Award
Sign in

Privacy Policy

Last updated: July 4, 2026

This policy describes how Awardand our extended products collect, use, and protect your information. We are committed to transparency and to safeguarding your privacy in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and Singapore's Personal Data Protection Act (PDPA), where applicable.

Data we collect

Account information

When you sign in to Award using a social login provider (such as Google), we receive and store your name, email address, and profile picture. This information is used solely to create and maintain your account, authenticate you when you use the site, manage access to your plan, and send required account email. We do not access any other data from your social login provider.

Preferences and saved routes

If you complete onboarding or update settings, we store personalization choices such as your home airport, preferred mileage programs, saved routes, cabin preferences, marketing email choice, and privacy or account-email acknowledgements. These records are used to personalize your dashboard, route shortcuts, and account settings.

Flight availability data

Flight availability data retrieved from searches may be collected. This data includes routes (origin and destination airport codes), travel dates, fare types, miles pricing, seat counts, flight numbers, and aircraft types. This is flight data only — we never collect your third-party platform credentials, account details, booking references, payment information, or any other personal information from these platforms.

You can opt out of sharing flight availability data at any time. When opted out, search results are for your personal use only and no data is sent to Award.

Extension telemetry

The browser extension may send operational telemetry, such as extension version, event name, timing, and error information. We use this to debug ingestion, improve reliability, and understand feature health. We do not collect airline credentials, account passwords, booking references, payment cards, or browser session tokens.

Analytics

We use analytics tools to understand how people use the site, such as page views, feature usage, and product health. For authenticated users, analytics events may be associated with your Award account ID or email so we can debug account-specific issues, understand feature adoption, and prevent abuse. If you prefer not to be included in browser analytics, you may use a privacy-preserving browser or browser settings that block such tracking.

Legal basis for processing

Under the GDPR, we process your personal data on the following bases:

  • Contract performance – processing account information is necessary to provide access to the service, authenticate sign-ins, operate saved routes and preferences, manage plans, and deliver required service email.
  • Legitimate interest – security, abuse prevention, operational telemetry, and product analytics help us maintain and improve Award.
  • Consent – marketing email and voluntary sharing of flight availability data are optional and can be withdrawn at any time.
  • Legal obligation – some billing, tax, fraud-prevention, or compliance records may be retained where required by law.

Email communications

Required account email is necessary to operate Award. It includes magic links or one-time sign-in codes, account security notices, billing and plan messages, important service updates, and other administrative messages about your account. You cannot opt out of required account email while keeping an active account.

Marketing email is optional. It may include product updates, route ideas, community updates, deal inspiration, and optional achievement notifications. You can opt in during onboarding or in Settings, and you can withdraw that choice at any time without affecting required account email or your ability to use Award.

Availability Alerts are optional, account-bound, recurring emails. When you create one, we store only the matching criteria you choose — never a separate email address; each email is sent to your account's current address at send time. Flight criteria may include program, airports, cabin, dates, seats, and waitlist preference. Hotel criteria may include program, property, check-in dates, award rate type, and a points ceiling. Hotel alerts represent reported one-night award rates, not a confirmed multi-night stay. The alert becomes active when you create it; no confirmation email is sent. We email you when availability appears or the best price drops — at most once per day per alert — until its travel window passes; expired alert data is deleted after 30 days. You can delete an alert at any time from the Alerts section of your account settings. Every alert email contains a deletion link that removes the alert, criteria, delivery records, and alert-link hashes immediately. Deleting your account also removes account-bound alerts and their related data.

How shared data is used

Flight availability data that users choose to share is stored in our database and used to power the Award platform. This allows other users with access to search and browse recent award availability. Shared data is used solely to operate Award.

What we do not collect

  • We do not collect or access your airline frequent flyer credentials or third-party platform account details.
  • We do not collect financial or payment information.
  • We do not read or store your browser cookies or session tokens.
  • We do not sell your personal data.

Your rights

Under the GDPR and other applicable data protection laws, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete personal data.
  • Erase your personal data.
  • Restrict or object to certain processing of your data.
  • Receive your data in a structured, commonly used format.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us via the contact page. We will respond to your request within 30 days.

Data retention

Flight availability data is retained as long as it remains useful for displaying availability trends. We may remove older data periodically. Preferences and saved routes are retained until you update or remove them, or until your account is deleted. Consent and acknowledgement timestamps are retained as part of your account record so we can honor and document your choices. Account information is retained for as long as your account is active. If you wish to delete your account and associated data, contact us and we will process your request promptly.

Children's privacy

Award is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us so we can delete it.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of Award or our extended products after changes constitutes acceptance of the revised policy.

Contact

If you have questions about this privacy policy or wish to exercise your data protection rights, please reach out via the contact page.