Privacy Policy

Last updated September 7, 2026 · Version 2026-09-07

What we collect

From Sign in with Apple: your name and email — only on the very first authorization for Expatic. Apple never resends them after that. Your location is requested only when you explicitly tap the location icon during welcome onboarding, when the Weather feature needs it (including the live weather shown on the Trip widget for your arrival airport on travel days), or when Emergency reverse-geocodes your country to look up the right local emergency numbers. Everything else — passports, visas, flights, residency stays, currency favorites, dating matches, meetups — stays on this device.

What stays on your device

All travel data lives in SwiftData (the app's own database) and a small set of UserDefaults entries prefixed with "expatic". Widget snapshots are written to the shared App Group container so the Home Screen widget can read them without launching the app. None of this leaves your phone unless you choose to share something explicitly (e.g. exporting a screenshot).

Third-party services we talk to

Apple WeatherKit for current conditions and forecasts. Apple MapKit for reverse-geocoding your coordinates into a city name (replaces the older CLGeocoder API). AirLabs for flight schedules, gate / terminal / belt info, and live position while a tracked flight is airborne. Cloudflare for the speed-test ping. Each call sends only what that feature needs (your coordinates to WeatherKit, the flight number to AirLabs, etc.). None of these providers receive your identity from us. The visa-rule and consulate catalogs are static and bundled offline — no external API call is made to use them. Consulate data is compiled from Wikidata, OpenStreetMap and the published directories of foreign ministries; visa rules are compiled from official immigration sources and Wikipedia. Settings → Data Sources & Credits lists every dataset and its licence.

Permissions we ask for

Location — only on explicit user opt-in. We deliberately suppress auto-prompts during onboarding so you never see a permission dialog you didn't trigger yourself. Notifications — for visa expiry, passport expiry, and flight reminders you choose to enable. Camera — only for boarding pass scanning, never recorded. Face ID / passcode — used by "Face ID lock" in Privacy & Security to gate the app on launch; the authentication is handled by iOS, we never see your biometric data.

Account security

Sign out is "soft" by default — your name and email stay cached on this device so that signing back in with the same Apple ID restores your session without an empty onboarding loop. The full wipe happens only when you tap Delete Profile or when Apple revokes the credential at the OS level. Face ID lock (when enabled) and the app-switcher privacy overlay are both local-only — they never call out to any server.

What we sell

Nothing. Expatic doesn't run ads, doesn't sell your data, and doesn't share it with brokers. Period.

Deleting your profile

Profile → Delete Profile runs a single chokepoint that wipes every SwiftData record, every "expatic" UserDefaults key, the App Group container, pending visa / flight notifications, and active Live Activities — all on-device, immediate. To also revoke Apple's record of your Sign in with Apple authorization, follow the in-app instructions to Settings → Apple ID → Sign in with Apple → Expatic 2 → Stop Using Apple ID. iOS-level permissions (Location, Notifications, etc.) stay set; remove and reinstall the app from the Home Screen to reset those.

Your rights

Under GDPR, CCPA, and similar laws you have the right to access, export, correct, or delete the personal data we hold about you. Almost everything we hold lives on your device already and is yours to manage. For anything else, email support@expatic.app and we'll respond within 30 days.

Children

Expatic is for adults 18 and older. We don't knowingly collect data from anyone under 18 and will delete it if we learn we have.

Updates to this policy

We'll notify you in-app if anything material changes. The version date above tells you when this was last revised.