SKYWARD

Privacy Policy

How SSARI Inc. handles information when you use Skyward.

Last updated: September 30, 2026. SSARI Inc. operates Skyward at skyvvard.com and is responsible for the personal information described here. For privacy requests, contact privacy@skyvvard.com.

Information you provide

Accounts use your name, email address, password hash, email-verification state and session information. We do not store your password in plain text. Supported account features may store saved flights, trips, viewing preferences, compact simulator progress and notification settings. Support requests contain the information you choose to email us.

If you buy Premium, the payment provider processes payment information. Skyward stores the identifiers and subscription status needed to manage access; it does not store your full payment-card details.

Boarding passes and private trips

The scanner decodes camera images and imported photos or PDFs in your browser. The scanner does not upload the raw pass or barcode to our account service. Shared files may be held temporarily on your device while you complete an import.

You review the extracted trip before saving it. The supported saved fields include a display name or initials, flight, airports, date and seat. Choose initials or a nickname if you do not want to retain a name. Saving or syncing a trip sends the reviewed fields needed for that feature. Do not put booking references or sensitive identity information in free-text fields. We do not retrieve airline passenger manifests or automatically read all passes in your wallet.

Local storage and permissions

Preferences, guest watchlists, downloaded data and local recordings may remain in your browser’s storage. Clearing site data removes local copies and may sign you out; it does not delete account data on our servers. Supported synchronization is separate from local storage.

Essential cookies maintain sign-in and security. Camera access requires your browser permission and is used for scanning when you choose it. Push notifications require permission. You can revoke permissions through your browser.

Public travelers and sharing

Public traveler profiles and shared journeys are optional. Their audience can see the display name and trip or viewing details included in the sharing preview. Public profiles are not official passenger lists. Keep private information out of your display name. A private link can be forwarded by its recipients.

You can revoke sharing or let a link expire. This does not remove screenshots or other copies already made by recipients. Saving a private boarding pass does not by itself publish a traveler profile.

Technical information

Requests expose network information such as IP address, browser information and request times to the services handling them. Authentication uses session and security information to protect accounts. Map requests contain the region being viewed; that is not necessarily your physical location. Connected map, imagery, audio and aviation services may also receive requests from your browser or our servers.

Reliability counters

We collect bounded counts of script, rendering, connection and account-service failures to diagnose reliability. Browser reports contain an allowed event code only, not exception messages, stack traces, page contents, names, boarding passes or trip details. The browser sends each code at most once per page session and respects Do Not Track. Counters are kept in server memory for up to 30 days and reset when that process restarts. A first-occurrence code may appear in hosting logs. Network services still receive ordinary request metadata as described above.

Why we use information

We process account and subscription information to deliver the service you request, maintain security, prevent abuse and answer support requests. Optional sharing and notification features operate according to your choices. Where applicable law requires a legal basis, these purposes rely on performance of our agreement, legitimate interests in operating a secure service, legal obligations, or consent for optional processing that requires it. You may withdraw consent for optional processing without affecting processing already performed lawfully.

Service providers and international processing

Our deployment uses Cloudflare for hosting, account storage and assets, Resend for account emails, and a configured payment provider such as Stripe for checkout. Connected aviation, map and optional audio services supply their respective features. Providers process the information necessary for those tasks and may operate outside your country. Their own policies apply to information they collect directly.

We do not sell personal information or use submitted boarding passes for advertising. We may disclose information where legally required, to protect users and the service, or as part of a business transfer subject to applicable protections.

Retention and security

Account data is retained while needed to provide your account and requested features, resolve disputes and meet applicable legal obligations. Sessions expire, and scheduled maintenance removes eligible expired authentication records in batches. Deleting a saved item or revoking a share removes it from the active feature; necessary security or legal records may have separate retention.

We use access controls, password hashing and encrypted connections. No system can promise absolute security. Never send passwords, payment-card details or raw boarding-pass barcodes to support.

Your choices and rights

You can edit or remove supported saved items in the app, stop sharing, and change browser permissions. Contact privacy@skyvvard.com to request account deletion, access, correction, an export, or other applicable privacy rights. We may need to verify your identity before acting. Depending on your location, you may also have rights to restrict or object to processing and complain to your local data-protection authority.

Skyward is not directed at children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has supplied it so we can investigate and remove it as appropriate.

Policy updates

We will update this page when our practices change and provide additional notice where required. For questions about this policy or our company’s contact details, email privacy@skyvvard.com. See also our Terms of Service.