StayStat Privacy Policy

Last Updated:

Summary

  • Mobile App Only: This privacy policy applies specifically to the StayStat mobile application, not our website. Website privacy practices are covered separately.
  • Minimal Collection: We collect only what's needed to provide core features: precise location (to detect country changes), crash data (to fix issues), and a device identifier (for reliability/analytics).
  • No Tracking: We do not track you across apps or websites.
  • No Data Sales: We do not sell personal data.
  • No Advertising: No third‑party advertising or marketing.

Data We Collect

  • Precise Location (App Functionality): Used on-device to detect country changes and trigger local notifications you enable. Not used for ads or tracking.
  • Diagnostics – Crash Data (Analytics, App Functionality): Crash logs and error details (Firebase Crashlytics) to improve stability. Opt-out available in Privacy & Diagnostics settings.
  • Identifiers – Device Identifier (Analytics, App Functionality): A device-scoped ID used to help diagnose crashes and app reliability.
  • In-app Feedback (App Functionality, only when you submit feedback): When you tap Submit on the in-app Feedback form, we send your answers, an optional email if you provide one, basic device information (app version, build number, iOS version, device model, locale), and a per-install anonymous identifier to Formspree, which forwards them to our support inbox. See the In-app Feedback section below for the exact list.

Apple iCloud Sync (CloudKit)

  • What Syncs: Trips, profiles, expenses, and receipts sync across your signed-in Apple devices (iPhone and iPad) through your own Apple iCloud account.
  • How It Works: StayStat uses NSPersistentCloudKitContainer to store data in your own private iCloud database.
  • Not Accessible to Us: StayStat operates no backend database. Your iCloud data is not visible to StayStat engineers.
  • Disable Anytime: iOS Settings → [Your Name] → iCloud → Apps Using iCloud → StayStat (toggle off).

In-app Feedback (Formspree)

Tapping Submit feedback in the app posts your answers to Formspree, Inc. over an encrypted HTTPS connection. Formspree forwards the submission as an email to our support inbox; we do not run our own backend database for feedback. Submissions are subject to Formspree's privacy policy.

Always sent (basic device info):

  • App version, build number, iOS version, device model (generic, e.g. iPhone), and locale.
  • A per-install anonymous identifier (a random UUID generated on first launch and cleared when you reset your profile). It is never linked to your Apple ID or any account we maintain.

Sent only when you provide them:

  • Your selected role (e.g. PR holder, work permit holder).
  • Your free-text "one thing you'd change" answer.
  • How you found StayStat (App Store search, friend or family, etc.).
  • Your usage frequency, top features, location-detection comfort, and export-intent answers.
  • Your email address — used only as the Reply-To so we can follow up. If you don't enter one, the submission is anonymous to us.

Not sent: trip data, profile information, location history, photos, or anything else you store in the app.

Permissions the App Requests

  • Location — Always & When In Use: Background country detection and border-crossing notifications.
  • Camera: Capturing boarding passes and receipts for on-device OCR.
  • Photo Library: Importing existing boarding pass / receipt images.
  • Notifications: Travel alerts and visa-related reminders.
  • Background Refresh: Scheduled via BGTaskScheduler for periodic location checks.
  • Biometrics (Face ID / Touch ID): Optional app lock; processed by the Secure Enclave.

How We Use Data

  • App Functionality: Background country-change detection, notifications you opt into.
  • Analytics and Reliability: Aggregate crash/error insights to improve performance and stability.

Data Sharing

  • Crashlytics, Analytics, Remote Config, App Check (Google Firebase): Crash logs, anonymous usage analytics, feature-flag fetches, and app-attestation tokens. Google's Firebase privacy policy: firebase.google.com/support/privacy.
  • In-app feedback (Formspree, Inc.): The fields described in the In-app Feedback section above are forwarded to our support inbox via Formspree. Formspree's privacy policy: formspree.io/legal/privacy-policy.
  • Apple iCloud: Trips, profiles, expenses, and receipts sync via your own Apple iCloud account. Apple's privacy policy: apple.com/legal/privacy.
  • No Sale/No Third-Party Ads: We do not sell data or use third‑party advertising SDKs.

Data Linked to You

  • We do not link collected data (location, device ID, crash data, feedback content, anonymous feedback identifier) to your identity.
  • The optional email you provide in the in-app Feedback form is sent to Formspree solely as the email Reply-To header so we can respond to you. We do not store it in any database we control.

Tracking

  • We do not use data for cross‑app or cross‑site tracking. No App Tracking Transparency prompt is shown.

Retention

  • Location-derived events used for app features are stored on‑device. Crash data and device identifiers may be retained by our crash provider for operational needs and then deleted per their policies.
  • Feedback submissions are retained by Formspree per their data-retention policy and within our support inbox until they are no longer needed for follow-up. The per-install anonymous feedback identifier is regenerated whenever you reset your profile.

Your Choices

  • Location: iOS Settings → Privacy & Security → Location Services → StayStat (change permission or disable).
  • Notifications: iOS Settings → Notifications → StayStat (change or disable).
  • Delete local data: Delete the app or use in‑app settings if provided.

Children

  • StayStat is not directed to children under the age required by local law. If you believe we collected data from a child, contact us.

Security

  • We use platform security (Keychain, encryption in transit) and follow best practices to protect data.

Contact

Related Pages