Privacy Policy

Firefly ("we", "us") provides relocation-planning software. This policy explains what information we collect, how we use it, and the choices you have. The short version: your planning data is yours, we collect only what the product needs to work, and we never sell your personal information.

Information we collect

• Account information — your email address and a hashed password. We never store passwords in readable form.
• Profile and planning data — the information you enter while using Firefly: questionnaire answers, display name, nationality, target move date, selected countries and cities, roadmap content, tasks, checklists, documents lists, budget entries, scouting trips, notes, and resource links.
• Payment information — payments are processed by Stripe. We never see or store your card number; we store only your Stripe customer reference and subscription status.
• Usage analytics — anonymous, aggregated page-view analytics (via Vercel Web Analytics) to understand how the product is used. This does not identify you personally.
• Feedback — if you submit feedback in the app, we store your message and the page it was sent from.

How we use your information

• To provide the product: generating your personalized roadmap, comparisons, and plans.
• To generate AI content: your questionnaire answers and stage inputs are sent to Anthropic's Claude API to produce your roadmap content. Anthropic processes this data to provide the service and does not use it to train models.
• To process payments and manage your subscription tier (Stripe).
• To send transactional email such as password resets.
• To respond to support requests and improve the product.

What we do not do

• We do not sell or rent your personal information to anyone.
• We do not share your planning data with third parties except the processors named above.
• We do not send marketing email to your account address unless you opt in separately.

Cookies

We use cookies for authentication (keeping you signed in) and to remember onboarding progress. These are functional cookies required for the product to work; we do not use advertising or cross-site tracking cookies.

Data retention and deletion

Your data is retained while your account is active. You may request deletion of your account and all associated data at any time by emailing csmjgroup@gmail.com. We will complete the deletion within 30 days.

Security

Data is transmitted over HTTPS and stored with access controls on infrastructure provided by Railway (application and database) and Vercel (web frontend). No method of storage is 100% secure, but we take reasonable measures appropriate to the sensitivity of the data.

Changes to this policy

If we make material changes, we will update the effective date above and, where appropriate, notify you by email or in the app.

Contact

Questions about this policy or your data: csmjgroup@gmail.com