Your travel data in GateReady

What stays on your device

GateReady does not require a separate GateReady account. Apple services use your Apple Account: iCloud is required for itinerary sync and private flight sharing, and App Store purchases use your Apple Account. Passport, Indonesian KTP, visa, residence, and passport-chip face data are stored in the device-only Keychain. Booking PDF and OCR review happen locally. Accommodation and onward-travel files remain protected on the device. Transient booking files expire after 24 hours when the next cleanup runs. Arrival forms stay local until you explicitly open or submit an official site.

Flights and alerts

When you sync, GateReady sends its current flight itinerary to our server under an App Attest installation key. This includes flight numbers, routes, schedules, time zones, callsigns, and the selected flight. We also store the installation's authentication public key and sign counter, plus APNs and Live Activity tokens, locale, and alert preferences needed for notifications. The current itinerary is replaced on sync; removing a flight and syncing removes it from that itinerary.

Private Apple CloudKit sync includes flights and calendar-import identifiers and fingerprints, but not raw calendar text or documents. If you choose to share a flight, a private, read-only CloudKit share goes only to an explicitly invited recipient. It can include the flight number, airports, times, gate, terminal, status, and allowed alert classes. A Family purchase never shares flights automatically.

Other services and purchases

GateReady requests aircraft movement data from ADSB.lol using a flight callsign. Our server queries configured flight-data providers, including AeroDataBox and FlightAware’s licensed API when enabled, using flight numbers and dates. Those providers and network delivery services can receive your IP address and request metadata. Apple provides CloudKit, StoreKit payments, and APNs notifications; Cloudflare helps deliver our network traffic. Apple handles payment, and GateReady never receives payment-card data.

GateReady sends coarse paywall, purchase, restore, and invitation events with your tier and app version through an authenticated installation request. We store daily aggregate counts, not raw event or transaction rows. An event is linked to the installation when received. We do not use ads, tracking, third-party advertising profiles, or data sales.

Retention and your choices

Disabling notifications disables the retained push registration. Ending a Live Activity marks its token ended. GateReady currently has no automatic expiry for installation and security records, retained token registrations, or aggregate counts. Uninstalling the app does not automatically erase backend, iCloud, or Keychain data.

You can delete documents in the app, remove flights and then sync, revoke flight shares in the app, and manage iCloud data through Apple's settings. For access, correction, or deletion help, email [email protected]. We may need enough information to identify and verify the installation, but please do not send identity document copies. Your support email shares whatever information you choose to include.

About this policy

This policy covers the GateReady app. The Smartycode Labs website has a separate privacy policy for its own analytics and newsletter. For app help, visit GateReady support.