Privacy Policy

• Google account information - when you sign in with Google, we receive your name, email address, and profile picture to identify your account.
• Booking details - flight routes, dates, cabin class, fare type, and price paid that you enter, import via e-ticket PDF, or forward by email to flights@frequentflyerpro.com.
• Preferences - your travel preferences, alert thresholds, and AI assistant settings.
• Assistant conversations - the complete messages and responses shown in the Assistant, including replies you type and answer options you select.

Do not enter passwords, payment or card details, Qantas PINs, or authentication codes in the Assistant.

• Price data - when the extension checks Qantas flight prices (either manually or via the daily auto-check), it records fare prices for your tracked routes.
• Qantas account data - during the boarding process and later refreshes, the extension opens your Qantas My Account, Status Activity, and Points Activity pages in background tabs (they close themselves) and reads the information visible on them: status credits, points balance, tier status, and your activity statement. You log in to Qantas as normal - we never see, handle, or store your Qantas credentials.
• Page screenshots - when you use the AI assistant, a screenshot of the current Qantas page may be sent to the AI service to provide visual context. Screenshots are processed in real time and are not stored.

• Price tracking and rebook calculations - your booking and price data is used to calculate potential savings from cancelling and rebooking flights.
• Cloud sync - bookings, preferences, and price history are synced to Google Cloud Firestore so your data is available across devices. Data is associated with your Google account.
• AI assistant - your booking data, preferences, and page context are sent to Google's Gemini API (via our Cloud Function proxy) to generate personalised fare advice. We do not send your Google credentials or Qantas login details to the AI. The first time you open the Assistant, you must select Continue to Assistant before any Assistant information is provided.
• Assistant conversation review - the authorised maintainer may review retained Assistant conversations against your user account to spot problems, understand whether advice was useful, and improve the experience.
• Leaderboards and leagues - if you join leagues, your statistics (savings, status credits, points, airports) are shared with other members. Public boards show only your callsign; private friend leagues show your real name to the people you've connected with. Participation is voluntary, and you can leave or hide stats at any time from the extension's privacy settings.
• Email notifications - price-drop alerts and monthly league summaries, controlled from your My Account page or per-flight in the extension.
• Diagnostics - if an account sync fails, or you send a bug report with the diagnostics toggle on, a technical diagnostic is emailed to the maintainer. Diagnostics never include your bookings or account data.

• Cloud data is stored in Google Cloud Firestore under the Firebase project frequent-flyer-assistant, hosted in the Australia region.
• Local data is stored in Chrome's chrome.storage.local on your device.
• Your activity statement history - the earning breakdown and balance-history charts - is reconstructed and kept in local storage on your device only. It is never cloud-synced.
• All data in transit is encrypted via HTTPS/TLS.
• AI API keys are stored in Firebase Secret Manager and are never exposed to the client.
• Firestore security rules ensure users can only read and write their own data.
• Assistant review conversations are available only to the account owner and authorised administrators.

• Google Firebase - authentication, database, and hosting. Subject to Firebase Terms of Service.
• Google Gemini API - AI assistant responses. Your conversation data is processed under Google's Gemini API terms. We use the API tier which does not train on user inputs.

• Qantas login credentials (username or password)
• Payment or credit card information
• Browsing history outside of qantas.com and frequentflyerpro.com
• Data from any website other than www.qantas.com, book.qantas.com, and frequentflyerpro.com (where the extension recognises your sign-in and rebooking links)
• Screenshots, hidden AI prompts, raw Qantas page context, or unrendered AI streams in Assistant review conversations

Your account data is retained in Firestore for as long as your account exists. Assistant review conversations are retained for up to 60 days and then recursively deleted. Price history older than 12 months may be pruned automatically. You can delete your account and all associated data, including retained Assistant conversations, at any time from the My Account page. Account deletion is immediate and permanent.

• Access and correction - you can view your main account data in the extension's dashboard. Contact privacy@frequentflyerpro.com with questions or requests about access to, or correction of, retained Assistant conversations.
• Deletion - you can delete individual bookings from the extension, or delete your entire account and all data yourself from the My Account page. Contact privacy@frequentflyerpro.com with any deletion question or request.
• Portability - your booking and price history data can be exported from the extension.
• Opt out - you can uninstall the extension at any time to stop all data collection.

Frequent Flyer Pro is not directed at children under 13. We do not knowingly collect personal information from children.

We may update this policy from time to time. Material changes will be communicated via the extension's changelog. Continued use of the extension after changes constitutes acceptance of the updated policy.

For privacy-related access, correction, or deletion questions and requests, contact us at privacy@frequentflyerpro.com.