This Privacy Policy applies exclusively to the Travel by Fresnaye mobile application ("App"), available on the Apple App Store (iOS) and Google Play Store (Android). It is operated by Travel by Fresnaye, a division of Fresnaye & Company LLC.
This policy is linked from the App's store listing. It also governs in-app access via the app drawer's Privacy Policy link.
When you create an account and use the App, we collect the following personal information:
| Data Type | Purpose | Notes |
|---|---|---|
| Email address | Account creation, login, advisor communication | Required for account |
| Password | Authentication | Stored as a salted hash — never stored in plaintext |
| Full name | Booking personalization, advisor correspondence | |
| Phone number | Advisor contact, travel alerts | Optional |
| Data Type | Purpose | Notes |
|---|---|---|
| Passport details | Required for international booking submissions | Encrypted at rest; not accessed by app client — server-side only |
| Dietary preferences | Communicated to hotels and tour operators on your behalf | Optional |
| Loyalty program numbers | Applying frequent flyer and hotel points to bookings | Optional; stored in your profile |
| Trip location data | Destination information for itinerary display and weather | Based on your booked trips — no device GPS tracking |
The App stores the following data locally on your device:
The App does not write personal data to your device's Photos, Files, or general storage without your explicit action (e.g., downloading a document you request).
The App integrates the following third-party services to deliver its functionality. Each service receives only the minimum data necessary for its purpose:
| Service | Purpose | Data Shared |
|---|---|---|
| Fresnaye SSO (Zitadel, id.fresnaye.com)Server-side | Staff and advisor SSO authentication into the advisor portal | Staff credentials only — not used for client app authentication |
| OpenWeatherMap | Destination weather forecasts displayed on your trip detail screens | City name / destination only — no personal information transmitted |
| Unsplash | Destination photography shown as the hero image on your trip screens | Images load directly from Unsplash, so your IP address and the referring screen are visible to them — no booking or personal detail is sent |
| Microsoft Graph (Azure)Server-side | Sending advisor emails to clients (booking confirmations, trip updates) via booking@fresnaye.com | Your email address and message content — processed server-side; not accessed by the app client directly |
| Anthropic Claude APIServer-side only | Parsing forwarded travel confirmation emails, and generating packing suggestions, layover plans and airport guidance from your trip details | Email content you choose to forward for import, and the trip details needed for the features above — processed server-side only. Anthropic does not use this content to train its models. Retention is governed by Anthropic’s commercial API terms, which permit limited retention for safety and abuse monitoring. |
| DuffelServer-side only | Searching, holding and booking flights and accommodation | Traveller names, contact details, travel dates and itinerary, and payment details where a booking is placed — sent only when you search or book. |
| AeroDataBoxServer-side only | Flight schedules and status | Flight numbers and dates only. No personal details are sent. |
| Flightradar24Server-side only | Live aircraft position and track for flights on your itinerary | Flight numbers only. No personal details are sent. |
We do not integrate advertising SDKs, social media tracking pixels, or third-party analytics platforms that profile you for advertising purposes.
Payment card information associated with your Travel by Fresnaye account is stored in encrypted form on our servers and is accessible only to authorized Fresnaye & Company administrators for billing purposes.
The mobile App does not access, display, or transmit payment card numbers. If payment functionality is added to the App in a future release, this policy will be updated accordingly and you will be notified.
Any future in-app payment processing will be handled through PCI-DSS-compliant processors, and card numbers will never be stored on your device.
We do not use your personal data for targeted advertising. We do not sell your data to any third party.
We retain your personal data for as long as your account is active, plus the period required to fulfill legal, tax, and contractual obligations (generally seven years for booking records). When you delete your account, your personal data is deleted from our active systems within 30 days, subject to the exceptions below:
Authentication tokens stored on your device are invalidated immediately upon sign-out or account deletion.
Depending on your jurisdiction, you may have the following rights with respect to your personal information:
EU and UK residents have additional rights under GDPR and UK GDPR. California residents have rights under the CCPA. To exercise any right, contact us at support@fresnaye.com.
You may delete your Travel by Fresnaye account directly within the App at any time:
You may also request account deletion by emailing support@fresnaye.com from the address associated with your account. Deletion requests submitted by email are processed within 30 days.
Certain records may be retained after deletion as required by applicable law (see Data Retention above).
The App is intended for users aged 18 and older. We do not knowingly collect personal information from children under 13. When booking travel that includes minors, only the information necessary to complete the booking (e.g., name, date of birth for airline tickets) is collected, and it is handled by the adult account holder.
If you believe a child under 13 has created an account or submitted personal information, please contact us immediately and we will delete it promptly.
We apply industry-standard security measures to protect your data:
No system is perfectly secure. If you suspect unauthorized access to your account, please contact us immediately and change your password.
We may update this policy as the App evolves. Material changes will be communicated via an in-app notification and/or email prior to the change taking effect. The updated policy will reflect a new effective date at the top of this page.
Continued use of the App following the effective date of a material change constitutes acceptance of the updated policy.
For privacy questions, data requests, or account deletion assistance:
Travel by Fresnaye operates from Washington, DC and London. Written correspondence may be addressed to any registered entity of Fresnaye & Company:
We respond to all privacy-related requests within 30 days.