Flyer Privacy Policy
Last updated: November 6, 2026 · Flyer is made by Eternity Works LLCFlyer is an independent, student-built app. It is not affiliated with, endorsed by, or sponsored by any university.
What stays on your phone
- Your class schedule, assignments, GPA entries, saved events, followed clubs, interests, major, class year, syllabus details, the First 30 days checklist, and app settings.
- Connections: calendar links, Microsoft and Google sign-ins, and an optional Canvas access token are kept in the iPhone Keychain. Flyer talks to those services straight from your phone. They aren't sent to our servers.
- Apple Health (only if you connect it): last night's sleep, today's steps, and exercise minutes are read on your phone to show next to your schedule. They are never uploaded, saved by us, or shared. Flyer only reads; it never writes to Health.
- Offline copies of public info (headlines, events, deals) so the app works with a bad signal.
What we store on our servers
| Data | Who can see it | How long |
|---|---|---|
| Account: email (or Apple's private relay address), sign-in ID | Only you | Until you delete your account |
| Profile: name, avatar, friend code, school | Friends see your name; others see first name and last initial | Until you delete your account |
| Connect card: what you add (headline, major, orgs, links, school email, phone, a face photo) | You choose Everyone, Friends, or Hidden for each part | Until you change it or delete your account |
| Friends, requests, and people you blocked | You (and each friend sees the friendship) | Until you remove them or delete your account |
| Say hi (only if you turn it on): course codes and org names | Other opted-in students who share one, as a match. Times and rooms are never shared | Until you turn it off |
| Moments (photos for friends) | Friends only | Leave their feeds after 24 hours. Ones you save stay in your Story, visible only to you |
| Postcards (a photo pinned to a place) | Friends who have Postcards on | Until you delete them |
| Discover posts: events, "right now" posts, Good to Know tips | Flyer users at your school (first name and last initial shown) | Removed after the event or when they expire; tips after a year |
| Flyer Drops: the note, link, photo, PDF, or card you send | The people you send it to | 7 days (24 hours for QR drops) |
| Nearby check-in for Drop (rough location, only while the Drop screen is open) | No one. Used to find people within about 80 m | 3 minutes |
| Groups: name, members, deadlines, tasks, files and links you add, busy times (start and end only) | Group members | Until the group ends or you leave |
| Plans and polls, and votes | The people you sent it to, and anyone with the link | 30 days after it closes |
| Class notes you share (missed-class kit) | Classmates who opted in to that course | Until you delete them or your account |
| Safe Walk: destination, arrival time, and your location during the walk | Only the friends you pick for that walk | Deleted 24 hours after the walk ends |
| Hide and seek: your approximate location during a game | Never shown as a pin. Used only to say "warm" or "cold" | Deleted when the game ends |
| Location sharing with friends (only while it's on) | Friends you chose | Deleted when sharing ends or after 2 hours without an update |
| Flight Score: points and stamps | You and friends. The campus leaderboard only if you turn it on | Resets each semester |
| Status taps (elevator out, seats, Wi-Fi) | Everyone sees the result, never who tapped | 30 minutes |
| Text Flyer (only if you turn it on): your phone number and a short summary of your classes and due dates | No one. Used to answer your texts | Until you turn it off |
| Canva connection (only if you connect it) | No one. Used to list your designs | Until you disconnect |
| Reports you send, and org officer requests | The Flyer team | Until handled, then kept as needed to keep people safe |
| Notification token and notification settings | No one | Until you sign out or delete your account |
| Error reports: app version, device type, and the error message | The Flyer team | 90 days |
| Daily usage counters | No one | Kept by day, never linked to what you asked |
Location
- Flyer only uses location while the app is open. It never asks for "Always" location.
- Sorting places by walking time happens on your phone and never leaves it.
- Location reaches our servers only for features you start: sharing with friends, Flyer Drop's Nearby tab, a Safe Walk, or hide and seek. Each one is described above.
Photos and safety checks
Before a photo or post is shown to anyone, it's checked automatically for things that aren't allowed (for example, nudity, violence, or someone's private information). The text or photo is sent to Anthropic, our AI provider, for that check and isn't kept by them for training. If Anthropic is unavailable, the same check may run on a backup AI provider (Google Gemini or a similar service), under the same rule. Anything the check isn't sure about is held for a person to review. Hunt photos and building tips can't show people.
Pilot, scanning, and Text Flyer
When you ask Pilot something the app can't answer on its own, your question and a short summary (like today's classes and what's due) go to our server, which sends them to Anthropic (or our backup AI provider if Anthropic is unavailable) and may send a search to Tavily. Scanning a schedule or a syllabus sends that image or PDF to the same AI provider to read it. With Text Flyer on, your texts are delivered by Twilio. We don't store your questions, scans, or texts.
Sharing links, Apple Wallet, and Messages
When you share something, Flyer makes a short link with a preview card so friends without the app can see it. Your Apple Wallet card shows only what your Connect card shows to everyone. Polls you make in the Flyer drawer in Messages live inside the conversation; we only see them if someone without Flyer opens the link, and even then we don't store them.
Flyer on the web
Flyer's website and web app (in a browser) use the same account and the same rules as the phone app. The web app keeps your sign-in in your browser. It doesn't use location, Apple Health, or ads.
Browser extension
The Flyer Student Deals extension only looks up a website when you click it, and it sends just that site's name. The optional badge uses a list built into the extension, so your browsing never leaves your computer.
Ads and purchases
Free users see ads from Google AdMob. Flyer asks before any cross-app tracking; if you say no, ads aren't personalized. We never give advertisers your schedule, location, friends, posts, grades, or questions. Sponsored posts are labeled. Flyer Plus is bought through Apple and managed with RevenueCat, which gets your purchase status and an account ID. We never see your payment details.
Your choices
- See and delete your data: You → Settings → What Flyer knows. Delete one kind of data, or everything.
- Delete your account: You → Settings → Delete account. This removes everything listed above from our servers.
- Report or block anyone, or any post, from the ••• or flag on it.
- Use Flyer without an account: everything except the social features works as a guest.
Children
Flyer is for college students. It isn't directed to children under 13, and we don't knowingly collect information from them.
Security
Data is stored in Google Firebase. Only our servers can write to the database, and its rules let each person read only what's described above. Uploads go to a private folder and are only published after the safety check. Keys and tokens for our providers stay on the server.
Changes and contact
If this policy changes, we'll update the date above and mention big changes in the app. Questions or requests: eternityworks2026@gmail.com.