Privacy Policy

1. Information We Collect

We only collect the data required for the app to function properly.

1.1. Account Information

• Email address

We use secure authentication. We do not store or access your password in plain text, and we never see it.

1.2. Passport Information

• Passport name
• Issuing country
• Expiry date
• Passport category (regular, diplomatic, etc.)

1.3. Visa Information

• Visa country
• Visa type
• Entry and exit dates
• Visa validity
• Maximum allowed stay
• Days used and remaining (calculated automatically)

1.4. Trips Data

• Country of travel
• Entry and exit dates
• Calculated days spent in each destination

1.5. AI Visa Scan (Optional Feature)

To help you extract information from visa and passport pages:

• You may upload an image of a visa or passport page.

These images are NOT stored. They are sent to OpenAI for text extraction only, then deleted immediately after the dates and details are read. They are not retained on our servers, are not reused, and are not used to train any AI model.

1.6. Profile Photo (Optional)

If you upload a profile photo, it is stored via Cloudinary. You may delete it at any time from your profile settings.

1.7. Flight Data (Optional)

• Departure and arrival airports
• Flight dates and times
• Flight numbers (optional)

1.8. City & Location Data (Optional)

When using the Explore map feature, you may tag:

• Cities visited, lived in, or want to visit
• City coordinates (derived from your text search input, via Nominatim)
• Photo memories pinned to cities (stored via Cloudinary)

City coordinates are stored only as entered by you. We do not track your live GPS location.

1.9. Boarding Pass Scan (Optional)

To auto-add trips from a boarding pass photo:

• You may upload a photo or PDF of a boarding pass or e-ticket.

These images are NOT stored. They are processed temporarily by OpenAI and deleted immediately after the destination and dates are extracted. No boarding pass image is retained on our servers.

1.10. Push Notification Token (Mobile App)

If you use the iOS app and allow notifications, we store the device token Apple issues for your device, so we can send you visa and passport reminders. The token identifies the device, not you personally. It is deleted when you delete your account, and when Apple tells us the device no longer accepts notifications. We do not use it for advertising.

1.11. App Analytics

Using analytics tools, we may collect anonymous data:

• Page visits
• Device type (mobile/desktop)
• App performance logs
• Crash and error reports

This data cannot identify you personally.

2. What We Do Not Collect

We do not collect or track:

• Live GPS location
• Contacts
• Biometric data
• Payment card numbers
• Sensitive government identifiers (unless you manually enter them)

We do not use advertising trackers.

3. How We Use Your Data

Your data is used only to deliver the app's features:

• Calculate visa days and compliance
• Track trips and travel history
• Provide country insights
• Prevent overstays
• Send visa/passport expiry reminders
• Improve app stability and user experience
• Process AI-based visa scans (without storing images)

We do not sell, rent, or share your data with advertisers or external companies.

4. Data Storage & Security

We use industry-standard security measures:

• Encrypted database storage
• HTTPS secure connections
• Access controls
• No permanent storage of uploaded visa/passport images

Data is stored in secure cloud hosting through our backend service provider.

5. Local Storage

To improve performance, some data may be stored locally on your device:

• Cached country insights
• App settings (theme, language, currency)
• Temporary trip data

This information stays on your device.

6. Third-Party Services

The app may interact with trusted third-party providers:

• Stripe (payments, no card data stored by us)
• OpenAI (AI scan processing, images deleted immediately after extraction)
• Cloudinary (profile photo storage, photos stored only if you upload one)
• Airtable (internal CRM, we store your email and plan tier to manage your account)
• Resend (transactional email delivery, confirmation, reminders, receipts)
• Railway (cloud hosting and database, all app data resides here)

We ensure these providers follow industry security standards.

7. Data Deletion & Retention

We keep your data only while your account is active.

When you delete your account:

• All passports, visas, trips, and personal data are permanently erased
• AI scan images are already deleted automatically after processing
• Deletion is irreversible

You can request account deletion at any time.

8. Your Rights

You can:

• Access your data
• Update your information
• Request deletion
• Ask for a data export
• Disable notifications

Contact us anytime for support.

If you are in the EU/UK (GDPR)

We process your data based on: performing our contract with you (running the app), your consent (optional features like AI scans and location tagging), and our legitimate interest in keeping the app secure and reliable. You also have the right to lodge a complaint with your local data protection authority.

If you are in California (CCPA/CPRA)

We do not sell or share your personal information for cross-context behavioral advertising, and we never have. You have the right to know what personal information we hold about you, request its deletion, correct it, and not be discriminated against for exercising these rights. Contact us to exercise any of them.

9. Children's Privacy

The app is intended for users aged 16 and older. We do not knowingly collect data from users under this age.

If you believe a child under 16 has used the app, contact us and we will remove the account.

10. International Data Transfers

Your information may be processed on servers located outside your country. We ensure all transfers comply with applicable data-protection laws (GDPR, etc.).

11. Data Breach Notification

If a security incident occurs that puts your personal information at risk, we will notify affected users by email without undue delay, and in any case within 72 hours of becoming aware of it where required by law, describing what happened, what data was involved, and what we are doing about it.

12. Changes to This Policy

We may update this Privacy Policy occasionally. The "Last Updated" date reflects the most recent revision.

13. Contact Us

For privacy questions or support: