Privacy Policy
Last updated: October 5, 2026. Previous versions are available on request.
This policy explains how FlySolutions Holdings LLC ("we", "us"), a Wyoming limited liability company, handles personal data in Keyproof (keyproof.flysolutionsholdings.com and the Keyproof mobile apps) and on this website. We are the data controller. Contact: admin@flysolutionsholdings.com.
What we collect
- Account data: your email address, the name you enter (or your name and profile photo if you sign in with Google), handled by Google Firebase Authentication.
- Plan and usage data: your plan (free, Trip Pass or Annual), its expiry date, and how many AI analyses you have used. Stored in Google Cloud Firestore.
- Payment data: payments are processed by Stripe. We never see or store your full card number; we keep only a Stripe customer ID. With each purchase we record the time you consented to immediate start of the service and the version of the Terms you accepted.
What stays on your device
Your trips, evidence photos, GPS coordinates and generated letters are stored locally in your browser (IndexedDB). They are not uploaded to our servers. If you clear your browser data or change phones, this local data is lost unless you export your evidence report.
AI processing
When you ask Keyproof to analyze a photo, read a boarding pass or invoice, or write a letter, the relevant photo or text is sent to Google's Gemini API (paid service) to produce the result. Photos can show the time and GPS location stamped on them. We do not store these photos on our servers, and under Google's paid-service terms they are not used to train Google's models. AI results are generated automatically and can be wrong; they do not produce legal or similarly significant decisions about you.
Before your first AI analysis the app asks for your permission to send the selected photo or text to Google's Gemini API; you can use Keyproof's other features without it. If you write to our AI assistant "Shield" in the website chat (or on WhatsApp, once offered), your messages are sent to the Gemini API to produce the reply; we do not keep a copy of the conversation.
Why we use your data
- To provide the service, keep your account secure and apply your plan's limits (performance of a contract).
- To process payments and meet tax and accounting obligations (legal obligation).
- To prevent abuse of the service (legitimate interest).
We do not sell your personal data and we do not use it for advertising.
Service providers and international transfers
Google (Firebase Authentication, Cloud Firestore, Gemini API), Stripe (payments) and Netlify (hosting) process data for us under their data processing terms. They may process data in the United States and other countries. Transfers from the EU/EEA, Switzerland and the UK rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or on the European Commission's Standard Contractual Clauses.
Cookies and device storage
We do not use advertising or analytics cookies. Keyproof stores your trips, photos and settings in your browser or app storage, and Firebase keeps you signed in. This storage is strictly necessary for the service.
Usage statistics: we count visits and key actions (for example: account created, flight checked, protection started, purchase) as anonymous daily totals, with the visitor's country derived from the IP address at the time of the request. We do not use cookies or device storage for this, and we do not store IP addresses or link these counts to your account (legitimate interest in understanding how the service is used).
Retention and deleting your account
We keep account and plan data while your account exists. You can delete your account at any time in the app (Account → Delete account): this immediately erases your login and profile (plan, usage counts, referral code) and cancels any subscription, and you can choose to erase the trips and photos stored on your device too. Payment records held by Stripe are kept for as long as tax and accounting law requires (generally up to 7 years). Technical logs are kept by our hosting provider only for a short period for security and troubleshooting.
Your rights
Depending on where you live (for example under the EU/UK GDPR or US state privacy laws), you can ask us to access, correct, export, restrict or delete your data, and object to processing based on legitimate interest. Write to admin@flysolutionsholdings.com; use the subject "Privacy request" or "Privacy complaint". We confirm receipt within 30 days, look into it, keep you informed and reply without undue delay — normally within one month (extendable by two months for complex requests, in which case we tell you why). We do not sell or share your personal data for targeted advertising. If you are not satisfied, you can complain to your data-protection authority — for example, in the UK, the Information Commissioner's Office (ico.org.uk), or the authority in your EU country.
Children
Keyproof is not intended for children under 16.
Contact
FlySolutions Holdings LLC, a Wyoming limited liability company · admin@flysolutionsholdings.com