Privacy Policy
Gate Gap · last updated 18 August 2026
Gate Gap works out whether the connections in a multi-leg trip are actually possible. This page says exactly what it collects, what never leaves your phone, and how to have all of it deleted. It is written to be read, not to be survived.
Who this is
The app and this service are operated by Gate Gap. Questions, requests and deletions: privacy@gategap.app.
What stays on your phone
Photographs of your documents are never uploaded. If you photograph a passport page or a boarding pass, that image is written to Gate Gap's own folder on the device and stays there. Only the file name is ever synced, so another device knows a picture exists without being able to open it.
Everything else the app builds — your trips, your own airport timings, your documents — is kept on the device first. The app is usable with no network at all; the account is a copy of that document, not the other way round.
What your account holds
When you create an account, the following is stored on our server so it can reach your other devices:
- Your email address, a hash of your password, and the name you chose.
- Your trips: flights, airports, terminals, times, cabin, baggage, seats, booking references, notes.
- Your documents: type, whose they are, expiry date, reference number, notes.
- Your travel profile: passport country or countries, walking pace, mobility needs, home airport, how long you take to reach it.
- Your airport notes and the transfer times you measured yourself.
- What you recorded about transit requirements, and what you packed.
Booking references and document reference numbers are encrypted before they are written to the database, with a key held outside it. Your password is stored only as an Argon2id hash and cannot be read back by anyone, including us.
Signed-in devices are listed with the device name, the browser or app agent string, and the times they were used. The address you connect from is stored only as an irreversible hash.
What the app reports when it opens
So we can tell which campaigns bring people to the app, Gate Gap sends a report when it starts. It contains:
- The AppsFlyer install identifier, which is how one install is told from another. Reinstalling produces a new one.
- The operating system version, the app's bundle identifier and App Store identifier, and the device locale.
- The Firebase project the build talks to, and the push notification token if there is one.
- The advertising identifier (IDFA) — only if you allowed tracking, and never otherwise.
- The attribution data AppsFlyer provides about how the app was installed.
- The network address the report arrived from.
This report is encrypted between the app and our server. We pass it on to our analytics provider, and the provider's answer decides which screen the app opens on. None of your trips, documents or profile is in this report.
Tracking, and how to refuse it
iOS asks, once, whether Gate Gap may track you across other companies' apps and sites. If you decline — or simply never answer — no advertising identifier is collected or sent; the app carries on working exactly the same. You can change the answer at any time in Settings → Privacy & Security → Tracking.
Notifications
There are two kinds and they are separate. Reminders about your own trips — when to leave home, which connection has stopped working, which passport is running out — are worked out on the device from what you entered and are scheduled by the phone itself. Push notifications are delivered through Firebase Cloud Messaging and need the token described above. Both can be turned off: the reminders inside the app, and notifications altogether in iOS Settings.
What we never collect
- Your location. The app never asks for it and has no use for it.
- Your contacts, calendar, health data or photo library beyond the single image you deliberately attach to a document — and that one never leaves the phone.
- Your advertising identifier, unless you allowed tracking.
- Any behavioural profile built from your trips. Your travel is used to answer your questions about your connections, and for nothing else.
Who else sees anything
- AppsFlyer — attribution, so we know which campaign an install came from.
- Google Firebase — Cloud Messaging, to deliver push notifications.
- Our analytics provider — receives the launch report described above.
- Our hosting provider — stores the database on our behalf.
We do not sell your data, and we do not share your trips or documents with anybody.
How long it is kept
Your account data is kept until you delete the account. Signed-in sessions expire after sixty days of disuse. Records of what you deleted are kept for a year so that a device which was offline at the time learns about the deletion instead of restoring it. Security events — sign-ins, failed attempts, deletions — are logged with a hashed address and no content.
Your choices
- Delete your account. In the app: Settings → Account and Sync → Delete Account. It removes the account and everything in it — every trip, flight, document, airport card and measurement — and it is not recoverable. The copy on the phone is cleared at the same time.
- Delete the copy on the phone without touching the account: Settings → Export, Import and Delete → Delete All App Data.
- Take your data with you. The same screen exports everything as a file you keep.
- Sign out everywhere if a device is lost: Settings → Account and Sync.
- Or write to privacy@gategap.app and we will do any of the above for you.
Children
Gate Gap is not directed at children and we do not knowingly collect anything from a child. If you believe a child has created an account, write to us and we will remove it.
Changes
If what the app collects changes, this page changes with it and the date at the top moves. Material changes will be announced in the app before they take effect.