HeyGlobo is a free set of tools for people who travel: a currency converter, a world clock and a flight log. This policy explains what data the app handles, why, and the choices you have. It applies to the website, the installable app and any app-store version of it.
The short version
- Every tool works without an account. What you enter is stored on your device.
- If you create an account, we store your email address, your name and your synced lists and flights, only to back them up and sync them between your devices.
- No ads, no analytics, no tracking cookies. We never sell or share your personal data, and we never use it for advertising or to train AI models.
- You can delete your account and all data stored with it from the Account screen.
Who is responsible
The site is run by HeyGlobo, the controller of your personal data. You can reach us through the Contact page.
Data stored on your device
Your currencies, cities, amounts, preferences (such as theme, distance unit and opening screen) and flights are saved in your browser's storage (IndexedDB), together with the last known exchange rates and the app's files so it works offline. Your theme and the last page you opened (so the installed app can reopen it) are also kept in local storage. This data stays on your device unless you sign in. You can remove it at any time by clearing the site's data in your browser or uninstalling the app.
Data we store if you create an account
Accounts are optional and exist only for backup and sync. With an account we store:
- Account details: your email address, your name and, if you sign in with Google, your Google account identifier and profile picture URL.
- Sign-up details: the country you signed up from (estimated by our host from your IP address at that moment) and your browser's preferred language. Nothing is stored on your device to collect them.
- Your synced data: your currency and city lists and preferences, and the flights you log or import (route, dates, times, airline, flight number and any seat, class, aircraft, trip type or notes you add).
- Sign-in sessions: a session token, the IP address and browser user agent it was created from, and timestamps, so you stay signed in and we can protect your account.
- Security records: short-lived request counters keyed by IP address to limit abuse of sign-in, and one-time sign-in links that expire after a few minutes.
We do not keep passwords: you sign in with Google or with a one-time link sent to your email.
Sign in with Google
If you choose Google, Google shares your name, email address and profile picture with us. We use them only to create and identify your account. We do not request access to your Gmail, contacts, calendar or any other Google data. HeyGlobo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google's own handling of your data is described in Google's Privacy Policy.
Why we use your data (legal bases)
- To provide the account you asked for (performance of a contract): creating your account, signing you in, backing up and syncing your data, and sending sign-in emails.
- To keep the service safe (legitimate interests): session records and request limits that prevent abuse and protect accounts.
- To understand how people find and use the app (legitimate interests): the sign-up details above, looked at in aggregate to decide what to build and where to share the app. You can object to this at any time.
- To meet legal obligations, when the law requires us to keep or disclose data.
Giving us personal data is not required by law. If you prefer not to, don't create an account: every tool keeps working on your device, you just won't have backup or sync.
Exchange rates
Our server downloads exchange rates from a public source and your device reads them from our server. No information about you is sent to the rates provider.
Cookies and similar storage
We only use storage that the app needs to work, so no consent banner is required:
- a sign-in session cookie, only when you sign in;
- a cookie that remembers the language you picked, only if you pick one;
- the on-device storage described above.
There are no advertising, analytics or third-party tracking cookies.
Who processes the data for us
- Cloudflare, Inc. hosts the app, its database and key-value storage, and sends sign-in emails, acting as our processor under its data processing agreement.
- Google, only if you choose to sign in with Google (as described above).
We do not sell or "share" personal data as those terms are used in California law, and we share it with no one else except where the law requires it.
International transfers
Cloudflare runs a global network, so your data may be processed outside your country, including in the United States. Transfers from the European Economic Area, the United Kingdom and Switzerland are covered by Cloudflare's certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) and by the European Commission's Standard Contractual Clauses.
How long we keep it
- Account data and synced data: until you delete your account.
- Sign-in sessions: until you sign out or the session expires.
- Request counters and sign-in links: minutes to hours.
- When you delete your account, your account, sessions, synced settings and flights are deleted from our database immediately.
Your rights
Wherever you live, you can ask us to access, correct, export or delete your personal data, and you can object to or ask us to restrict its use. Many of these you can do yourself: your data is visible and editable in the app, and you can delete your account on the Account screen. For anything else, write to us through the Contact page and we will answer within one month. We will never treat you differently for using your rights.
These rights come from laws such as the EU and UK GDPR, Israel's Privacy Protection Law, California's CCPA, Brazil's LGPD and Canada's PIPEDA. You can also complain to your data protection authority, for example the authority in your EU country, the UK Information Commissioner's Office or Israel's Privacy Protection Authority.
Security
All traffic is encrypted with HTTPS, there are no passwords to leak, and sign-in links are single-use and short-lived. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.
Automated decisions
We make no automated decisions or profiles about you.
Children
HeyGlobo is not directed at children. You must be at least 16 years old (or the age of digital consent in your country, if lower) to create an account. We do not knowingly collect personal data from children under 13; if you believe a child has created an account, contact us and we will delete it.
Changes to this policy
If we change this policy, we will update the date at the top. If a change affects how we use data you have already given us, we will tell you in the app before it takes effect.
See also our Terms of Use and Contact page.