep an account for anyone under 16; if you believe we have one, write to us and we will delete it.

11. Changes to this policy

When this policy changes in a way that matters, the app will tell you before the change applies. The date at the top is the date of this text.

12. How to reach us

support@hyperactives.com, or by post to The Burrowbridge Group, LLC, 519 W 22nd St Ste 300 #251343, Sioux Falls, South Dakota 57105-1745, United States.