Privacy Policy

Last updated: July 5, 2026

Passage is designed to run entirely on your device. This policy explains what data the app uses, where it lives, and what leaves your device.

Summary

No account required. You do not sign up. You do not create a profile.
No cloud sync. All your trips, photos, and GPS data live only on your device.
No analytics. The app does not track how you use it. There is no third-party SDK collecting usage data.
No advertising. The app contains no ads and no ad-related tracking.

What the app accesses

Location (optional). If you enable GPS auto-detect, Passage uses your device location to determine which country you are currently in. This is done through Apple's Core Location framework using Significant Location Changes and Visit monitoring — designed for minimal battery use. Location data is stored only on your device in an evidence log file (accessible via Profile → Debug → Export GPS Trace). It never leaves your device unless you explicitly export and share it.

Photo library (optional). If you use the photo scan feature, Passage reads the location metadata (EXIF) of your geotagged photos to reconstruct past trips. Photos themselves are never displayed, copied, uploaded, or transmitted. Only the country code + timestamp are extracted, and only on your device.

Notifications (optional). Passage can send you a local notification when you return to your home country (reminding you to review trips) or before you approach a compliance limit. Notifications are generated on your device.

What data leaves your device

Nothing, unless you initiate it. Passage does not have a backend server. It does not send data to us or anyone. The only ways data can leave your device:

You tap Export from the Profile tab and share the exported JSON via the iOS share sheet (e.g. AirDrop, iCloud Drive, email). You choose the destination.
You tap Export GPS Trace and share the raw location log the same way.
Apple's built-in TestFlight or App Store crash reporting, if you opted into it at the OS level. This is Apple's system, not ours.

Data retention

Trips, staged trips, compliance rules, and the GPS trace file are stored on your device using Apple's SwiftData framework and the app's private container. They persist until you delete them (Profile → Clear All Data) or uninstall the app.

Children

Passage is not directed at children under 13 and does not knowingly collect information from them. There is no user-generated content, no messaging, and no way to contact other users.

Changes to this policy

If we change how the app handles data, we will update this page and revise the "Last updated" date. Because the app has no backend, we cannot notify you server-side — please check this page after major app updates.

Contact

Questions about privacy? Email support@usepassage.app.