Privacy Policy

Who we are

Flyamba operates the website at flyamba.com, an AI-powered flight search service. For the purposes of the EU General Data Protection Regulation (GDPR), Flyamba is the data controller for the personal data described below. You can reach us at contact@flyamba.com.

What we collect

We have not installed analytics software, advertising pixels or visitor-tracking scripts of our own, and we do not ask you to create an account. There is no login, no profile and no marketing list. One caveat: the embedded flight-search widget loads a third-party iframe that runs its own Google Analytics — see our Cookie Policy for the detail. In practice we handle three things:

1. Your search queries

When you describe a trip in the search bar, or ask a question in a destination chat box, that text is sent to our server and forwarded to Anthropic's Claude API so it can be interpreted. We do not store your queries in a database and we do not link them to you. Please avoid typing personal or sensitive information into the search box — it is not a secure channel and it does not need anything personal to work.

2. Technical data in server logs

Like any website, our hosting provider records standard request data — IP address, timestamp, page requested, browser user-agent — for security, abuse prevention and debugging. This is retained for a short period by the host and is not used to build a profile of you.

3. A theme preference stored in your browser

If you switch between light and dark mode, we save that choice in your browser's local storage under the key flyamba-theme. It never leaves your device and is not a cookie. Clearing your browser storage removes it.

Legal bases for processing

• Legitimate interests (Art. 6(1)(f) GDPR) — operating and securing the site, preventing abuse, and processing your search query so we can return a result.
• Consent (Art. 6(1)(a) GDPR) — where non-essential cookies are set by third parties through their embedded content, to the extent your browser and any consent choices allow it.

Who we share data with

Anthropic

Search queries and destination-chat messages are processed by Anthropic's Claude API to generate results. Anthropic acts as a processor for this purpose. Only the text you type and the destination context are sent — no IP address, identifier or browsing history is attached.

Travelpayouts and its partners

Flight prices and booking links are provided through the Travelpayouts affiliate network. When you click a flight, hotel or activity link, or interact with an embedded search widget, you are passed to Travelpayouts or directly to the airline, booking site or activity provider. At that point their own privacy policy and cookie practices apply, not ours. Travelpayouts sets a tracking identifier so a resulting booking can be attributed to us — see our Cookie Policy for detail.

Our hosting provider

The site is hosted on Vercel, which processes request data on our behalf in order to serve the pages to you.

We do not sell your personal data, and we do not pass it to advertisers or data brokers. Loading the embedded search widget does expose your IP address and browser details to Kiwi.com and Google, in the same way any third-party embed does.

International transfers

Anthropic and Vercel are based in the United States, so data processed by them may be transferred outside the European Economic Area. Such transfers rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism offered by the provider.

How long we keep things

We keep no user database. Search queries are not retained after a result is returned. Server logs are held briefly by our hosting provider for security and diagnostics. Your theme preference stays in your browser until you clear it.

Your rights under the GDPR

If you are in the EU or UK, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with your national data protection authority.

To exercise any of these, email contact@flyamba.com. In practice, because we hold no account and no query history, there is usually very little for us to return or delete — but we will confirm that to you in writing and act on anything we do hold.

Children

Flyamba is not directed at children under 16 and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy as the service changes. The "last updated" date at the top always reflects the current version.