Privacy policy
Fly Through, for iPhone and Android. In effect from 1 October 2026.
The short version
- You can play without giving us your name, email or age.
- The game keeps your progress on your phone and, to back it up, on its own server under a random number.
- If you sign in with Apple or Google, we use that sign-in only to let you back into your progress.
- Ads come from Google AdMob. They are never personalised, and the game never asks to track you across other apps.
- We don’t sell your data. There is no public chat, no public profile and no contact upload.
- You can delete everything from the game or from this website.
Who we are
Fly Through is made and run by Ayman Modaka Husseini (United Kingdom), “we” in this policy. We decide how your data is used. For anything about this policy or your data, write to support@flythrough.app.
What we collect, and why
When you play
Your progress (levels, scores, records, items, the fly you use) and your settings are saved on your phone. Once you have played enough to be worth keeping, the game also makes a guest account on its server and backs your progress up there, under a random player number. We don’t ask for your name, email, age or phone number to do this.
If you sign in with Apple or Google
Signing in is optional. It lets you get your progress back on a new phone. We receive a number that Apple or Google gives the game for your account. With Google, Google’s standard sign-in also sends your email address, name and profile picture link; with Apple we ask for neither your name nor your email. Our sign-in service stores what it receives. The game never shows these to other players and doesn’t use them for anything else: no emails from us, no marketing.
Friends and challenges
- Friends (signed-in players only): friends see a name the game made up for you and a colour, never your real name, email or Apple or Google account. Nobody can search for you. People find you only through an invite code you choose to send them. We keep your friends list, invites, the players you block, and reports you send or that are made about you.
- Challenges with a code: the other players in that challenge see the name you type for it (up to 16 letters, so please use a nickname) and your results.
- Friend matches: to make every result fair, the server keeps a record of your inputs in each round and replays it to check the score.
Purchases
Purchases are made through Apple’s App Store or Google Play. We never see your card or bank details. We receive a record of what you bought (the store’s transaction number, the product and the date) so the game can deliver it and restore it. Our purchase service, RevenueCat, keeps those records under your random player number.
Ads
Some ads you choose to watch for a reward, and some play as a short break between levels later on. They come from Google AdMob. The game asks no one’s age, so it treats every player with the protections meant for children: ads are never personalised, Android’s advertising ID is not collected, and on iPhone the game never asks to track you. Where the law requires it (for example in the UK and Europe), Google asks for your choices before any ad, and you can change them at any time in Settings → Account and privacy → Ad privacy choices.
To show an ad and prevent fraud, Google’s ad software itself collects some information from your phone: your IP address (which gives a rough location), information about your device and the app, how you interact with the ads, and crash information. Google uses it under its own policies. When you watch an ad for a reward, the game sends Google a random number for that one ad (never your player number), so that Google can confirm to our server that the ad was watched.
Counts and crash reports
The game counts how your levels go (for example tries, time and what caught you) and notices when it crashes. Some of these counts and any crash reports are sent to our server, to fix problems and improve the game. They are sent without your player number, account, name or any advertising ID, are never used for ads, and are deleted within 90 days. You can turn this off in Settings → Account and privacy → Send counts and crash reports.
Notifications
Reminders (for example that your flights are ready) are set on your phone and never sent to us. If you allow friend notifications, our server keeps a code from your phone’s notification service and your time zone (so nothing arrives at night). The notices go through Apple’s, Google’s and Expo’s delivery services and say only that a friend challenged you or a result is ready, never a name. The code is removed when you sign out, turn friend notifications off or delete your account.
When you write to us
If you email support, we receive your email address and what you write. We use it only to help you, and delete it within 12 months of your last message.
Server records
Like any online service, our providers keep short-lived technical logs of requests to the server, including IP addresses, to keep it running and secure.
What we never do
- Sell your personal data, or share it for advertising targeted at you.
- Track you across other companies’ apps or websites.
- Ask for your contacts, precise location, camera, microphone or photos.
- Show you to strangers: there is no public profile, chat or global leaderboard.
Children
Fly Through is for everyone, including children. Because the game doesn’t ask anyone’s age, every player gets the protections above: no personalised ads, no tracking, no public chat, and friends only through a code you share yourself. A parent or guardian can delete a child’s data at any time, in the game (Settings → Account and privacy) or by writing to support@flythrough.app.
Services that handle data for us
| Service | What for |
|---|---|
| Supabase | The game’s server: the database and sign-in (stored in the European Union (Ireland)) |
| Apple | Sign in with Apple, App Store purchases, iPhone notifications |
| Google sign-in, Google Play purchases, AdMob ads, Android notifications (Firebase Cloud Messaging) | |
| RevenueCat | Checking and restoring purchases |
| Expo | Delivering friend notifications to Apple and Google |
Each uses the data only to provide its service to us, or under its own privacy policy where it acts for itself (such as Apple and Google for your store account, and Google for its ads). Some of them process data in the United States and other countries. Where the law requires it, these transfers are protected by safeguards such as the European Commission’s and the UK’s standard contractual clauses.
How long we keep it
| What | How long |
|---|---|
| Your progress, account, friends and results | Until you delete them. A guest account nobody has used for 13 months is deleted automatically (unless it holds a purchase). |
| Reports about players | 180 days, or until either account is deleted |
| Counts and crash reports (no player number) | 90 days |
| Friend notification codes | Until you sign out, turn them off or delete your account; 60 days if the phone stops checking in |
| Support emails | 12 months after your last message |
Deleting your data
In the game: Settings → Account and privacy → Delete my account (or Delete my saved data if you never signed in). Without the game: delete your account on this website by signing in with the same Apple or Google account. Deleting removes your progress, items and purchases in the game, your friends, challenge results and names, and your sign-in, on every phone, and ends the game’s access to your Apple ID. It can’t be undone.
A few records are kept for a limited time without your name or player number:
- a record that a store purchase happened (transaction number, product, date), for 25 months, for refunds and so the same purchase is never granted twice;
- a one-way code made from your player number, for 13 months, so the account can’t come back;
- the deletion request’s status, for 90 days after it finishes;
- records of ad rewards Google confirmed (a random number per ad, no player number), for 120 days, to stop reward fraud.
Apple and Google keep their own records of your purchases under their policies. To also remove the game from your Google Account, go to your Google Account → Security → Your connections to third-party apps & services.
Your rights
Depending on where you live, you can ask to see the data we hold about you, to correct it, to get a copy, to delete it, or to object to how we use it. Write to support@flythrough.app. We answer within one month. We may ask you to confirm that the account is yours, for example by signing in; we never ask for your password. If you are unhappy with our answer, you can complain to the data protection authority where you live (in the UK, the Information Commissioner’s Office).
Under UK and European data protection law, we rely on these reasons to use your data:
- it is needed to provide the game you asked for (progress, accounts, friends, purchases);
- our legitimate interest in keeping the game working, fair and secure (counts, crash reports, fraud checks);
- the law requires it (purchase records);
- your consent (ad choices where Google asks, and notifications).
Security
Data travels encrypted. On your phone, your sign-in is stored encrypted with a key kept in the phone’s secure storage. On the server, each player can read only their own data.
Changes
If we change this policy, we will update the date at the top. If a change matters for how your data is used, we will also say so in the game before it applies.