Privacy policy
Last updated 25 August 2026 · applies to the Residency iOS app and residency.day
Location
With your permission, the app reads your device's location in the background to work out which country you are in. Coordinates are resolved against map data bundled with the app, entirely offline, and are never stored and never transmitted - to us or to anyone. The app keeps only country-level records, on your phone.
What our servers hold
If you sign in: an account identifier, a contact address for authentication and service messages, and a push token so warnings can reach you. If you pair with a partner: the fact that two accounts are linked, and messages between them that are encrypted on your devices - our server stores and forwards them and cannot read them. That is the whole list. There is no table for days, countries, trips or coordinates, and your day counts are never uploaded.
Sharing
A share you create is a snapshot of day counts only - country, days used, threshold, days left, dates. It contains nothing about where you were on any particular day. It is stored server-side so the person holding the code can read it, and it is deleted when you withdraw the code. Share codes travel in the link fragment, which servers do not see or log.
What we do not do
- No advertising, trackers or analytics SDKs.
- No sale or sharing of data with third parties.
- No use of your data for anything except showing you your own record.
Notifications
Threshold warnings are computed on your device against your local record.
Retention and deletion
Your record lives in the app's local database; deleting the app deletes it, and the app offers an encrypted backup you keep yourself. Deleting your account removes your account data, contact address, push tokens, pairings and shares from our servers.