Privacy: how Bounded handles your data

What stays on your device

• Your travel timeline — every day record, trip, and counter lives in local storage on your phone. Bounded has no server that stores your travel data.
• Your location — tracking resolves coordinates to a country on the device; nothing is sent to our servers.
• Your photos — the photo restore reads only GPS tags, never the image content, and maps them to countries using an offline map. No photo is ever uploaded, and photo metadata leaves the device only inside a correction report you choose to send (see below).
• No account — Bounded works with no sign-up, no email, and no profile.

What leaves your device

Like most apps, Bounded uses a few third-party services that do involve network traffic:

• Anonymous usage analytics — which screens and features are used, so we can improve the app. This never includes your travel timeline, locations, or photo data.
• Crash reports — technical diagnostics when the app crashes.
• Subscription processing — purchases go through Apple and our subscription provider; we never see your payment details.
• Correction reports — only if you send one — when a detected trip is wrong, you can fix it and optionally tap Send report. That report contains your correction and the location signals behind the affected days (GPS samples and photo location tags, never the photos), so we can fix detection. Nothing is sent unless you tap Send; reports are deleted after 180 days.
• Counter requests — only if you send one — in Bounded 2.1 or later, when the counter catalog has nothing for what you need, you can ask us for the counter. Tapping Send uploads the counter name and details you typed, your catalog search text, your home country, technical details (app version, device model, system version, language, time zone) and a random installation ID — never your timeline, trips, or photos. Tap Not now to send nothing. Requests are deleted after 180 days.
• Cancel-reason answers — only if you send them — when you turn off auto-renewal, Bounded asks once What made you turn off renewal?. Not now sends nothing. If you pick a reason and then tap Send or Skip, the reason (plus any details you typed) is uploaded together with whether you were on a trial, when your access ends, the same technical details and the random installation ID — never your payment details or your timeline. Answers are deleted after 180 days.

The full details are in the privacy policy.

Deleting your data

You → Settings → Data has two levels: Erase auto-detected data removes everything the photo scan and GPS tracking recorded (keeping your manual trips), and Delete all my data wipes the app completely and returns it to onboarding. Because everything is local, deletion is immediate — there is no server copy to chase. The only exceptions are the correction reports, counter requests, and cancel-reason answers you chose to send; they are stored under your random installation ID and expire after 180 days — ask us via Contact support if you want them removed early.