Bounded ("the App") is developed and published by Wasl Apps LLC ("Wasl Apps", "we", "us", or "our"). We built Bounded with privacy as a core principle. This policy explains what information the App handles, what stays on your device, what limited information we collect, and the choices and rights you have. It applies to the iOS and Android versions of the App.

This policy may be made available in other languages for convenience. In case of any discrepancy, the English version is the authoritative and legally binding version.

In short:

• Your travel history stays on your device. Your GPS locations, day-by-day country timeline, photos, and stored documents are processed and kept only on your phone. We operate no server that receives them and have no way to access them.
• No accounts, no identity. The App requires no sign-up. We do not ask for and do not hold your name, email address, or phone number.
• Limited pseudonymous data. We collect a limited amount of usage, purchase, diagnostic, and install-attribution data through the service providers listed below. It is keyed to random identifiers — not to your identity.

The following is processed and stored exclusively on your device. It is never transmitted to us or to any third party by the App:

• Precise location. GPS coordinates and visit data used to detect which country you are in are processed on-device. Only the resulting country-per-day record is kept, and it stays on your phone.
• Your travel timeline. Your day-by-day country history, counters, and trips — whether detected automatically, imported, or entered manually.
• Your photos. When you restore travel history from your photo library, geographic metadata is read on-device only. Your photos are never uploaded, viewed, or stored by us.
• Your documents. Passports, visas, permits, and other records you store in the App remain on your device.

If you delete the App, this data is permanently deleted with it. Exports you create are generated locally and shared only where you choose to send them.

Although the App has no accounts and never receives your name or contact details, it transmits limited technical and usage information to the service providers listed in this policy:

• Random identifiers — a random installation ID and SDK-generated device identifiers (including a Firebase app instance ID and an Adapty profile ID) used to count installs and sessions consistently. On iOS, the advertising identifier (IDFA) is accessed only if you allow it in the system tracking prompt.
• Device and app information — device model, operating system version, language, region, time zone, and app version.
• Usage data — which screens and features are used, feature settings such as the counters you enable, experiment assignments, and session activity.
• Setup answers — country-level information you may provide during onboarding, such as your home country, tracking goals, and (if you use the guided setup) your citizenship and residency countries and residency status. This is country-level information only — never your coordinates, movements, or timeline.
• Purchase data — subscription status, product, price, currency, and transaction identifiers provided by the Apple App Store or Google Play. Payments are processed entirely by Apple or Google; we never receive your payment card details.
• Crash and performance data — crash reports and diagnostic measurements that help us find and fix defects.
• Install attribution — campaign-level information about the ad or link that led you to install the App (see Advertising & Tracking Choices below).

This data is pseudonymous: it is keyed to random identifiers rather than to your identity, and we do not attempt to re-identify you. Where data protection laws such as the GDPR nevertheless treat such identifiers as personal data, we handle them accordingly under this policy.

We use the data described above solely to:

• Operate the App's paid features — validating and managing your subscription (performance of a contract, GDPR Art. 6(1)(b));
• Understand and improve the App — measuring which features are used and comparing product variants (legitimate interests, Art. 6(1)(f));
• Keep the App reliable — detecting, diagnosing, and fixing crashes and defects (legitimate interests);
• Measure our advertising — attributing installs to the campaigns that produced them (consent where required, such as the iOS tracking prompt, Art. 6(1)(a); otherwise legitimate interests);
• Comply with law where applicable (legal obligation, Art. 6(1)(c)).

The App shows no third-party advertising. We do not sell personal data, and we do not build cross-app behavioral profiles beyond the install attribution described in this policy.

We rely on a small number of specialized providers. Each receives only the categories of data needed for its role and processes them under its own privacy terms:

• Adapty (Adapty Tech Inc.) — subscription infrastructure and paywalls. Receives purchase and subscription state, random identifiers, device information, and install attribution. Privacy policy
• Google Firebase (Google LLC) — app analytics and remote configuration. Receives usage events and device information. Privacy information
• Amplitude (Amplitude, Inc.) — product analytics. Receives usage events, the setup answers described above, and device information. Privacy policy
• Sentry (Functional Software, Inc.) — crash and performance monitoring. Receives crash reports and device information. Privacy policy
• Meta (Meta Platforms, Inc.) — iOS only — ad measurement for our own campaigns, subject to your choice in the iOS tracking prompt. Privacy policy
• Apple Search Ads (Apple Inc.) — iOS only — attribution of installs from App Store ads via Apple's AdServices framework. Privacy information

The App displays no ads. The attribution described in this policy exists only to tell us which of our own campaigns lead to installs.

• On iOS, Apple's App Tracking Transparency prompt controls ad-measurement tracking. Choose "Ask App Not to Track" to refuse — the App remains fully functional.
• On Android, you can reset or delete your advertising ID in system settings; the App does not use it for third-party advertising.

Our service providers process data in the United States and other countries. Where data of users in the EEA, the United Kingdom, or Switzerland is transferred internationally, we rely on appropriate safeguards, such as the providers' participation in the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses, as applicable to each provider.

On-device data is yours: it remains until you delete it or delete the App.

Collected pseudonymous data is retained only as long as needed for the purposes described above and is then deleted or aggregated. You may request deletion at any time (see Your Rights).

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of data relating to you, to restrict or object to its processing, and to withdraw consent where processing is based on consent. Residents of California and certain other U.S. states have comparable rights to know, delete, and correct, and the right to opt out of the "sale" or "sharing" of personal information.

We do not sell personal information. To the extent iOS install attribution is considered "sharing" under California law, you can opt out via the iOS tracking prompt ("Ask App Not to Track").

Because the data we collect is not linked to your name or contact details, we often cannot associate it with you without additional information. To exercise a right, contact us — ideally through the App's support option, which can include your device's random identifiers so we can locate the relevant records. If we cannot identify data as yours, we will tell you. You also have the right to lodge a complaint with your local data protection authority.

The App is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has used the App and data has been collected, contact us and we will delete it.

All data transmitted by the App is encrypted in transit. On-device data is protected by your device's security features, and sensitive areas of the App (such as stored documents) can additionally be protected with biometric authentication. We work only with established providers that maintain their own security programs.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date, and material changes will be highlighted in the App or on our website. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

Wasl Apps LLC is the controller responsible for the processing described in this policy. For any questions or to exercise your rights, contact us at support@waslapps.com.