Skip to content

Privacy Policy

Last updated: July 10, 2026.

This Privacy Policy explains what HealthyDynamics AI ("we") collects when you use You Must Be Mistaken (the "Service"), why, and the choices you have. By using the Service you agree to this policy.

Information we collect

  • Account information: your email address and a securely hashed password, managed through our authentication provider.
  • Your preferences: the home airports, destinations, and alert filters (price caps, stops, trip length, dates, cabin, airlines) you set, so we can send relevant deals.
  • Payment information: if you subscribe to Pro, payments are processed by Stripe. Stripe handles your card details directly; we never receive or store your full card number. We keep a subscription status and customer reference so we know your plan.
  • Email engagement: our email provider records standard delivery information (such as whether a message was delivered) so we can keep alerts working.
  • Basic technical data: logs and security data (such as IP address and browser type) generated when you use the Service, used to operate and protect it.
  • Messages you send us: if you use our contact form, we keep your name, email, and message so we can respond.

How we use your information

  • to find and send you flight deals that match your preferences;
  • to create and manage your account and subscription;
  • to respond to your messages and provide support;
  • to operate, secure, and improve the Service;
  • to comply with legal obligations.

Service providers we share with

We do not sell your personal information. We share it only with the vendors that run the Service, and only as needed:

  • Supabase:database, authentication, and hosting of your account data;
  • Stripe:payment processing and subscription billing;
  • Resend:sending account and deal-alert emails;
  • Vercel:application hosting; and Cloudflare:DNS and content delivery;
  • PostHog:product analytics (which pages and features are used), so we can understand and improve the Service.

When you click through to book a deal, we route you to a third-party travel site (sometimes through an affiliate link). Those sites have their own privacy policies, which govern what happens once you leave us.

Cookies

We use essential cookies to keep you signed in and to keep the Service secure. We also use PostHog, a product analytics tool, to understand how the Service is used (pages viewed, features used) so we can improve it. PostHog does not track you across other, unrelated websites, and we do not use third-party advertising cookies or sell your data to advertisers.

Data retention

We keep your information for as long as your account is active and as needed to provide the Service, then delete or anonymize it within a reasonable period, unless we must keep it to meet a legal obligation.

Your rights and choices

  • You can update your preferences, unsubscribe from alert emails, or delete your account from your settings.
  • Depending on where you live, you may have rights to access, correct, export, or delete your personal information. To make a request, contact us.

Children

The Service is not directed to children under [13/16, per your jurisdiction], and we do not knowingly collect their personal information.

International users

We operate in the United States. If you use the Service from elsewhere, your information may be processed in countries with different data protection laws.

Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the current version.

Contact

Questions or requests about your privacy? Contact us.