Flown — flight logbook · Last updated: 2 August 2026
Short version: Flown does not collect your data. There is no account, no analytics, no advertising, and no tracking. Everything you log stays on your device.
All of the following is written only to your device's private app storage. It is never transmitted to us or to anyone else. It is included in your device backup (iCloud or iTunes) if you have backups enabled, under Apple's terms — we have no access to those backups.
| Data | Purpose | Stored where |
|---|---|---|
| Flights you log (route, date, airline, aircraft, seat, class, registration, notes) | Your logbook, map and statistics | On device |
| Photos you attach to a flight (up to 8 per flight) | Shown on the flight card | On device, resized automatically |
| Loyalty programmes (programme name, member number, status, balance) | The Miles & points screen | On device |
| Settings (language, home airport, units, theme, notification preferences) | Your preferences | On device |
Deleting the app removes all of it. You can export everything yourself at any time via Settings → Data & backup (JSON or CSV).
Flown works fully offline for logging, the map, statistics, photos and booking import. Network requests happen only in these cases:
When you open the news section, Flown asks our own server
(flown-backend-proxy.tom-kwiatkowski.workers.dev, hosted on Cloudflare) for a list of
recent articles from public aviation news feeds. The request contains no information
about you or your flights — the server returns the same general list to everyone, and
your device decides locally which articles are relevant to your flight. As with any internet
request, your IP address is visible to Cloudflare while the request is served; we do not store
it or link it to anything.
Pasting a booking confirmation is processed entirely on your device by default — the text never leaves your phone.
Only if you choose to enter your own AI provider API key under Settings will the pasted text additionally be sent, through our server, to Anthropic's API for a more accurate reading, using your key and your account. Do not enter a key if you do not want this. We do not store the pasted text or the responses. Anthropic's handling of that request is governed by Anthropic's privacy policy. Without a key, no booking text is ever transmitted.
Tapping a tracker link (Flightradar24, FlightAware, RadarBox, FlightStats, Google News) opens that website in your browser. Flown sends nothing to them; from that point their own privacy policies apply.
Flown asks for camera and photo library access only when you attach a photo to a flight, and only for that purpose. Photos are stored on your device and are never uploaded. If you decline, every other feature keeps working.
Flown is suitable for all ages and does not knowingly collect personal information from anyone, including children.
Because your data never leaves your device, there is nothing for us to disclose, correct or delete on your behalf. You hold, export and delete it yourself at any time. If you are in the EU/EEA, Switzerland or the UK, this means no personal data is processed by us within the meaning of the GDPR/FADP beyond the transient IP address described above.
If this policy changes, the updated version will be published at this address with a new date at the top. Material changes will also be noted in the app's release notes.
Questions about privacy in Flown: tom.kwiatkowski@gmx.de