Privacy policy

1. Who is responsible for your data

HyperActives is made and run by The Burrowbridge Group, LLC, a South Dakota limited liability company, at 519 W 22nd St Ste 300 #251343, Sioux Falls, South Dakota 57105-1745, United States. We are the data controller. You can reach us at support@hyperactives.com.

2. What we keep, and where it comes from

Everything below is given to us by you, through the app.

• Your email address. It is your account. We send a six-digit code to it when you sign in, and nothing else unless you write to us.
• Your phones and tablets. For each one you sign in on: the platform (iPhone or Android), the app version, a name for it if you give one, when it was added and last used, and a key the app makes so that only that device can use its session. We never see the device's identifiers, contacts, photos or location.
• Your trips. The name, home city, dates and tags of each trip; its stops; and each booking you add: kind, name, reference, place, times and, for a flight, the airline, airports, seat, gate and terminal. We keep exactly what you enter, and the app works out the rest on the phone.
• Costs, if you add them. A receipt you type or scan into a trip: the shop or restaurant, the day, the currency, the amount, the lines you keep, how many people it covered and how many of them work pays for, and a note. The picture of the receipt stays on your phone; we never store it.
• A change history. Each change to a trip is written to a log we keep with your account, so a mistake can be understood and undone. It holds the record as it was, nothing more.
• Error counts. When something goes wrong on our server we count it by kind and day. No addresses, no identifiers, nothing you typed.

Sign-in codes expire within minutes and are stored only as a hash. Rate-limit counters, which stop someone guessing codes, are keyed by a hash too and are gone within the hour.

3. What we do not do

• No advertising, and no selling or sharing of your data for anyone's marketing.
• No analytics or tracking scripts, on this website or in the app. No cookies on this website.
• No location tracking. The app does not ask for your location.
• Nothing on this website or in the app is loaded from a third party: fonts, maps and images are ours.
• No requests to rate, share or invite, and no promotional notifications.

4. Why we use it

To run the service you asked for: to sign you in, keep your trips, show them on your devices and, when a flight is tracked, tell you about changes. That is the contract between us. We also have a legitimate interest in keeping the service secure (the device keys, the rate limits, the change history) and in counting errors so we can fix them.

5. Who else touches your data

Each of them is bound by a contract that limits what they may do with the data to the job above. We do not sell data, and we give it to nobody else unless the law requires it.

6. Things that are planned, and what will change here when they ship

None of the following is in the app today. Before any of it is switched on, this page will say exactly what it does and you will be asked in the app first.

• Forwarding a confirmation email. The email would be read by an AI model (Claude, made by Anthropic) to pull out the booking, with your consent, and the email itself would be dropped once it is read.
• Scanning a boarding pass or sharing a PDF. Read on the phone; the document kept with the booking.
• A photo as a trip's cover. Cropped on the phone with its location and camera data removed before it is stored.
• A link with MyTravelStatus, another product of ours. Only if you connect the two: HyperActives would ask MyTravelStatus whether a coming trip fits within your remaining days in a country, and show the answer. No travel history would move in either direction.

7. Where your data is

On Cloudflare's platform, which runs in data centres around the world including the United States. If you are in the European Union or the United Kingdom, your data is transferred to the United States under the standard contractual clauses in our contracts with the providers above.

8. How long we keep things

• Your account and everything in it: until you delete it.
• A device: until you remove it in Settings, sign out on it, or a year after it was last used.
• The change history: with the account, and deleted with it.
• Error counts: a year, with nothing personal in them.

9. Your rights, and deleting your account

You can see and change everything we hold about you in the app. To delete your account, open Settings, then Account, then Delete my account: the account and every record in it are removed at once, from our live database and the change history; see how to delete your account. If you are in the EU, the UK or a US state with a privacy law, you also have the right to a copy of your data, to correct it, to object to or restrict its use, and to complain to your data protection authority. Write to us at support@hyperactives.com for any of these and we will answer within a month.

10. How we protect it

Every connection is encrypted. A session belongs to one device and is signed by a key that never leaves it. Sign-in codes are short-lived and rate-limited. The change history is chained so that it cannot be altered quietly. Only the two people who run the company can reach the database, and they do so to fix a problem you have asked about or that the error counts show.

11. Children

HyperActives is not meant for anyone under 16, and we do not knowingly keep an account for a child. If you believe we have one, write to us and we will delete it.

12. Changes to this policy

When this policy changes in a way that matters, the app will tell you before the change applies. The date at the top is the date of this text.

13. How to reach us

support@hyperactives.com, or by post to The Burrowbridge Group, LLC, 519 W 22nd St Ste 300 #251343, Sioux Falls, South Dakota 57105-1745, United States.