Privacy Policy

1. Introduction

FlyNinja S.L. ("we", "our", or "us"), a company registered in Spain with CIF B26656561 (VAT: ESB26656561), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website fly.ninja and use our services.

Data Controller:
FlyNinja S.L.
C/ Emiliana de Zubeldía 5
28320 Pinto, Madrid, Spain
Email: hi@fly.ninja

2. Data We Collect

We collect the following personal data when you sign up for notifications:

• Name: Your first name, used to personalize communications
• Email address: Used to send you notifications and verify your identity
• Country: Used to identify relevant eVTOL services in your region
• Postcode: Used to calculate distance to nearby flying car services
• Approximate location: Derived from your postcode (latitude/longitude) to find services near you

For gift voucher and experience purchases: We may additionally collect payment information (processed securely by our payment provider), recipient details for gift vouchers, and booking preferences.

We also automatically collect technical data including IP address, browser type, and device information for security and analytics purposes.

3. Legal Basis for Processing

We process your personal data based on:

• Consent (Art. 6(1)(a) GDPR): When you explicitly consent to receive notifications by checking the consent box and verifying your email
• Legitimate interest (Art. 6(1)(f) GDPR): For security, fraud prevention, and service improvement

4. How We Use Your Data

We use your personal data to:

• Send you email notifications when eVTOL/flying car services launch near your location
• Verify your email address (double opt-in)
• Calculate the distance between your location and available services
• Personalize your experience with relevant content
• Process purchases of gift vouchers and flying experience packages
• Improve our services and user experience
• Comply with legal obligations

We do NOT:

• Sell your personal data to third parties
• Share your data with advertisers
• Use your data for purposes other than those described above

5. Data Sharing

We may share your data with:

• Email service providers: SendGrid (Twilio Inc.) for sending emails
• Hosting providers: Vercel Inc. for website hosting, Cloudflare Inc. for CDN and security
• Analytics: Anonymized analytics data for service improvement

All third-party processors are bound by data processing agreements and comply with GDPR requirements. Some processors are based in the US and data transfers are protected by EU Standard Contractual Clauses.

6. Data Retention

We retain your personal data for:

• Active subscribers: Until you unsubscribe or request deletion
• Unverified signups: 30 days, then automatically deleted
• Unsubscribed users: We keep a minimal record (email hash and unsubscribe date) for compliance purposes for up to 3 years

7. Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restrict processing: Limit how we use your data
• Data portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Unsubscribe at any time via email link or by contacting us

To exercise these rights, contact us at hi@fly.ninja. We will respond within 30 days.

8. Cookies and Analytics

Our website uses cookies for the following purposes:

• Essential cookies: Required for basic functionality and security
• Analytics cookies (Google Analytics): We use Google Analytics 4 to understand how visitors interact with our website. This helps us improve our services. Google Analytics collects anonymized data about pages visited, time spent, and general location (country/city level). No personally identifiable information is shared with Google for advertising purposes.

Your choices: You can disable cookies in your browser settings. However, this may affect some website functionality. You can also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

9. Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data transmission
• Secure cloud infrastructure with access controls
• Regular security reviews and updates
• Limited employee access to personal data

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The "Last updated" date at the top indicates when the policy was last revised.

12. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us:

FlyNinja S.L.
C/ Emiliana de Zubeldía 5
28320 Pinto, Madrid, Spain
Email: hi@fly.ninja

You also have the right to lodge a complaint with a supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD): www.aepd.es