The apps do not collect your travel data. There is no Flags account, cloud sync, advertising SDK or third-party analytics SDK for your travel history. Your app data stays on your device unless you choose to share an export yourself.
To read EXIF metadata from your photos to detect entry and exit dates. We only process this locally on your device; nothing is uploaded. We do not read the photos themselves.
If you opt in, the app will warn you locally before you risk overstaying. Push messages are generated on-device — they do not pass through any server we operate.
Travel days, country codes, the passport country you selected, planned trips. All in SwiftData. None of it leaves your phone.
None. No analytics SDK. No advertising network. No content-delivery network that proxies your data. No “anonymous diagnostics” pipeline.
The website uses PostHog's EU service for anonymous page-view and App Store CTA measurement. It does not put an analytics ID in cookies, local storage or session storage, so we cannot follow a visitor across pages or recognise a returning visitor. We do not call PostHog's identify feature or create person profiles. The only browser value we store is your optional footer preference if you turn website analytics off.
We capture aggregate page-view totals, a coarse acquisition channel, and a deliberately selected Get the App click event so we can improve the website's onboarding journey. We disable session replay, heatmaps, surveys, automatic click and form capture, and do not send calculator entries or support-form contents to PostHog. The iOS apps do not include PostHog or any other analytics SDK. You can turn website analytics off at any time using the footer control.
If you contact us through the support form, we store the email address, message, selected category and page context you provide so that we can reply and handle the request. We delete support messages after 180 days. Do not send passport, tax-return or other sensitive travel documents through the form. We do not store your user agent.
The app is rated 4+. The apps do not collect a child's travel data. The website support form should be used only by someone able to provide a contact email for a response.
If we ever change anything in this policy, we will update the date at the top of this page. There is no other change log because there is no data history to migrate.
Privacy questions go via the support form — pick Privacy question as the type. We don't publish a contact email because we don't want it scraped.
This page describes the app and website data practices in plain English. It is not a substitute for legal advice.