Privacy Policy

Data collected

• Location fixes your phone reports, recorded on your phone: for each one, the time and time zone, what triggered it (a visit, a significant location change, leaving a geofence, a check-in, the app being open, or on Android a scheduled check), the coordinates rounded to 3 decimal places (about 110 metres), their accuracy, the province, state or country they fall in, whether they were near a border, and for a visit the arrival and departure times
• Days you enter or correct yourself, any note you type, and a history of each change with the reason you gave
• Your home province, the rules you chose to count, any limit you set yourself (such as your insurance policy's trip length), and app settings
• Problem reports you choose to send (optional), described below

Permissions

• Location — Always (iPhone) / Allow all the time (Android) — Records which province, state or country you are in each day, including days you do not open the app. If you decline, nothing else is blocked: you can enter every day by hand, and the counts, warnings and purchase work the same.
• Notifications — Shows limit warnings and the check-in reminder. They are scheduled on your phone; no push server is involved.
• Background app refresh (iPhone) — Sends a problem report you wrote while offline, once you are back online. Junco does not use the iPhone's background location mode.
• Run at startup (Android) — Re-arms the low-power location triggers after the phone restarts, because Android clears them on a restart.
• Internet and network state (Android) — Sends a problem report you choose to send, and lets Google Play Billing complete a purchase. Nothing else uses the network.
• Google Play Billing (Android) — Processes the one-time unlock through Google Play.

Additional notes

• Junco works out where you were on your phone, against boundary maps built into the app. No location is ever sent to us or to anyone else — no coordinate, no place name, and not which country you were in on any day. Junco has no account, no server copy of your days, and no analytics, advertising or crash-reporting SDK.
• How it listens: on iPhone, visit monitoring, significant-location-change monitoring, one geofence around your last position, and a single fix when you open the app; it never runs continuous GPS and does not use the background location mode. On Android, geofences, low-power location updates at most hourly, a periodic check, and a single fix after a restart, an app update or a time-zone change; it never runs continuous GPS or a foreground service.
• Everything listed above is stored in the app's private storage on your phone, protected by the phone's encryption. Location records are not deleted automatically: they are the record your counts and exports can be checked against, so they are kept until you delete them. You can see every recorded place in Settings › Location log.
• To delete everything, use Settings › Share, back up or delete your days › Delete everything on this phone (it asks twice and cannot be undone), or delete the app.
• Like other app data, Junco's records are included in your phone's own backup (iCloud or computer backup on iPhone; Google backup and phone-to-phone transfer on Android), so a new phone keeps your counted days. Those backups are held by Apple or Google under your account and their terms; deleting data in Junco does not change a backup made earlier. On Android, the date you started the free trial is stored separately, is included in that backup, and is not erased by Delete everything, so the trial cannot restart.
• Exports are made only when you ask. The CSV day log and the PDF record list dates and place names, not coordinates; the full backup file contains every record, including the rounded coordinates. They go wherever you send them from the share sheet or file picker, and from then on are outside Junco's control.
• If you send a problem report (Settings › Report a problem), Junco sends us the category you picked and the words you typed, plus one diagnostics line the form shows you before you send: the location permission level, how many places each source recorded, and how many days in the last 30 are unknown; on Android also whether precise location is on, the app's battery standby bucket, whether background use is restricted, and whether "Pause app activity if unused" is on. It also sends the app version, the rules table version, your phone model and operating-system version, your language setting, and a random identifier the app creates on first use — not your name, email address, Apple Account or Google account, advertising ID or device ID. There is no email field. A report never contains a coordinate, a place name, or where you were on any date.
• Reports wait on your phone until there is a connection (the newest 100 at most), then go over HTTPS to our server, which stores neither your IP address nor your country. They are deleted automatically within 75 days. Because they carry no name or account, we cannot look them up by identity; to have a report deleted sooner, email [email protected] with the approximate time you sent it and your phone model, and we will find and delete it. Please do not type personal details into the message. We read every report but cannot reply in the app. Sending a report is your consent to it being processed as described here; if you do not want to send data, do not use Report a problem.
• The free trial and the one-time unlock are processed by Apple through the App Store on iPhone, and by Google through Google Play on Android. Ibotyle Services does not receive your payment details. The Google Play Billing library in the Android app may send Google its own diagnostics about the purchase, under Google's privacy policy.
• Your phone's location service, run by Apple or Google, works out each position before Junco sees it; how they handle location data is covered by their own privacy policies and your phone's settings.
• No data is sold, and none is transferred for purposes unrelated to the app.

Contact

Questions about this policy: [email protected]