Privacy · effective 30 October 2026 UTC · website section added 4 November 2026 UTC
What we hold, and who sees it.
Pushback is a flight tracker made by eend. It holds the flights you add and shows them back to you. There is no advertising in it, nothing is sold, and nothing is shared for marketing. This page covers the Pushback apps on iPhone and Android, and this website. Where we say we, we mean eend.
Your Eend Account
Pushback and Pond Hopping share one sign-in, your Eend Account, and one database. Each app keeps its own settings. Pond Hopping's privacy page covers Pond Hopping; this one covers Pushback.
- A silent guest account is made on the first launch, with nothing to tap, so your flights are kept from the start.
- Sign in with Apple, with Google, or with a code we email to you, to keep your flights on any phone. You never have to make a password.
- Your email address comes from Apple, Google or the code. With Apple it can be a relay address that Apple makes for you.
- Anything you added as a guest comes along when you sign in.
What we store
| What | Why |
|---|---|
| Your flights: number, date, airports, times, and the gate, status and aircraft we read for them | To draw your Board, send flight alerts and count your Passport. |
| Booking text you paste or forward, and what we read from it | To add the flights in it. See below. |
| Flights you import from a file | To add them to your Board; those already there are left out. |
| Your lounge and status ways in (airline status, card, lounge network, trusted traveller) | To show a lounge only when your status gets you in. We do not collect membership numbers. |
| The people you follow and who follow you, and anyone you bring onto a flight | To show Friends on the Board and to tell them. |
| Your notification switches | To send only the alerts you want. |
| A notification token for your phone, its platform and time zone, whether Pond Hopping is on the same phone, and an id for the phone | To send flight alerts to this phone only, and from one app only. On iPhone the id is Apple's identifier for vendor; on Android it is made for each install. |
| On iPhone, a Live Activity token | To update your next flight on the lock screen. |
| Your account id, and which app the account was made in | To tell the apps apart and count them. |
We do not use your contacts, your photo library, your calendar or your microphone. We do not read your inbox.
What we do not collect
- Membership numbers for airline, card or lounge programmes. The screen for your ways in neither reads nor writes them.
- Your precise location. If you tap Share location on the Airports tab, your position, to the nearest kilometre, only sorts the airports nearest you and stays on your phone (iPhone asks for location while you use the app; Android asks for coarse location). Nothing records where you go.
- Advertising identifiers. There is no advertising or tracking software in the apps, and no tracking across other apps and sites.
- Crash reports from a crash-reporting service. The apps include none.
Who else is involved
| Service | What it sees |
|---|---|
| Supabase | Hosts the database and your sign-in. Everything above is held there, in the Sydney region (Australia). |
| Vercel | Runs the server functions the apps call, such as looking up a flight. |
| Apple and Google (sign-in) | Only if you sign in with them. They confirm it is you and tell us your email address and, if you let them, your name. |
| Flight data providers (Cirium, FlightLabs, AirLabs, AeroDataBox) | A flight number and a date, or an airport, to look up a schedule, a gate, an aircraft, a position or a delay. They are not told whose flight it is. |
| OpenAI | A sentence you type into Add a flight, and booking text you paste or forward, so we can read the flights out of it. OpenAI does not use what we send it to train its models. |
| CloudMailin | Your email address, to deliver sign-in codes and invitations, and the booking emails you forward to bookings@eend.app. |
| Mapbox | Draws the globe on the Board and on Disruptions. Drawing it asks Mapbox for the map for the area shown, which tells them roughly where on the globe you are looking. |
| PostHog | When the app is installed, updated, opened and closed, each marked as Pushback and tied to your account id, not your name or email. It is an analytics service, not an advertising one. Screen recording is off. |
| Wikimedia (Wikidata and Commons) | Supply airport pictures. We look up which picture an airport has; your phone then loads it from Wikimedia, which sees the request as it would any website visit. |
| aviationweather.gov | Supplies airport weather. It is sent an airport code. |
| Apple (APNs) and Google (Firebase Cloud Messaging) | Deliver notifications to your phone, if you allow them: Apple on iPhone, Google on Android. |
| Apple (App Store, TestFlight) and Google (Play) | Deliver the app. They have their own policies for what they collect. |
Booking emails you paste or forward
- Text you paste, and mail you forward to bookings@eend.app, is sent to OpenAI to read the flights out of it.
- If you would rather we did not hold your booking reference, delete it from the text before you paste or forward it. The flights still come through.
Sharing
- Friends. The Friends tab shows the flights of the Pond Hoppers you follow, as they have chosen to share them with their followers. Who sees one of your flights follows the sharing setting on its trip; Pond Hopping's privacy page describes those settings under Sharing.
- Bring someone. You can put another Pond Hopper, or anyone whose email address you type, on one of your flights. We send them a notification or an invitation to that flight.
- Share. Sharing your Passport sends it where you choose, through your phone's share sheet (a picture on iPhone, text on Android). What you share is then in the hands of whoever you sent it to.
Keeping and deleting
We keep your data until you delete it. There is no advertising profile and no archive of it.
- One flight. Long-press it on the Board (or open it on Android and tap the three dots), then Remove flight. You have 8 seconds to Undo; then it is deleted.
- Your lounge and status ways in. Delete any of them on The Velvet Rope screen.
- Notifications. Switch the alerts off in Pushback or in your phone's settings.
- Your account and everything in it. In the app, tap your initials on the Board, then Delete account, and type DELETE to confirm. Or email hello@eend.app from the address you sign in with, with Delete my account as the subject. We reply within 7 days and delete everything within 30 days, in Pushback and in Pond Hopping. This includes your flights, your connections to other people, and the notification tokens for your devices. Routine backups kept by our hosting providers cycle out within 30 days. If you also use Pond Hopping, the same steps are on its deletion page.
Children
Pushback is not intended for children under 13.
This website
thepushback.app counts its visits with PostHog, hosted in the EU, so we know which pages are read and which links bring people here.
- What we count: the pages opened, how far down a page you scroll, which parts of it were on screen, how long the tab was open and in view, the buttons and outside links you tap, the address that sent you, any campaign tags in the link, and whether you are on a phone or a laptop.
- What tells one visit from the next is a random id PostHog keeps in your browser. It is not your name or your email, and it is not tied to your Eend Account.
- What we do not do: record the screen, use advertising cookies, or pass anything to an advertiser.
- If you leave your email to hear when Pushback is in the stores, we keep it in our database to write to you about that, and for nothing else. Write to hello@eend.app to have it removed.
Changes
If this changes in a way that affects what we collect or who sees it, the date at the top of this page changes and we will say so in the app.
Contact
Questions, or to have your data deleted: hello@eend.app. Help with the app is on the support page.