FLYPOST — PRIVACY POLICY

Last Updated: May 14, 2026  |  Effective Date: May 14, 2026

FLYPOST (Ontario Business Registry Number: 1001607699; Company Key: 104927812), registered in the Province of Ontario, Canada ("Flypost," "we," "us," "our") is committed to protecting the personal information of everyone who uses the Flypost mobile application and related services (the "Service").

This Privacy Policy explains what personal information we collect and why, how we use, store, and protect it, who we share it with, and your rights to access, correct, or delete it. By using the Service, you agree to the practices described in this Privacy Policy.

WHO IS RESPONSIBLE FOR YOUR DATA

FLYPOST — Privacy Officer
c/o Andrew Warias
513-1169 Queen St West
Toronto, Ontario M6J 1J4
Canada
Email: andrew@flypost.ca

INFORMATION WE COLLECT

We collect information you provide directly (account registration, profile information, event listings), information collected automatically (session data including session times, device identifier, and IP address), information from device permissions (location, photo library, camera, push notifications), information from third-party sign-in (Google/Apple), and user interaction data (saved events, RSVPs, follows).

HOW WE USE YOUR INFORMATION

We use your information to provide the Service, authenticate accounts, send opted-in push notifications, display public profiles, moderate event submissions, debug and improve the app, and comply with legal obligations. We do not sell your data, use it for targeted advertising, or use it for automated decision-making.

HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We share data only with service providers (Supabase, Google Maps/Apple Maps, Google Places API, Expo, Apple, Google) strictly for operating the Service. Public profile information and posted events are visible to all Flypost users. We may disclose information if required by law.

DATA RETENTION

We retain account and profile data until you delete your account. Session logs are retained for 12 months. When you delete your account, personal information is deleted or anonymized within 30 days.

DATA SECURITY

All data is transmitted over HTTPS/TLS, encrypted at rest via Supabase, protected by Row-Level Security, and passwords are hashed using bcrypt.

YOUR PRIVACY RIGHTS

Canadian users have rights under PIPEDA to access, correct, and withdraw consent for their data, and to complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca. California residents have rights under CCPA. To exercise any rights, contact us at andrew@flypost.ca. We will respond within 30 days.

CHILDREN'S PRIVACY

The Service is not directed at anyone under the age of 18. We do not knowingly collect personal information from minors.

CHANGES TO THIS POLICY

We will notify you of material changes via in-app notification or email at least 14 days before they take effect.

CONTACT US

FLYPOST — Privacy Officer
c/o Andrew Warias
513-1169 Queen St West, Toronto, Ontario M6J 1J4, Canada
Email: andrew@flypost.ca

Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
Website: priv.gc.ca

© 2026 FLYPOST. All rights reserved.