Last updated: August 2026
SkySwap has no accounts and no sign-in. We never ask for your name, email address, or password, so we never store them.
In the mobile app: flights you save are stored in the app's own on-device storage. We never receive them — there is no server to send them to, so we could not read, sell, or hand them over even if asked. Uninstalling the app removes them from your device.
One honest caveat about your phone's own backups: on Android we have switched off cloud backup for this app, so saved flights stay on the device. On iPhone, if you have iCloud Backup turned on, Apple's system backup may include them along with the rest of your app data — that is your device backing itself up to your own Apple account, not us collecting anything. You can turn it off per-app in iOS Settings under iCloud.
On the web: flights you save are stored in a single first-party cookie in your browser, on your device. The server touches that list only for the moment it takes to validate a save and hand it back to your browser — it is processed in memory, never logged, and never stored on our side. The cookie is scoped so it is sent only when the app loads or updates your saved list, not with ordinary requests. Clearing this site's cookies removes your saved flights entirely — we could not recover them even if you asked, because we never kept them.
If you open the web version without our server (for example as a local file), saved flights fall back to your browser's localStorage instead and never leave your device at all.
In the mobile app: the risk score is computed entirely on your device from bundled historical data. On your travel day, the app asks two U.S. government services — NOAA (aviationweather.gov) and the FAA (nasstatus.faa.gov) — for current weather and airport status, directly from your phone; for travel dates up to a week ahead it also asks NOAA's National Weather Service (api.weather.gov) for the airport forecasts. Those requests contain only airport codes and the airports' published coordinates — never your location; like any website you visit, the services can see your device's IP address. The app contacts no other servers — not even ours (we don't run one for the app).
On the web: the flight or airport codes you enter are forwarded to our data providers — NOAA and the FAA — so we can answer the query. Your IP address is used transiently, in memory only, for rate limiting. We do not write it to a database.
To be complete about it: those codes travel in the web address of the request, so our hosting provider's standard server logs may record them alongside your IP for a short retention period, the same as for any website. We do not read, analyse, or build profiles from those logs. The mobile app does not go through our server at all, so none of this applies there.
Launch waitlist (web only): if you choose to join the launch waitlist, we store exactly what you typed — an email address — and use it once, to announce the launch. It is never shared or sold, and deletion is one email away: hello@skyswap.app.
The mobile app sets no cookies of its own (any cookie the NOAA or FAA services return with their own responses is handled by your device's system network stack, exactly as in a browser, and we never read it). The web version sets exactly one cookie — the saved-flights list described above. It identifies no one: it contains only the flights you chose to save, and nothing in it is unique to you. There are no tracking cookies, no trackers, no analytics, no advertising on either platform, and we do not sell data — there is nothing to sell. Pages load no third-party assets at all: fonts and scripts ship with the app or are served from this site, so nothing ever contacts an outside CDN. If analytics are ever added, this policy will be updated first.
Upstream providers receive only the flight or airport identifiers you queried. On the web, those requests are sent from our server — not from your browser — so providers never see your IP address. In the mobile app, the NOAA and FAA requests go directly from your device (there is no middleman server), so those government services see your IP address the same way any website you visit does. The app includes no commercial data feeds and no third-party services or SDKs of any kind.
Questions about this policy: hello@skyswap.app
See also: Terms of service · Methodology