Privacy

Last updated: 5 November 2026

Kudafly is a flight search site run by an individual based in Canada. There are no accounts and no advertising trackers. This page explains the little data we do handle. Questions or requests: hello@kudafly.com.

What we handle

• What you type or choose in a search: routes, dates, passengers, cabin, preferences, and anything else you write to the AI, such as your citizenship when it matters for visas.
• Technical data: your IP address, browser and the pages you request, as with any website.
• Approximate city: worked out from your IP address for each visit, only to suggest trips from a nearby airport and choose the time format. We do not store it, it does not affect prices or ranking, and you can change the city. Basis: our legitimate interest (Art. 6(1)(f)).
• Settings on your device: your language, currency, theme, time format and any city you choose, plus a note that you have seen the intro, kept in your browser's local storage.

Please do not write passport numbers, payment details, health information or other sensitive data in the chat. Kudafly never needs them.

Why, and on what basis

• To run the search you asked for (the service you requested, GDPR Art. 6(1)(b)).
• To keep the site safe and limit abuse, for example by counting requests per IP address (our legitimate interest, Art. 6(1)(f)).
• To see how the site is used overall, such as the number of visits and popular pages (our legitimate interest, Art. 6(1)(f)).

We do not sell your data, use it for advertising or build profiles of you. Citizenship, if you give it, is used only for that search.

Who receives it

• AI provider (currently Anthropic, through the Claude API): your messages, to generate replies. Anthropic does not train its models on them under its commercial terms.
• Flight data providers (Ignav, SerpApi for Google Flights, Travelpayouts for Aviasales): route, dates, passengers and cabin, without your name or contact details.
• Hosting (Vercel): serves the site and keeps short-lived technical logs. Cloudflare provides our domain's DNS and forwards email sent to us.
• Visit statistics (Vercel Web Analytics): page, referring site, country, browser and device type, counted anonymously without cookies. The temporary visitor hash is discarded after 24 hours.

These companies may process data outside your country, including in the United States. When you open a booking link you leave Kudafly, and that site's own privacy policy applies. Our affiliate links identify Kudafly as the referrer, so the partner can credit us for a booking.

How long we keep it

We do not save your conversations or searches in a database. Search results stay in temporary memory for about 15 minutes and request counts for about an hour, so repeated searches are fast and limits work. Providers keep data under their own policies. If you email us, we keep the message as long as needed to answer it.

Cookies and local storage

Kudafly does not set cookies. Local storage holds only the settings above, stays on your device and is not sent to us. Clearing your browser data removes it. Sites you visit through booking links may use their own cookies.

Your rights

Depending on where you live, you can ask to access, correct or delete your personal data, object to or restrict its use, and receive a copy. Because we keep no accounts or search history, we usually hold nothing that can be linked to you, apart from emails you send us. To make a request, write to us. You can also complain to your local data protection authority or, in Canada, the Office of the Privacy Commissioner.

Age

Kudafly is intended for adults aged 18 or over.

Changes

If this page changes, we will update the date at the top.