Bounded

Overview

Bounded ("the App") is developed and published by Wasl Apps LLC ("Wasl Apps", "we", "us", or "our"). We built Bounded with privacy as a core principle. This policy explains what information the App handles, what stays on your device, what limited information we collect, and the choices and rights you have. It applies to the iOS and Android versions of the App.

This policy may be made available in other languages for convenience. In case of any discrepancy, the English version is the authoritative and legally binding version.

In short:

  • Your travel history stays on your device. Your GPS locations, day-by-day country timeline, photos, and stored documents are processed and kept only on your phone. We operate no server that receives them and have no way to access them.
  • No accounts, no identity. The App requires no sign-up. We do not ask for and do not hold your name, email address, or phone number.
  • Limited pseudonymous data. We collect a limited amount of usage, purchase, diagnostic, and install-attribution data through the service providers listed below. It is keyed to random identifiers — not to your identity.

Data That Never Leaves Your Device

The following is processed and stored exclusively on your device. The App never transmits it to us or to any third party, with one exception that you control: the optional correction report described under "Data We Collect", which is sent only when you tap "Send report".

  • Precise location. GPS coordinates and visit data used to detect which country you are in are processed on-device. Only the resulting country-per-day record is kept, and it stays on your phone.
  • Your travel timeline. Your day-by-day country history, counters, and trips — whether detected automatically, imported, or entered manually.
  • Your photos. When you restore travel history from your photo library, geographic metadata is read on-device only. Your photos are never uploaded, viewed, or stored by us.
  • Your documents. Passports, visas, permits, and other records you store in the App remain on your device.

If you delete the App, this data is permanently deleted with it. Exports you create are generated locally and shared only where you choose to send them.

Data We Collect

Although the App has no accounts and never receives your name or contact details, it transmits limited technical and usage information to the service providers listed in this policy:

  • Random identifiers — a random installation ID and SDK-generated device identifiers (including a Firebase app instance ID and an Adapty profile ID) used to count installs and sessions consistently. On iOS, the advertising identifier (IDFA) is accessed only if you allow it in the system tracking prompt.
  • Device and app information — device model, operating system version, language, region, time zone, and app version.
  • Usage data — which screens and features are used, feature settings such as the counters you enable, experiment assignments, and session activity.
  • Setup answers — country-level information you may provide during onboarding, such as your home country, tracking goals, and (if you use the guided setup) your citizenship and residency countries and residency status. This is country-level information only — never your coordinates, movements, or timeline.
  • Purchase data — subscription status, product, price, currency, and transaction identifiers provided by the Apple App Store or Google Play. Payments are processed entirely by Apple or Google; we never receive your payment card details.
  • Crash and performance data — crash reports and diagnostic measurements that help us find and fix defects.
  • Correction reports (only if you send one) — when the App has detected a trip wrongly, you can fix it in the App and optionally send us a diagnostic report. Nothing is sent unless you tap "Send report"; your corrections are kept either way. A report contains the corrections you made (the trip's country and dates before and after), the location signals behind the affected days and up to three days on either side (GPS samples with coordinates, altitude, speed, and timestamps; the location metadata and original file names of photos taken on those days — never the photos themselves), technical details (device model, operating system version, language, time zone, app version, and your random installation ID), and any text you type into the report. Reports never include your photos, travel notes, stored documents, counters, or your full timeline. We use them solely to find and fix detection defects. They are stored in Google Cloud Storage (Firebase) and deleted 180 days after upload.
  • Counter requests (only if you send one) — when the counter catalog has no counter for what you need, you can ask us for it from within the App. Nothing is sent unless you tap "Send". A request contains the counter name you type, any details you add, the search text you entered in the catalog (if you searched first), your home country as set in the App (if any), technical details (device model, operating system version, language, time zone, app version and build number, and your random installation ID), and the time it was sent. Requests never include your timeline, trips, counters, stored documents, or photos. We use them solely to decide which counters to build next. They are stored in Google Cloud Storage (Firebase) and deleted 180 days after upload.
  • Cancel-reason answers (only if you send them) — if you turn off auto-renewal of your subscription while it is still active, the App asks you once why. Nothing is sent if you choose "Not now". If you pick a reason, your answer is sent when you tap "Send" or "Skip" on the following screen. It contains the reason you picked from a fixed list, any details you type (none if you skip), whether the cancelled period was a free trial and the date your access ends, technical details (device model, operating system version, language, time zone, app version and build number, and your random installation ID), and the time it was sent. Answers never include your timeline, payment details, or receipts. We use them solely to understand why people cancel and to improve the App. They are stored in Google Cloud Storage (Firebase) and deleted 180 days after upload.
  • Promo codes — if you redeem a promo code, the code and your random installation ID are sent to our redemption service (Google Firebase) so the code can be validated and applied to your subscription.
  • Install attribution — campaign-level information about the ad or link that led you to install the App (see Advertising & Tracking Choices below).

This data is pseudonymous: it is keyed to random identifiers rather than to your identity, and we do not attempt to re-identify you. Where data protection laws such as the GDPR nevertheless treat such identifiers as personal data, we handle them accordingly under this policy.

How We Use Data & Legal Bases

We use the data described above solely to:

  • Operate the App's paid features — validating and managing your subscription (performance of a contract, GDPR Art. 6(1)(b));
  • Understand and improve the App — measuring which features are used and comparing product variants (legitimate interests, Art. 6(1)(f));
  • Keep the App reliable — detecting, diagnosing, and fixing crashes and defects (legitimate interests); for correction reports, counter requests, and cancel-reason answers, which you send only by your own choice, we rely on your consent (Art. 6(1)(a)), which you give by tapping "Send report" or "Send" — or, for a cancel-reason answer, by picking a reason and tapping "Send" or "Skip";
  • Measure our advertising — attributing installs to the campaigns that produced them (consent where required, such as the iOS tracking prompt, Art. 6(1)(a); otherwise legitimate interests);
  • Comply with law where applicable (legal obligation, Art. 6(1)(c)).

The App shows no third-party advertising. We do not sell personal data, and we do not build cross-app behavioral profiles beyond the install attribution described in this policy.

Service Providers

We rely on a small number of specialized providers. Each receives only the categories of data needed for its role and processes them under its own privacy terms:

  • Adapty (Adapty Tech Inc.) — subscription infrastructure and paywalls. Receives purchase and subscription state, random identifiers, device information, and install attribution. Privacy policy
  • Google Firebase (Google LLC) — app analytics, remote configuration, promo code redemption, and storage of correction reports, counter requests, and cancel-reason answers. Receives usage events and device information, the promo codes you redeem, and the contents of any correction report, counter request, or cancel-reason answer you choose to send. Privacy information
  • Amplitude (Amplitude, Inc.) — product analytics. Receives usage events, the setup answers described above, and device information. Privacy policy
  • Sentry (Functional Software, Inc.) — crash and performance monitoring. Receives crash reports and device information. Privacy policy
  • Meta (Meta Platforms, Inc.) — iOS only — ad measurement for our own campaigns, subject to your choice in the iOS tracking prompt. Privacy policy
  • Apple Search Ads (Apple Inc.) — iOS only — attribution of installs from App Store ads via Apple's AdServices framework. Privacy information

Advertising & Tracking Choices

The App displays no ads. The attribution described in this policy exists only to tell us which of our own campaigns lead to installs.

  • On iOS, Apple's App Tracking Transparency prompt controls ad-measurement tracking. Choose "Ask App Not to Track" to refuse — the App remains fully functional.
  • On Android, you can reset or delete your advertising ID in system settings; the App does not use it for third-party advertising.

International Transfers

Our service providers process data in the United States and other countries. Where data of users in the EEA, the United Kingdom, or Switzerland is transferred internationally, we rely on appropriate safeguards, such as the providers' participation in the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses, as applicable to each provider.

Data Retention

On-device data is yours: it remains until you delete it or delete the App.

Collected pseudonymous data is retained only as long as needed for the purposes described above and is then deleted or aggregated. Correction reports, counter requests, and cancel-reason answers are deleted automatically 180 days after upload. You may request deletion at any time (see Your Rights).

Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of data relating to you, to restrict or object to its processing, and to withdraw consent where processing is based on consent. Residents of California and certain other U.S. states have comparable rights to know, delete, and correct, and the right to opt out of the "sale" or "sharing" of personal information.

We do not sell personal information. To the extent iOS install attribution is considered "sharing" under California law, you can opt out via the iOS tracking prompt ("Ask App Not to Track").

Because the data we collect is not linked to your name or contact details, we often cannot associate it with you without additional information. To exercise a right, contact us — ideally through the App's support option, which can include your device's random identifiers so we can locate the relevant records. Correction reports, counter requests, and cancel-reason answers are stored under your random installation ID, so including it lets us find and delete them. If we cannot identify data as yours, we will tell you. You also have the right to lodge a complaint with your local data protection authority.

Children's Privacy

The App is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has used the App and data has been collected, contact us and we will delete it.

Security

All data transmitted by the App is encrypted in transit. On-device data is protected by your device's security features, and sensitive areas of the App (such as stored documents) can additionally be protected with biometric authentication. We work only with established providers that maintain their own security programs.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date, and material changes will be highlighted in the App or on our website. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

Contact Us

Wasl Apps LLC is the controller responsible for the processing described in this policy. For any questions or to exercise your rights, contact us at support@waslapps.com.

Bounded is a day-tracking tool, not a substitute for professional advice. Always confirm tax, legal, and immigration decisions with a qualified advisor.

© 2026 Wasl Apps LLC