Privacy Policy
Effective date: June 1, 2026
Simpli (“we,” “our,” or “us”) operates livesimpli.app. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
Information We Collect
Account information
When you create an account we collect your email address and a hashed password. If you sign in with a third-party provider (e.g. Google), we receive the profile information that provider shares with us.
Travel search activity
We log the searches you perform (origin, destination, dates, cabin class) to power search history, price-prediction features, and product improvements. Search logs are retained for 24 months and then deleted.
Loyalty program balances
If you add your loyalty program balances to SimpliPoints, we store the program name, balance, and last-activity date you provide. We never request your loyalty program login credentials, and we do not connect to loyalty program accounts on your behalf.
Usage and device data
We collect standard server logs (IP address, browser type, pages visited, referring URL) and anonymized product-analytics events (button clicks, feature usage) to understand how the product is used and to diagnose errors.
Payment information
Subscription payments are processed by Stripe. We do not store full card numbers or CVVs. Stripe's Privacy Policy governs the handling of your payment data.
How We Use Your Information
- Provide and improve the Simpli service
- Authenticate your account and enforce rate limits tied to your plan
- Send transactional emails (password reset, email confirmation)
- Send the weekly redemption digest if you have opted in
- Detect and prevent fraud, abuse, and security incidents
- Comply with applicable law
We do not sell your personal information to third parties.
Sharing With Third Parties
We share data only as needed to operate the service:
- Supabase — database and authentication infrastructure
- Stripe — payment processing
- Resend — transactional and digest email delivery
- Vercel / Google Cloud Platform — hosting and compute
Each sub-processor is bound by a data processing agreement consistent with applicable privacy law. We do not share personal data with advertisers or data brokers.
Cookies and Tracking
We use session cookies to keep you signed in. We use first-party analytics cookies to understand aggregate product usage. We do not use third-party advertising cookies.
Data Retention
Account data is retained while your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required by law to retain it longer (e.g. billing records for 7 years).
Your Rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email [email protected]. We will respond within 30 days.
California residents: this policy constitutes our “at collection” notice under the CCPA. We do not sell or share personal information for cross-context behavioral advertising.
Security
All data in transit is encrypted via TLS 1.2+. Passwords are hashed with bcrypt. Access to production systems is restricted to personnel with a business need, protected by multi-factor authentication.
Children's Privacy
Simpli is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal data, contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date above and, for material changes, notify you by email or a notice in the app at least 14 days before the change takes effect.
Contact
Questions or requests: [email protected]