Privacy policy

About this policy

GoNowhere is a web service for creating flexible flight watches and reviewing recently observed fares. This policy explains what information we process, why we process it, and the choices available to you when you use gonowhere.app and its related services.

Information we collect

Account and profile information

When you create an account, we process your email address, display name, country or fare market, profile image if supplied, authentication-provider identifiers, and information needed to keep your account secure. If you enable SMS notifications, we also process the phone number you provide.

Saved searches and notification choices

We store the departure city, optional destination, budget, currency, stay range, connection limit, search horizon, enabled or paused state, and notification preferences that you choose. We also keep the resulting fare observations and notification history needed to provide and explain the service.

Technical and usage information

Our systems and service providers may process IP address, browser and device type, operating system, requested pages, timestamps, diagnostic events, and security logs. This information helps us operate the service, investigate errors, prevent abuse, and understand aggregate usage.

How we use information

• To create and secure your account and maintain your authenticated session.
• To save your flight-watch criteria and find observations that match them.
• To deliver the in-app, email, or SMS notifications you have enabled.
• To operate, debug, protect, and improve GoNowhere.
• To comply with legal obligations and respond to valid legal requests.
• To display and measure advertising where permitted and configured.

Advertising, cookies, and consent

GoNowhere may use Google AdSense on public editorial pages. Google and its advertising partners may use cookies, device identifiers, IP addresses, and activity information to deliver, limit, and measure ads. We do not place Google-served ads inside your saved searches, account settings, notifications, or automatically generated fare results.

Where consent is required, a Google-certified consent management platform presents the available choices before personalized advertising. You can revisit those choices through the privacy controls provided on the site. Declining personalized ads does not prevent you from using the core fare-watch features.

Learn more about how Google uses information on sites that use its services in Google's partner-sites privacy information.

When information is shared

We share information only as needed for the purposes described above, including with:

• Cloud hosting, database, monitoring, and communications providers.
• Authentication providers when you choose an external sign-in method.
• Flight-data and booking partners when you request or open their services.
• Advertising and consent providers on pages where advertising is enabled.
• Authorities or professional advisers when required by law or to protect rights.

Some booking links are commercial links. GoNowhere may receive a commission after a qualifying action, at no additional charge imposed by GoNowhere.

Storage, retention, and security

Authentication information may be stored in your browser so you can remain signed in. Account and saved-search data are retained while your account is active and for a limited period afterward when needed for security, dispute resolution, backups, or legal obligations. Retention periods vary by data type and operational need.

To prevent repeated signup abuse, we retain a hashed email identifier and the last flight-search refresh timestamp for 30 days after account deletion. These records preserve search limits if an account is recreated. They are removed during the next scheduled cleanup after that period. Signup rate-limit records use hashed IP identifiers and are removed during cleanup once their counting window is more than two days old. These identifiers are not anonymous and are used for abuse prevention.

We use reasonable technical and organizational safeguards, but no internet service can guarantee absolute security. Protect your sign-in credentials and contact us if you believe your account has been compromised.

Your choices and rights

You can delete your GoNowhere account after signing in and confirming your identity.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, and to receive a portable copy of certain data. You can update notification choices and parts of your profile from the Settings page. You may also withdraw consent where processing relies on consent.

To make a privacy request, email privacy@gonowhere.app. We may need to verify your identity before completing a request.

International processing and policy changes

Service providers may process information in countries other than your own. Where required, appropriate safeguards are used for international transfers. We may update this policy when the service or legal requirements change. Material updates will be identified by a new date on this page and, where appropriate, an additional notice.