Privacy Policy

3.1 Information You Provide Directly

• Account credentials: email address and password (passwords are encrypted and never stored in plain text)
• Profile information: name (optional), home state, exit state, transition date
• Location data by date: US state or foreign country for each day you log
• Notes: optional text notes associated with day entries
• Home and prior addresses: street address, city, state, and ZIP code (used to detect when GPS pings are near these locations)
• Apple Calendar event titles, locations, dates, and notes: read from your device when you choose to import calendar events. Parsing runs entirely on your device; only the state you confirm becomes part of your record, not the event content itself. Professional- and Executive-tier users have an optional per-event prompt to send a single ambiguous event to our AI assistant (Anthropic Claude) for state identification — this is a separate, explicit user action initiated only when an on-device parse fails.
• Photos and documents: receipts, utility bills, IDs, and similar files you upload as supporting evidence for day entries. Stored encrypted at rest; visible only to you and any advisor you grant access via a share link.
• Location pin drops: GPS coordinates and the short note you write describing why the location matters (e.g., a doctor visit). Stored with timestamps as part of your record.
• Two-factor authentication setup: if you enable 2FA, a TOTP secret and one-time backup codes are stored encrypted on our servers and on your device.
• Chat messages with our AI assistant: the text of any conversation you have with Claude inside the app. Messages are encrypted at rest in our database and sent to Anthropic to generate responses.
• Feedback messages: any feedback you submit via the in-app feedback form, along with device model, operating system, and app version metadata captured automatically to help us reproduce issues.

3.2 Information Collected Automatically

• Device information: device type, operating system version, unique device identifiers
• Usage data: features accessed, screens viewed, actions taken within the app
• Log data: IP address, browser type, pages visited (website only), date and time of access
• Crash reports and performance data: technical information to help us identify and fix issues
• Background GPS location captures: when you grant "Always" location permission and enable GPS polling, the app records approximate latitude and longitude at 8:00 AM, 6:00 PM, and 11:55 PM in your local time, along with reverse-geocoded state and address. These captures are used to suggest day entries you must still manually confirm.
• Anonymous aggregate analytics: if you opt in via Settings → Anonymous Insights, banded category-level events (no personally identifiable information) are recorded in a separate analytics database to help us understand product usage at the cohort level. You can opt out at any time.

3.3 Information from Third Parties

We receive information from the following third-party services:

• Apple: crash reports, App Store analytics, and performance metrics through Apple's standard developer tools. Users may opt out through iOS Settings.
• Stripe: payment confirmation and subscription status. We do not receive or store your full payment card numbers.
• RevenueCat: in-app purchase receipt validation and subscription lifecycle events for iOS purchases.
• Anthropic (Claude AI): receives the content of any messages you send our AI assistant. Professional- and Executive-tier users may also explicitly send a single calendar event (one at a time, per user opt-in) when on-device parsing cannot identify the state. Used only to generate responses or inferences returned to you; does not train Anthropic's models on your data under our service terms.
• Resend: handles transactional email delivery (welcome, password reset, onboarding drip). Email addresses are processed to deliver the message.
• Sentry: receives error and crash event metadata to help us debug issues. Personally identifying fields are scrubbed before transmission.

3.4 Future Data Collection (Not Currently Active)

The following capabilities are planned for future versions. We will update this Privacy Policy and obtain appropriate consents before activating these features:

• Voice data for voice-based entry features

6.1 Service Providers

We share your information with trusted third-party service providers who assist us in operating the Service:

• Supabase (Supabase Inc.): Database hosting and authentication services. Your data is stored on AWS infrastructure in the United States.
• Stripe (Stripe, Inc.): Payment processing. Stripe is PCI-DSS compliant and processes payment information directly.
• Vercel (Vercel Inc.): Website and API hosting. Vercel may log request metadata including IP addresses.
• Expo (Expo Technology Inc.): Mobile application build and distribution services.
• Anthropic (Anthropic, PBC): AI-powered document analysis (future feature). We will provide additional disclosure and obtain consent before activating this feature.

6.2 Professional Sharing

If you choose to use the advisor sharing feature, you may generate a secure link to share your residency data with a tax professional or attorney. This sharing is entirely voluntary, limited to read-only access, and revocable by you at any time. We do not share your data with professionals without your explicit action.

6.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities. We will notify you of such disclosure to the extent permitted by law.

6.4 What We Do Not Do

• Sell your personal information to third parties
• Share your residency data or location history with data brokers
• Use your data for targeted advertising
• Share your information with your former state of residence or any tax authority

9.1 Rights of California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request information about the personal information we have collected about you and how it is used
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale: We do not sell your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights
• Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information to what is necessary to provide the Service

9.2 How to Exercise Your Rights

To exercise your rights, contact us at chris@exoduscleric.com with the subject line "Privacy Rights Request." We will respond within 45 days. We may need to verify your identity before processing your request.