Our Commitment
Your privacy is fundamental to how DocTrack is built. DocTrack contains no advertising, no tracking SDKs, and no analytics. We collect nothing automatically and operate no server that stores your information.
There is exactly one way anything reaches us, and only you can start it: if you choose to send a diagnostic report by email. That report is built from counts, versions and codes and carries no names, document numbers, destinations or travel dates — section 5 lists precisely what it contains. Nothing else you enter leaves your device, unless you choose automatic backup to iCloud Drive (section 3).
1. Information We Collect
None. DocTrack collects no personal information whatsoever, and we operate no backend server that could receive it.
There is no account, login, or registration. There is no advertising network and no analytics or tracking library. We never receive your name, email, location, device identifiers, usage statistics, or anything else.
Everything you enter stays on your device, protected by iOS app sandboxing and device encryption — and, only if you turn on automatic backup to iCloud Drive, in an encrypted backup file there that only you can open. DocTrack's App Store privacy label is "Data Not Collected," its privacy manifest declares no collected data types, NSPrivacyTracking is false, and there are no tracking domains.
Two features download public reference data when you tap them — updated visa and country data from GitHub, and exchange rates from frankfurter.dev. Each asks first and names the service. They send nothing about you, but as with any download those services can see the request and the IP address it came from. Neither is operated by us, and neither receives anything you have entered.
2. No Advertising
DocTrack is free to download, with optional paid subscriptions. There are no advertisements of any kind. No advertising SDK (such as Google Mobile Ads) is linked or used. Your device's advertising identifier (IDFA) is never accessed or transmitted.
3. Where Your Data Lives
All data you enter — profiles, document details, travel records, expenses, and settings — is stored locally on your device using Apple's SwiftData framework, protected by iOS's standard app sandboxing and device encryption. Medical details on the emergency card are kept in the iOS Keychain.
If you turn on automatic backup and choose a folder in iCloud Drive, DocTrack writes an AES-256 encrypted backup file there, so a copy is stored by Apple in your iCloud account. The key that opens it stays with you (your Recovery Key); we never have it. With automatic backup off, nothing leaves your device.
4. Subscriptions
Subscription purchases and renewals are processed entirely by Apple through the App Store. We do not see or store your payment information. Apple's privacy policy governs the purchase transaction.
5. Diagnostic Reports
DocTrack includes an optional diagnostic report. It is never sent automatically: you open the diagnostic screen, tap Send, read the report, and then send the email yourself from your own mail app.
The report is built so that it cannot contain personal data, rather than having personal data removed from it afterwards. It contains:
- app and iOS version, device model, time zone and locale
- counts only — how many profiles, documents and trips you have, and how many are expired or expiring
- your day counts (for example Schengen days used) and the limits you have configured
- which import methods you have used, and this session's error and warning counts
- the reference-data version and your subscription tier
- a short code for each data problem the diagnostic found (for example "overlap · profile 1 · 3")
- the app's diagnostic log for this session
It does not contain your name, any document number, any document title, any country you have travelled to, or any travel date. The only dates are the time the report was generated, the date of your last backup, and the times in the log of what the app did.
The diagnostic log is included so a real problem can be diagnosed. It records what the app did, not what you entered; before it is attached, every name, country, document title, document number, note and date held in the App is removed from it.
6. Location Data
DocTrack includes an optional background location feature to auto-detect country changes. This feature:
- Is disabled by default
- Requires explicit permission from you
- Uses significant-change (cell-level) location, not continuous precise GPS tracking
- Works out the country on your device from a map bundled with the app — coordinates are not sent anywhere
- Stores only the detected country name on your device — coordinates are not retained
The "Import from Photos" feature matches the location tags of your photos to countries on your device in the same way. Only a photo location the bundled map cannot place — typically at sea or beside a small island — is looked up with Apple's geocoding service, and the photos themselves are never uploaded. You can disable background detection anytime in Settings → Travel Tracking → Auto-Detect Country.
7. Camera and Photos
The camera is used only to capture document images and scan passport MRZ data. All processing uses Apple's Vision and AVFoundation frameworks on-device. No images or scan results are transmitted anywhere.
8. Calendar Access
If you use the calendar import feature, DocTrack reads event information from your calendar locally to suggest trips. This data is not transmitted or stored beyond your device.
9. Data Export
You can export your data as an AES-256 encrypted .dtrk backup file via Settings → Data → Export All Data. This file is created locally and shared only if you manually choose to share it, and only you hold the key to open it. We do not have access to exported files.
10. Third Parties and Permissions
We share your data with no one, because we never receive it. DocTrack contains no analytics, advertising or tracking SDK, and no third-party SDK that could collect anything.
Apple services are used on your behalf, under Apple's own privacy terms: the App Store processes subscription purchases; Apple's Vision framework reads document text entirely on your device; Face ID or your passcode unlocks App Lock, handled by iOS (DocTrack never sees your face data); iCloud Drive holds your encrypted backup if you choose a folder there; and Apple's geocoding is asked only for a photo location the bundled map cannot place during "Import from Photos".
Two features download public reference data when you tap them — visa and country data from GitHub, exchange rates from frankfurter.dev. Each asks first. They receive no data about you; as with any download they can see that a request was made and the IP address it came from. Neither is operated by us.
Revoking permission: every permission DocTrack uses can be withdrawn at any time in the iOS Settings app under DocTrack — location, camera, photos, calendar, Face ID and notifications. Auto-detection can also be switched off inside the App under Settings → Travel Tracking. Withdrawing a permission stops the feature; it never deletes data you have already saved.
11. Deleting Your Data
Because everything lives on your device, you are always in control of it.
- Settings → Data → Clear Travel History removes your trips and stay limits.
- Settings → Data → Delete All Data removes every profile, document, trip, attachment and reminder, the Business audit log and your personal settings (such as the emergency card and company details), and clears what the App had placed in iOS Spotlight, the widgets and your Apple Watch. App preferences such as appearance and date format stay. Backups you made are not touched.
- Deleting the App removes all of it.
There is nothing for us to delete on our side, because we hold nothing. If you have emailed us a diagnostic report and want it removed, write to the address below and we will delete the message.
12. Children's Privacy
DocTrack is not directed to children under 13. As the App collects no data at all, this is an inherent protection.
13. Changes
If we update this Privacy Policy, the new version will be available in the App. We will not change how your data is handled in ways that reduce your privacy without clear notice.