Privacy policy

Your location never leaves the phone

With your permission, WhereIAm checks your location a few times a day and whenever the system notices you have moved far enough. That location is turned into a country code inside your iPhone, by comparing it against borders the app carries with it. No connection and no outside service are involved in that step.

Each check stores the country, the time, the kind of signal and roughly how accurate it was. The coordinates are discarded as soon as the country is known: they are not saved on the device, they are not sent to anyone, and we cannot recover them.

Your photos are never copied or uploaded

With access to your photo library, WhereIAm reads the technical details of your photos, meaning the date, where they were taken and the camera model, to work out which country you were in that day. You choose which cameras count as proof, so only photos taken with your own devices are considered.

Photos are not copied, not duplicated and not sent anywhere. All that remains of the process is the country and the day.

The daily confirmation photo is one you take with the app's camera, and it stays on your iPhone.

The network check and your IP address

As an optional extra signal, the app can ask our server which country you are connecting from. That request carries no location, no identity and nothing about you: it asks, and it receives a country code.

In any request to a server, that server sees the IP address it came from, and ours is no exception. We do not store it and we do not link it to any user. Our hosting provider, Vercel Inc., may keep it for a limited time in its technical logs, as any web server does.

You can turn this signal off in Settings. The app works without it.

What data exists, and where

Everything the app records lives in the local database on your iPhone, and nowhere else:

• One record per day with the country or countries, how verified it is, and a note if you write one.
• The signals backing each day: kind, time, country, rough accuracy and a place name if there is one.
• Your rules, goals and planned trips.
• An activity log so you can see why the app concluded what it concluded.
• Your app preferences.

What we do not do

We do not sell or hand your data to anyone. There is no advertising, no profiling, no third-party trackers and no analytics inside the app. We share nothing with tax authorities or anyone else: what you do with the count is your business.

Legal basis and permissions

Every piece of data the app handles depends on a permission you grant in the system: location, photos, camera and notifications. You can withdraw them at any time in iOS Settings, and the app will tell you and carry on with whatever it still has.

Where this processing falls under the European General Data Protection Regulation, the legal basis is your consent, which you withdraw by revoking the matching permission.

Your rights

You have the right to access your data, correct it, erase it, restrict it, object to its processing and take it elsewhere. Since everything is on your device, you exercise these yourself, without asking us:

• Access and correct: any day can be opened and changed from the calendar.
• Take it with you: Settings, Privacy and data, export your data.
• Erase it: Settings, Privacy and data, erase local data. Deleting the app also removes it.
• Object: turn off the signal you do not want in Settings, or revoke the permission in iOS.

The optional account, when it arrives

We are building an account so you can sync between your devices and keep a backup. It does not exist yet and you cannot turn it on. When it arrives it will be optional: the app will keep working in full without it, as it does today.

We want you to know now what will change, because it changes a fair amount. With the account on, these are uploaded to our server: your days with their country and status, the signals backing them, your rules, goals and planned trips, the activity log, and any photos or documents you attach as proof.

What does not change: your coordinates still never leave your iPhone. A location becomes a country on the device and the coordinates are discarded there, so there is nothing to upload. Your photo library is not uploaded either: only the photos you deliberately attach to a day.

That data will sit on servers in the European Union, in Frankfurt, with our provider Supabase, and it will not be encrypted in a way that stops us reading it. Which means someone with administrative access to that database could see where you have been. We say it plainly because we would rather you knew before creating the account.

When this goes live we will update this page and tell you inside the app before it happens, not after.

Children

WhereIAm is not aimed at anyone under 16 and does not knowingly collect their data.

Complaints

If you think we are handling your data badly, write to support@whereiam.today first and we will sort it out. You can also complain to the data protection authority of the country where you live.

Changes to this policy

If we change how the app works, we will update this page and its date. If the change affects what we do with your data, we will tell you inside the app before it happens.