Privacy Policy

• Your travel data never leaves your device. Your timeline, trips, stays, residences, notes and documents are stored in Immio's private storage on your phone. We run no server that holds them and we cannot see them.
• Immio has no accounts. We never ask for your name, email address, phone number or postal address, and there is nothing to sign up for.
• Your location stays local. Immio reads your location — including while the app is closed — to work out which country you are in. That location is used on your device and is never sent to us or to anyone else.
• We do use analytics, crash reporting and advertising measurement. Those services receive app-usage events and a device identifier. They never receive your travel data or your location.
• You can delete everything at any time, from inside the app, in a couple of taps. See Data Deletion.

The information that makes Immio useful is also the most sensitive, so none of it is transmitted to us: your timeline of trips and stays, the countries and regions you have visited, your residences and tracker settings, your notes, documents and photo attachments, and your location.

All of it lives in Immio's private storage on your phone. If you enable iCloud sync, a copy also lives in your own iCloud account. Neither copy is accessible to Dev Mode Ltd. Imports, exports and PDF reports are produced on your device too — when you share an exported file it goes wherever you send it, which is your choice and not something we are involved in.

What we never do. We never require an account or collect your name, email address, phone number or postal address. We never transmit your timeline, notes, documents or location to our servers — we operate none that store them. We never share your location with any third party, never collect your device's advertising identifier, never access your contacts, calendar, messages, health data or browsing history, never see your payment card details, and never sell your personal information.

Location. Immio reads your location periodically — including while the app is closed or not in use, if you grant background access — to detect when you change country. It is not continuous GPS tracking. Each reading is resolved to a country or region on your device and stays there. Location is optional: Immio works without it, and you can add trips by hand, import them, or rebuild them from your photos.

Photos and camera. If you use photo import, Immio reads only the date and place recorded inside your photos, entirely on your device, to rebuild past trips. Photos are never uploaded and their visual contents are never read or analysed. The camera is used only when you choose to attach a photo to an entry.

Notifications. If you allow them, we send warnings when you approach a tracker limit, and occasionally news about features or offers. Delivery uses Firebase Cloud Messaging, which needs a push token tied to your installation.

Purchases. Apple and Google process the payment; Adapty manages your subscription status for us. We see what was purchased and whether it is active — never your card details, billing address or bank information.

App usage and diagnostics. Firebase Analytics and Crashlytics receive which screens and features you open, terms you type into the rule search, names you give your trackers, crash reports, error logs, performance data and a device installation identifier. They also derive an approximate, city-level location from your IP address; that happens whenever your device contacts them, whether or not you granted Immio location access.

Advertising measurement. The Meta (Facebook) SDK tells us which advertising campaigns bring people to Immio. From first launch Meta receives app events — the app being opened, and potentially subscription and trial events — together with a device identifier. Meta uses that for its own purposes as an independent controller, which makes it a sharing of data rather than processing on our behalf. Immio itself shows no ads.

Immio relies on a small number of third-party services, each with its own privacy policy:

• Google Firebase — analytics, crash reporting, remote configuration and push notifications, as our service provider. Firebase privacy · Google privacy policy
• Meta Platforms — advertising measurement, as an independent controller. Meta privacy policy
• Adapty — subscription management, as our service provider. Configured so that it collects neither your advertising identifier nor your IP address. Adapty privacy policy
• Apple and Google — payment processing for subscriptions. Apple privacy policy · Google privacy policy

• Location — turn off Automatic Location Tracking in Immio's location settings, or revoke the location permission in your device settings. Immio keeps working without it.
• Photos and camera — revoke access in your device settings. Only photo import and attachments stop working.
• Notifications — turn them off in your device settings, or per category in Immio's settings.
• iCloud sync — disable it in Immio's settings or in your device's iCloud settings.
• Device backup — control whether app data is included in your Google or iCloud backup from your device's system settings.
• Everything — delete all of it in the app. See below.

You can delete the data in app: Settings → Manage data → Danger zone → Delete All Data.

Confirming that permanently removes your timeline, trackers, residences, documents, recorded location and settings from the device, along with the copy in your iCloud account if sync is enabled. It cannot be undone. Uninstalling Immio also removes everything stored on the device.

Deleting your data also resets the identifiers this installation holds with our analytics, crash-reporting and push-notification providers, and clears the identifiers shared with Meta — so the install is detached, not just emptied.

Two things sit outside the app's reach: events already received by Firebase or Meta before you deleted, and a copy held in your own Google or iCloud account backup, which you remove from your device's system settings.

Your travel data stays on your device until you delete it or uninstall the app — we set no retention period for it, because we never hold it. Analytics, crash and advertising data is retained by the providers above according to their own schedules, after which it is deleted or aggregated. Purchase records are kept for as long as tax and accounting law requires.

All communication between Immio and the services above is encrypted in transit. Data on your device sits in the app's private storage, protected by your device's own security model and its full-disk encryption. Because we hold no central database of user travel history, there is no server-side store of it to breach.

We may update this policy from time to time. The date at the top shows when it was last revised. Continuing to use Immio after an update means you accept the revised policy.

Questions or requests: support@immio.app