OnepackPrivacy Policy
Applies to the Onepack iOS app and this website · Last updated: 16 August 2026
1. The short version
Onepack has no sign-up, no account, no password and no user profile. We do not run analytics, advertising or tracking SDKs. We do not build a profile of you, and we do not sell, rent or share personal data with anyone — because we do not hold any.
Onepack is a search tool. To find flights it has to send your search terms to a flight-price provider, and to complete a purchase it has to hand you over to the seller you chose. Once you are on a seller's page, that seller's own privacy policy applies, not ours.
2. Who we are
"Onepack", "we" or "us" means the independent developer of the Onepack iOS application (bundle identifier com.cagataykyt.onepack), reachable at cagataykyt@gmail.com.
Onepack is not an airline, a travel agency, a booking platform, a payment service or a mobile network operator. It searches and displays offers that belong to third parties.
3. What we do and don't collect
We do not collect
- Names, email addresses, phone numbers or postal addresses
- Passport, ID or passenger details (they are entered on the seller's page, never in Onepack)
- Card numbers or any payment credentials
- Accounts, passwords or login sessions
- Advertising identifiers (IDFA), analytics events, crash-tracking profiles or behavioural data
- Contacts, photos, calendar, microphone or camera data
What is processed while you search
| Data | Why | Where it goes |
|---|---|---|
| Search terms — origin, destination, dates, number of travellers, currency, language | To return flight prices for the route you asked for | Travelpayouts / Aviasales flight-price API |
| Your device's public IP address | Flight prices are region-dependent; the provider requires an IP to price a search correctly | Resolved via Cloudflare's public cdn-cgi/trace endpoint, then sent with the search request |
| Device language and region | To show the app, the offers and the seller's page in your language and currency | Stays on device; language is passed on when a seller page is opened |
| Approximate location — only if you grant permission | To suggest the airport nearest to you as a departure point | Stays on the device. It is used locally against the bundled airport list and is never uploaded by us. |
Location permission is optional. If you decline it, every other part of the app keeps working; you simply pick your departure airport yourself. Accuracy is requested at kilometre level, not street level. You can change or revoke the permission at any time in iOS Settings → Privacy & Security → Location Services.
We do not receive, log or store any of the above on a server of our own. Onepack has no backend that holds user data.
4. Data stored on your device
The following is kept locally on your iPhone and never transmitted to us:
- Recent searches — so you can repeat a route with one tap
- Your currency preference
- Standard system caches (for example airline logo images)
Deleting the app removes all of it. Website data created inside the in-app browser (cookies set by a seller during checkout) is also stored by iOS on your device and is subject to that seller's policy.
5. Third parties
Onepack sends requests to, or hands you over to, the following independent companies. Each of them is a separate data controller with its own privacy policy, which we neither control nor take responsibility for:
- Travelpayouts / Aviasales — supplies live flight prices and the links to sellers.
- Airlines and online travel agencies — whichever seller you tap through to. The booking, the ticket, the passenger data and the payment are entirely theirs.
- Airalo — sells, activates and supports the travel eSIM plans shown in the eSIM tab.
- Cloudflare — its public trace endpoint is used to read your public IP, and this website is hosted on Cloudflare Pages.
- Apple — distributes the app and may provide us with anonymous, aggregated App Store statistics that cannot identify you.
Some links to sellers carry a partner (affiliate) identifier so that a referral can be attributed to Onepack. This identifier refers to us, not to you, and never changes the price you pay.
6. Payments
No payment is ever taken by Onepack. When you choose an offer, the seller's own secure page opens inside the app. Card details, billing information and passenger data are entered there and go directly to that seller. We cannot see them, do not receive them and do not store them.
7. Legal basis and your rights
Where the GDPR (EU/UK), the Turkish KVKK or comparable laws apply, the limited processing described in section 3 rests on our legitimate interest in making the app work as requested, and — for location — on your explicit consent, which you can withdraw at any time in iOS Settings.
You have the right to request access to, correction of, or deletion of personal data held about you, and to object to its processing. In practice we hold no personal data and maintain no user records, so there is normally nothing for us to retrieve or erase — everything of yours lives on your own device and disappears when you delete the app. For data held by a seller, Travelpayouts or Airalo, please contact them directly. You may still write to us at cagataykyt@gmail.com, and you have the right to lodge a complaint with your local data protection authority.
8. Children
Onepack is not directed at children under 13 (or the minimum age in your country) and we do not knowingly process their data. Purchases are made on third-party sites and require the ability to enter into a contract.
9. Security
All network requests use HTTPS. Because there is no account and no server-side store of user data, there is no user database to be breached. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security of data in transit or of systems operated by third parties.
10. This website
This site sets no cookies, runs no analytics and embeds no third-party scripts or fonts — everything it loads is served from this domain. Our host (Cloudflare) may keep standard, short-lived server logs for security and abuse prevention; those are Cloudflare's, not ours.
11. No warranty and no liability
Onepack is provided "as is" and "as available", without warranty of any kind. To the fullest extent permitted by law, we accept no liability whatsoever for any loss or damage — direct, indirect, incidental, special, consequential, punitive or otherwise, including lost money, missed flights, cancelled or invalid bookings, incorrect or outdated prices, unavailable seats, eSIM plans that do not connect, loss of data, or any conduct, content, product or service of any third party — arising out of or in connection with the use of the app, this website, or any content or link contained in either.
Prices, availability, baggage rules, schedules and eSIM coverage are supplied by third parties, change constantly, and are shown for guidance only. The binding information is always the one displayed by the seller at the moment of purchase. Full terms are set out in our Terms & Disclaimer, which apply alongside this policy.
12. Changes to this policy
We may update this policy as the app evolves. The current version always lives at this address, with the date at the top. Continuing to use Onepack after a change means you accept the updated policy.
13. Contact
Questions about privacy, or a request regarding your data: cagataykyt@gmail.com.