Privacy Policy
Passage stores your travel records on your device and does not operate a backend that receives them. This policy describes every data flow, including Apple system services, device backups, and exports you initiate.
Summary
- Passage does not collect your data. We cannot view or retrieve your trips, locations, rules, settings, photos, or photo metadata.
- No account required. You do not sign up. You do not create a profile.
- No Passage cloud sync. App records are stored in the app's private container. Your trip database may be included in an iCloud or computer device backup controlled by you and Apple.
- No analytics. The app does not track how you use it. There is no third-party SDK collecting usage data.
- No advertising. The app contains no ads and no ad-related tracking.
What the app accesses
Location (optional). If you enable GPS auto-detect, Passage uses your device location to determine which country you are currently in. This is done through Apple's Core Location framework using Significant Location Changes and Visit monitoring — designed for minimal battery use. Location data is stored in an on-device log used to reconstruct trips and is excluded from device backups. Passage may use Apple's system geocoding service to resolve coordinates into city names.
Photo library (optional). If you use the photo scan feature, Passage requests Full or Limited library access to read the location metadata (EXIF) of geotagged photos and reconstruct past trips. Passage never edits or deletes your photos. Photos themselves are never displayed, copied, or uploaded. Passage may use Apple's system geocoding service to resolve coordinates into city names.
Notifications (optional). Passage can send you a local notification when you return to your home country (reminding you to review trips) or before you approach a compliance limit. Notifications are generated on your device.
What data leaves your device
Passage does not receive any of this data. Data may leave the device in these specific cases:
- You export a backup from the You tab and share the JSON through the iOS share sheet (e.g. AirDrop, iCloud Drive, email). You choose the destination.
- You explicitly share a generated map or travel image through the iOS share sheet. You choose the destination.
- TestFlight builds expose an optional GPS trace export for beta diagnostics. It is shared only when you choose a destination and is not available in the App Store version.
- Apple's system geocoding service may receive coordinates when Passage resolves city names. This service is operated by Apple and governed by Apple's privacy terms.
- Apple's built-in TestFlight or App Store crash reporting, if you opted into it at the OS level. This is Apple's system, not ours.
- Your trip database may be included when you back up the whole device to iCloud or a computer. The raw GPS location log is explicitly excluded from device backups.
Apple operates the geocoding, backup, crash-reporting, TestFlight, and App Store services above. Passage has no access to those Apple systems beyond receiving geocoding results inside the app.
Data retention
Trips, staged trips, compliance rules, and the on-device location log are stored on your device using Apple's SwiftData framework and the app's private container. They persist until you delete them (You → Data & Backup → Clear All Data) or uninstall the app. Passage does not collect crash reports or diagnostics itself; the only diagnostics are Apple's opt-in OS-level reports.
Children
Passage is not directed at children under 13 and does not knowingly collect information from them. There is no user-generated content, no messaging, and no way to contact other users.
Changes to this policy
If we change how the app handles data, we will update this page and revise the "Last updated" date. Because the app has no backend, we cannot notify you server-side — please check this page after major app updates.
Contact
Questions about privacy? Email support@usepassage.app.