Privacy Policy

Last updated: June 2026

  Short version: Tax & Visa Days stores all your data locally on your device. 
  We do not collect personal data, sell information to third parties, or send your location 
  anywhere other than your own phone's storage.

1. Who we are

Tax & Visa Days is an independent Android application. For data-related enquiries, contact: lana.milnathort@gmail.com

2. Data we collect and why

Data type	Why collected	Where stored	Shared with
GPS location (latitude, longitude)	To determine which country you are in for tax day counting	On your device only	Nobody
Country-level location history	Tax day and visa limit calculations	On your device only (Room database)	Nobody
Android Device ID (anonymised)	To record the trial start date in a way that survives reinstalls, without requiring an account	Supabase (EU-hosted), hashed — not linkable to personal identity	Nobody
Subscription purchase token	To confirm an active Google Play subscription	Queried from Google Play directly — not stored by us	Google (for payment processing only)

3. Location data in detail

The app requests Background Location permission so it can record your country while the app is not open. This is the core function of the app. The following applies to all location data:

Raw GPS coordinates are used only to identify your country via Android's reverse-geocoding API (Geocoder). The coordinates themselves are stored temporarily and can be pruned from settings.
Country-level records (e.g. "Spain, 15 Jan 2025") are stored on-device in an encrypted database.
Location data is never transmitted to our servers, third-party analytics, or advertising networks.
You can delete all location data at any time through the app's Settings screen or by uninstalling the app.

4. Trial system and Device ID

To provide a 90-day free trial that is tied to the device rather than an account, we store a hashed version of your Android ID alongside the trial start date on a Supabase database hosted in the EU (Frankfurt). The Android ID is one-way hashed before transmission — it cannot be reversed to identify you. No other personal data is sent. This record is used solely to look up the trial start date when you reinstall the app.

5. Third-party services

Service	Purpose	Data sent	Privacy policy
Google Play Billing	Subscription management	Standard Play purchase flow	Google
Supabase (EU region)	Trial start date	Hashed device ID + date only	Supabase
Android Geocoder API	Country name from GPS coordinates	GPS coordinates (Google's network geocoder)	Google

6. Data retention and deletion

On-device data: retained until you delete it via Settings or uninstall the app.
Trial record (Supabase): retained for 3 years from first launch, then automatically deleted. You can request early deletion by emailing us with your request — we will delete the hashed record within 30 days.

7. Your rights (GDPR / UK GDPR)

If you are in the UK or EU, you have the right to:

Access any personal data we hold about you
Request deletion of your data
Object to processing
Lodge a complaint with the ICO (UK) or your national supervisory authority

Because we hold only a hashed device ID (not linkable to your personal identity without the original ID), we may not be able to identify a specific record without your assistance. Contact lana.milnathort@gmail.com and we will assist.

8. Children

This app is not directed at children under 16. We do not knowingly collect data from children.

9. Changes to this policy

We will update this page if the policy changes and note the date at the top. Continued use of the app after changes constitutes acceptance.

10. Contact

lana.milnathort@gmail.com