Effective: March 31, 2026
The short version: Manifest stores only the data you provide — your flights, your profile, your preferences. We don't sell it, don't run ads, don't use analytics trackers, and don't share your data with third parties for their own purposes. Your flight log is yours.
Manifest is a flight logging and aviation lifestyle app operated by Manifest Labs. When this policy says "we," "us," or "our," it refers to Manifest Labs.
Contact: [email protected]
Account data: When you sign up via Apple Sign In, we receive your Apple-provided email address (which may be a private relay address) and a unique identifier. We do not receive your Apple ID password.
Profile data: Name, display name, home airport, and any other information you choose to add to your profile.
Flight data: Flight details you enter or import — including airline, route, date, seat, aircraft type, tail number, class, trip purpose, and notes. This is the core of Manifest and is stored solely to provide the app's features to you.
Family data: If you create or join a family group, we store the group membership and the flight data of members who have opted in to sharing within the group.
Engagement data: Your answers to Black Box trivia questions and your reading history within the Radar tab. This is used to personalise your feed and track streaks.
We do NOT collect:
We use your data to:
We do not use your data for advertising, profiling, or sale to third parties.
Manifest's Radar tab includes news articles and flight deals produced by an AI-powered editorial pipeline. This pipeline uses the Anthropic API to generate, edit, and quality-check content. Your personal data is never sent to the AI pipeline. The pipeline processes publicly available aviation news and airline deal pages — it has no access to your flights, profile, or account.
We use a limited number of third-party services to operate Manifest:
We do not use any analytics, crash reporting, advertising, or tracking SDKs.
Your data is stored in Supabase-hosted PostgreSQL databases with row-level security (RLS) enabled. This means each user can only access their own data through the API. All connections are encrypted via TLS. Authentication tokens are stored securely on your device using the platform keychain.
We retain your data for as long as your account is active. Your flight log is designed to be a permanent personal record — we will not delete it unless you ask us to.
If you delete your account, we will delete all associated data within 30 days. Some data may persist in encrypted backups for up to 90 days before being purged.
You have the right to:
To exercise any of these rights, contact [email protected].
Manifest supports family accounts where parents can log flights for their children. The parent or guardian controls the child's profile and data. Children cannot create accounts independently. We do not knowingly collect data from children under 13 without parental consent. If you believe we have inadvertently collected such data, please contact us.
Manifest is available globally. Your data is processed and stored on servers in the United States (via Supabase). By using Manifest, you consent to the transfer and processing of your data in the United States. We apply the same privacy protections to all users regardless of location.
We may update this policy from time to time. If we make material changes, we will notify you through the app or by email. Continued use of Manifest after changes constitutes acceptance of the updated policy.
Questions or concerns about your privacy? Reach us at: