The short version
ResideGO counts the days you spend in each country. Your days, trips, passports, permits and settings stay on your iPhone and in your own iCloud. We run no accounts, no ads, no tracking and no server that holds your records. We cannot see your data and we never sell it. Anonymous usage analytics and crash reports are off until you turn them on. Near a border, the app may ask Apple Maps which country a place is in. ResideGO gives estimates only. It is not tax or immigration advice.
1. Who we are
ResideGO is made by an independent developer ("we", "us"); the developer's name is shown as the seller on ResideGO's App Store page. We are the controller for the limited data described in sections 4 and 5. Contact for anything about privacy: info@familygo.app. Website: https://familygo.app.
2. What stays on your device and in your iCloud
These never reach us, under any setting:
- Days and countries. For each day, the country the app decided you were in, how it decided (automatic, manual, photos, import), review flags and your edit history.
- Trips. Past and planned trips, countries, dates, optional notes, and which passport you used.
- Passports and permits. The countries of passports you hold, and residence permits or long-stay visas (country, type, dates). No passport numbers, scans or photos are asked for.
- Settings. Goals, tax home, rule choices, alerts and language.
- Evidence points. The rough location data behind a day. These stay on the device only and are not synced to iCloud.
Where it is stored. In an on-device database. If iCloud is on for ResideGO, your days, trips, passports, permits and settings also sync through your private iCloud (CloudKit private database), which belongs to your Apple Account. We have no access to it. iCloud sync uses silent system notifications from Apple to tell your devices that data changed; they carry no content from us. Reminders and alerts are local notifications created on your device.
Exports. A backup, CSV or PDF report is created on your device and goes only where you send it. Once shared, it is outside the app.
Support diagnostics. If you email support from the app, you choose whether to attach a diagnostics file and see what it contains first: tracking events and battery use for the last 7 days, never coordinates.
3. Permissions and Apple services
Location. ResideGO asks for location access to work out which country you are in: "While Using" first and, to count days automatically, "Always".
- The app wakes on significant location changes, visits and a small region around your last position, and does a one-time check about once a day. It does not run continuous GPS.
- Each fix is turned into a country using country borders bundled in the app. Only the country (and a flag if the result is uncertain) is kept for the day, not raw coordinates.
- To spot flights, the app keeps your last position rounded to about 11 km in its local settings on your device. It is overwritten each time, never synced to iCloud and erased by Delete all data.
- Close to a border, the app may send that single coordinate to Apple's reverse geocoding service (MapKit) to decide the country. It goes to Apple, not to us.
- You can use While Using only, pause tracking, deny location (then you add days by hand), or change this at any time in iOS Settings.
Photos (optional). If you use "Fill the gap", ResideGO can ask for access to your photo library (full or limited). It reads only the date and location tags of photos, on your device, to suggest countries for days you did not track. Photos are not copied, uploaded or stored.
Notifications. Local notifications, for example when Schengen days run low, an overstay risk, a threshold you set, a new country, tracking problems, and a reminder two days before a free trial ends. You can turn them off in the app or in iOS Settings.
ResideGO does not request access to your calendar, contacts, camera, microphone, health data or Face ID. The "calendar" in the app is its own day view.
4. What reaches us, and only if you allow it
At setup, and later in Settings, you can switch on two separate choices. Both are off until you turn them on.
- Anonymous usage analytics (Firebase Analytics, Google).
- Sent: steps viewed in setup, selected goals, passport type (EU, non-EU or dual), trip count as a bucket (0, 1, 2-3, 4-6, 7+), which result you viewed, paywall views and plan choices, trial and purchase events (product, price, currency), permission outcomes, planner outcome (fits, tight, overstay), export type, alert type, use of widgets or shortcuts, and tracking health. User properties are goals, passport type, app language, subscription state and whether tracking is on.
- Never sent: countries per day, trip destinations, locations, evidence points, passports, permits, notes or report contents. The app only sends events from a fixed list.
- Crash reports (Firebase Crashlytics, Google). If on, a crash sends the technical crash log, device model, iOS version, app version and a random installation identifier. Never your records or anything you wrote.
- Identifiers. Firebase assigns a random app-instance identifier, not your name, e-mail or Apple ID. It is not linked to your identity, and we have no accounts to link it to. Google sees technical data such as your IP address on any request. The app does not use Apple's advertising identifier (IDFA) or ask for tracking permission, and Google ad storage and ad personalisation are off.
- Remote Config (only with usage analytics on). If you have turned on usage analytics, the app also fetches updated Schengen membership and rule data and paywall flags from Google Firebase Remote Config. The request carries a random Firebase installation ID, the app version and the device language, and nothing about you or your entries. If usage analytics is off, the app does not make this request and uses the data built into it. Turning analytics off stops the fetching. The update is applied only if it carries a valid signature.
Why and legal basis (GDPR / UK GDPR). To fix crashes and see which parts of the app are used. The basis is your consent (Art. 6(1)(a)), which you can withdraw at any time.
Who processes it for us: Google (Google Ireland Ltd and Google LLC), for Firebase Analytics, Crashlytics and Remote Config, under Google's data processing terms. It processes the data only on our instructions.
5. What reaches us without a choice
Purchases. Purchases are sold and billed by Apple. We never see your card or Apple Account details. The app checks your subscription status with Apple on your device and keeps a local copy of that status (active, trial, expired) to unlock features. Apple's own privacy policy applies to your payment and Apple Account.
E-mails you send us. If you write to info@familygo.app, we use your message and address to answer you. Legal basis: our legitimate interest in answering (Art. 6(1)(f)).
6. How long we keep it
- Your app data: we hold none. It stays on your device and in your iCloud until you delete it.
- Firebase Analytics event data: 2 months, then deleted.
- Crashlytics crash reports: 90 days.
- Support e-mails: deleted 12 months after the conversation ends, unless the law requires longer.
7. International transfers
Google may process data in the United States. Transfers are covered by the EU-US Data Privacy Framework (Google is certified) and the European Commission's Standard Contractual Clauses. Apple handles iCloud, App Store and Apple Maps data under its own policies.
8. Your choices and rights
- Change your consent at any time in Settings (Privacy). Turning a choice off stops sending at once.
- Export a backup, CSV or PDF in the app.
- Delete everything in Settings, Data, Delete all data. It deletes your records on the device and in your iCloud (the app's CloudKit data), diagnostics and temporary exports. Your subscription stays with your Apple Account. It also resets the analytics identifiers, so nothing sent later can be joined to anything sent before. Deleting the app removes the data on the device; iCloud data can be removed in iOS Settings, your name, iCloud, Manage Storage.
- Your rights under GDPR and UK GDPR: access, rectification, erasure, restriction, objection, data portability, and withdrawing consent without affecting what was done before. Your records are on your device and in your iCloud, so you control them directly in the app. We hold no records linked to you, and analytics identifiers are random and not linked to your identity, so we usually can't find data about you. Turning analytics off and Delete all data reset them. You can write to info@familygo.app and we will help where we reasonably can, within one month.
- Complaints: you can complain to the data protection authority where you live or work.
- US residents (including California): we do not sell or share personal information and do not use it for targeted advertising. You can use the rights above in any US state.
- Legal bases for running the app: the app runs on your device, so we mostly don't process that data as a controller. Where we do, the basis is performing our contract with you and our legitimate interest in providing a working app.
9. Children
The app is not directed to children under 13 (under 16 in the EEA where that age applies). We do not knowingly collect data from children.
10. Changes
If we change this policy, we update the date at the top and, for changes that affect what is sent, ask again in the app before anything new is sent. The current version is at https://familygo.app/residego/privacy/.
Changes: 9 November 2026: first version.