Privacy Policy

In this policy, “myIDBuddy,” “we,” “us,” and “our” refer to the operator of the myIDBuddy app and website. “Services” means the myIDBuddy mobile application, the myidbuddy.com website, the waitlist, and any related features. “You” means the person using the Services.

myIDBuddy is a social travel app for ID and standby travelers — airline employees, their eligible travel partners, and family members who fly on staff-travel or interline benefits. The app lets travelers see who is going where, join or host trips, view staff-travel loads, message each other, and build a verified traveler profile.

1. Information We Collect

a. Information you provide directly

• Account information. When you create an account we collect your name, email address, and password. Airline employees sign up with a valid airline or work email address, which we use to confirm eligibility; eligible travel partners and family members join by invitation from a verified employee. If you join the waitlist on our website, we collect your email address.
• Profile information. Information you add to your profile, including your age, gender, travel role (employee, travel partner, or family member), home base city, airline and staff-travel benefit or boarding-priority level (for example, “SAS · Staff” or an ID-level such as ID90), a short bio/about section, interests and activities, the countries you have visited (“been to” map), and profile photos.
• Identity-verification data (including biometric information). If you choose to get verified, we ask you to take a live selfie and follow a randomized pose prompt (a “liveness” check). We use facial-comparison technology to match that selfie to your profile photos and confirm a real person is behind the account. This may involve the creation of a temporary facial template / facial geometry, which is treated as sensitive biometric information and is not stored after the check. See Section 5 for details on how we handle it.
• Connected accounts. If you connect your Instagram account, we receive your Instagram handle and the basic profile information you authorize through Instagram’s login. You can disconnect it at any time from your profile.
• Trips and travel plans. Information you add when creating or joining a trip, such as destinations and multi-city routes, travel dates and date flexibility, trip title and description, trip types/activities, budget level, number of spots, accommodation and cost-sharing preferences, and the rules you set for who can join (age ranges, gender preference, travel roles, languages, and whether verified travelers only).
• Messages and content. The content of group chats tied to trips and 1:1 direct messages you send to other travelers, including any text, links, or media you share.
• Support and communications. Information you provide when you contact us, respond to surveys, or report another user or piece of content.

b. Information collected automatically

• Device and technical data. Device model, operating system and version, app version, language and region settings, unique device or installation identifiers, and crash and diagnostic logs.
• Usage data. How you interact with the Services — screens viewed, features used, trips and profiles you open, searches you run, and timestamps.
• Location data. When you search destinations or use the map, we process the location of the places and cities you select. With your permission, we may use your device’s approximate or precise location to improve destination search and show relevant trips. You can control location access in your device settings.
• Cookies and similar technologies (website). On myidbuddy.com we may use essential cookies and similar technologies to operate the site and understand basic traffic.

c. Information from third parties

• Instagram, if you choose to connect it, as described above.
• Service providers that help us deliver the Services (for example, our email provider for waitlist and transactional emails, hosting and storage providers, identity- and liveness-verification vendors, and analytics or crash-reporting tools).
• Staff-travel and flight information shown in the app (such as standby loads by cabin) is provided for general information and may be sourced from third parties or entered by users. We are not affiliated with, or endorsed by, any airline.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate you (including optional Face ID app lock, which is processed on your device);
• Operate core features — the traveler map, trips, staff-travel loads, profiles, and messaging;
• Verify identity and display verification badges to build trust and reduce fake accounts;
• Match you with relevant trips, destinations, and travelers, and apply the join rules and filters you set;
• Send service-related and transactional communications (for example, waitlist confirmations, security notices, and trip activity);
• Provide customer support and respond to your requests and reports;
• Maintain safety and integrity — detecting, investigating, and preventing fraud, abuse, harassment, and violations of our Terms;
• Analyze and improve the Services, develop new features, and measure performance;
• Comply with legal obligations and enforce our agreements.

3. Legal Bases for Processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: performance of a contract (to provide the Services you request); consent (for example, for biometric verification, location access, and non-essential communications — you may withdraw consent at any time); legitimate interests (to secure, improve, and promote the Services, balanced against your rights); and legal obligation (to comply with applicable law). Where we rely on consent to process special-category data such as biometric information, we will request it explicitly.

4. How We Share Information

We do not sell your personal information. We share information only as described here:

• With other travelers. Your profile is designed to be seen by other users. Information such as your name, age, gender, travel role, home base, airline/benefit, bio, interests, visited-countries map, connected Instagram handle, verification badge, and the trips you join or host is visible to other travelers in the app. Messages are shared with the recipients and trip members you send them to. Please only share what you are comfortable making visible to the community.
• With service providers. We share information with vendors who process it on our behalf under contract — including hosting, storage, email delivery, identity/liveness verification, analytics, and customer support — limited to what they need to perform their services.
• For legal reasons. We may disclose information to comply with applicable law, legal process, or enforceable governmental requests, and to protect the rights, safety, and property of myIDBuddy, our users, or the public.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.
• With your direction or consent. When you ask us to share information or otherwise consent to sharing.

5. Identity Verification and Biometric Data

Identity verification is optional, but it unlocks a verification badge and may be required to access certain features or verified-only trips. When you verify:

• You take a live selfie and follow a randomized pose to confirm a real, live person is present;
• We (and/or our verification provider) compare that selfie to your profile photos to confirm it’s you, which may involve generating a temporary facial template solely to perform the comparison;
• We do not store your verification selfie, and we do not keep your facial template after the check. The selfie and any facial template are used only to perform the match and are then deleted. Your selfie is never shown on your profile;
• We retain only the result of the check — for example, that your account is verified and the date it was verified — not the underlying biometric data;
• You may withdraw consent and request deletion at any time (see Section 7). Because we do not retain the selfie or facial template, there is no stored biometric data to delete beyond your verification status, which is removed when you delete your account.

We never use your verification selfie or facial data for advertising, and we do not sell it. Where required by law, we obtain your explicit consent before collecting biometric information.

6. Data Retention

We keep personal information for as long as your account is active or as needed to provide the Services, and afterward only as necessary to comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements. Retention periods vary by data type — for example, verification selfies and facial templates are not retained after the identity check (see Section 5), while certain account and transaction records may be kept longer where the law requires. When information is no longer needed, we delete or anonymize it.

7. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access a copy of the information we hold about you;
• Correct inaccurate or incomplete information (much of which you can edit in-app);
• Delete your information, including by deleting your account;
• Portability — receive your information in a portable format;
• Object to or restrict certain processing, and withdraw consent where we rely on it (for example, biometric verification or location);
• Opt out of non-essential communications at any time;
• Lodge a complaint with your local data-protection authority.

California residents: Under the CCPA/CPRA you have rights to know, delete, and correct personal information, and to opt out of “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined. We will not discriminate against you for exercising your rights.

To exercise any right, email us at hello@myidbuddy.com. We will verify your request and respond within the timeframes required by applicable law.

8. Security

We use administrative, technical, and organizational measures designed to protect your information, such as encryption in transit, access controls, and limiting who can access personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep your login credentials confidential.

9. International Data Transfers

We may process and store information in countries other than the one in which you live, including countries that may have different data-protection laws. Where we transfer personal data internationally, we use appropriate safeguards (such as standard contractual clauses) as required by applicable law.

10. Children

The Services are intended only for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it. If you believe a minor has provided us information, contact us at hello@myidbuddy.com.

11. Third-Party Services and Links

The Services integrate with or link to third parties such as Instagram and mapping providers. Their handling of your information is governed by their own privacy policies, not this one. We encourage you to review them.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the app or by email. Your continued use of the Services after an update means you accept the revised policy.

13. Contact Us

If you have questions or requests about this Privacy Policy or your personal information, contact us at hello@myidbuddy.com.