StayStat Privacy Policy

Summary

Mobile App Only: This privacy policy applies specifically to the StayStat mobile application, not our website. Website privacy practices are covered separately.
Minimal Collection: We collect only what's needed to provide core features: precise location (to detect country changes), crash data (to fix issues), and a device identifier (for reliability/analytics).
No Tracking: We do not track you across apps or websites.
No Data Sales: We do not sell personal data.
No Advertising: No third‑party advertising or marketing.

Precise Location (App Functionality): Used on-device to detect country changes and trigger local notifications you enable. Not used for ads or tracking.
Diagnostics – Crash Data (Analytics, App Functionality): Crash logs and error details (Firebase Crashlytics) to improve stability. Opt-out available in Privacy & Diagnostics settings.
Identifiers – Device Identifier (Analytics, App Functionality): A device-scoped ID used to help diagnose crashes and app reliability.

What Syncs: Trips, profiles, expenses, and receipts sync across your signed-in Apple devices (iPhone and iPad) through your own Apple iCloud account.
How It Works: StayStat uses NSPersistentCloudKitContainer to store data in your own private iCloud database.
Not Accessible to Us: StayStat operates no backend database. Your iCloud data is not visible to StayStat engineers.
Disable Anytime: iOS Settings → [Your Name] → iCloud → Apps Using iCloud → StayStat (toggle off).

Location — Always & When In Use: Background country detection and border-crossing notifications.
Camera: Capturing boarding passes and receipts for on-device OCR.
Photo Library: Importing existing boarding pass / receipt images.
Notifications: Travel alerts and visa-related reminders.
Background Refresh: Scheduled via BGTaskScheduler for periodic location checks.
Biometrics (Face ID / Touch ID): Optional app lock; processed by the Secure Enclave.

App Functionality: Background country-change detection, notifications you opt into.
Analytics and Reliability: Aggregate crash/error insights to improve performance and stability.

Service Providers: We use Firebase Crashlytics (Google) for crash reporting. They process data on our behalf under their terms.
No Sale/No Third-Party Ads: We do not sell data or use third‑party advertising SDKs.

We do not link collected data (location, device ID, crash data) to your identity.

We do not use data for cross‑app or cross‑site tracking. No App Tracking Transparency prompt is shown.

Location-derived events used for app features are stored on‑device. Crash data and device identifiers may be retained by our crash provider for operational needs and then deleted per their policies.

Location: iOS Settings → Privacy & Security → Location Services → StayStat (change permission or disable).
Notifications: iOS Settings → Notifications → StayStat (change or disable).
Delete local data: Delete the app or use in‑app settings if provided.

StayStat is not directed to children under the age required by local law. If you believe we collected data from a child, contact us.

We use platform security (Keychain, encryption in transit) and follow best practices to protect data.