Passtally
Legal

Privacy Policy

Last updated: 4 October 2026

In short: your trips, days and locations never leave your iPhone. We have no account system and no server that stores your travel data. The only data that leaves your device is (1) purchase information handled by Apple and RevenueCat, and (2) anonymous usage statistics, only if you choose to share them.

1. Who we are

Passtally is published by Théo Belnou, trading as Ikigai Production, based in Valencia, Spain ("we", "us"). We are the data controller for the limited data described below. Contact: theo@ikigai-production.com.

2. Data that stays on your device

Everything you enter or the app records is stored in a local database on your iPhone, protected by iOS data protection:

  • stays (country, entry and exit dates, notes), day corrections, residence permits or long-stay visas you add;
  • the change history used for undo;
  • your settings.

We do not receive, store or have access to this data. If your iPhone backs up to iCloud or a computer, this data may be included in that backup, under Apple's terms and your own settings.

3. Location

Automatic tracking is optional and off by default. If you turn it on and allow location access, iOS gives the app occasional location updates (significant changes and visits). Each location is converted on your iPhone into a country, using maps built into the app, and the coordinates are then discarded. Locations are never sent to us or to any third party, and no GPS history is kept. You can turn tracking off at any time in the app or in iOS Settings.

4. Purchases (Apple and RevenueCat)

Payments are processed by Apple; we never see your payment details. To check whether you have an active subscription or lifetime purchase, the app uses RevenueCat, Inc. (United States). RevenueCat receives a random app user identifier generated by the app, your purchase and receipt information, and basic technical data such as device model, iOS and app version, country/storefront and IP address. It does not receive your trips or locations.

Legal basis: performance of a contract (providing the features you paid for). RevenueCat's privacy policy: revenuecat.com/privacy. Transfers to the United States rely on the safeguards described there (such as Standard Contractual Clauses or the EU-US Data Privacy Framework).

5. Usage statistics (TelemetryDeck, optional)

Off unless you turn on "Share anonymous usage stats" at the end of onboarding or in Settings. When on, the app sends anonymous signals to TelemetryDeck GmbH (Germany), such as "onboarding completed", "planner used", "paywall viewed" (with the screen it came from), "purchase completed" (with the plan type) or "export created" (with the file type), together with technical data such as app and iOS version. Identifiers are hashed on your device before sending. These signals never include a country, a date, a location, a note or anything you typed.

Legal basis: your consent, which you can withdraw at any time by turning the option off in Settings. TelemetryDeck's privacy policy: telemetrydeck.com/privacy.

6. What we do not do

  • No advertising, no advertising SDKs, no selling or sharing of data.
  • No tracking across other companies' apps or websites.
  • No account, no email collection inside the app.

7. Exports and sharing

CSV and PDF exports are created on your device and only leave it if you choose to share them (for example by email or AirDrop). The recipient you choose is then responsible for that copy.

8. Retention

  • On-device data: kept until you delete it (Settings › Delete all data) or delete the app.
  • RevenueCat: kept for as long as needed to manage your purchases and meet legal obligations, per RevenueCat's policy.
  • TelemetryDeck: anonymous signals are kept in aggregated form for statistics.

9. Your rights

Under the GDPR and the UK GDPR you can request access to, correction or deletion of your personal data, restrict or object to processing, and request portability. Because your travel data lives only on your device, you can export or delete it yourself at any time from Settings. For purchase or statistics data, write to theo@ikigai-production.com; we will forward requests to RevenueCat or TelemetryDeck where needed. You may also complain to a supervisory authority, such as the Spanish Agencia Española de Protección de Datos (aepd.es) or the UK Information Commissioner's Office (ico.org.uk).

10. Children

Passtally is not directed at children under 16 and we do not knowingly collect their data.

11. Security

On-device data is encrypted at rest by iOS. Data sent to RevenueCat and TelemetryDeck travels over encrypted connections.

12. Changes

If this policy changes, we will update this page and the date above. Significant changes will also be shown in the app.