Privacy policy

This policy covers the MySchengen mobile app and this website, myschengenapp.com. MySchengen is operated by Catchpole Digital Ltd (“we”, “us”, or “our”), a company registered in England and Wales, number 14027851. Our registered office is Cliveden Chambers, Cliveden Place, Longton, Stoke-on-Trent, United Kingdom, ST3 4JB.

Catchpole Digital Ltd is the controller responsible for the personal information described here. Contact us at developer@catchpoledigital.co.uk, including for privacy requests. Please also read our Terms and conditions.

MySchengen stores your trips on your device. Records include entry and exit dates, an optional country and notes, trip identifiers, and creation and update timestamps. The app also stores preferences, onboarding progress, your analytics choice, and cached operational information.

You do not need a MySchengen account. We do not operate a cloud database or account-based sync service for your trip records. Day calculations run on your device. Your device’s own backup or migration services may make copies under your Apple or Google settings.

The app does not request passport scans, visa application records, contacts, or precise location to track your trips. Dates are entered by you; the app does not automatically track border crossings. Please avoid putting passport numbers or other sensitive information in optional notes.

You can export a JSON backup using your device’s share sheet. It contains trip dates, optional countries and notes, and trip metadata. You choose where to save or send it. Anyone who can access the exported file may be able to read it; treat it as a private travel record.

Import reads the file you select with the system document picker. You can merge it with your trips or replace your existing records. Temporary copies may be made in the app’s cache for import or sharing; the app attempts to remove those copies when the operation finishes.

We do not receive your backup simply because you export or import it. Services you choose for sharing or storage have their own privacy policies. If you send a backup to support, we process its contents to help with your request.

Apple App Store or Google Play processes payments. We do not receive your full payment card details. RevenueCat helps the app display purchase options, check paid access, restore purchases, and manage subscriptions.

This involves an app user identifier generated by RevenueCat, store receipts or purchase tokens, purchased products, and access, renewal, expiry, cancellation, and restore information. RevenueCat also processes technical app and device information needed to deliver these services. A purchase identifier is not a MySchengen account.

Purchase services operate independently of optional analytics. Store providers process billing and account information under their own policies.

Product analytics in the app are off until you choose to share them during onboarding or in Settings → Share analytics. You can change your choice at any time without losing paid features.

If enabled, PostHog receives screen and app lifecycle events, interactions with marked controls, and events such as adding a trip, reviewing a warning, importing a backup, or restoring a purchase. Properties may include app version, platform, anonymous identifiers, the RevenueCat app user ID, aggregate trip counts, trip duration, whether a country or exit date was provided, and broad allowance or risk categories.

Our analytics events are designed to exclude actual travel dates, selected countries, trip notes, backup contents and file names, passport details, and precise location. Aggregate information can still describe how you use the app; it is not the same as sending us your travel history.

Disabling analytics stops future optional event collection. It does not delete information already received, cancel purchases, or switch off the operational services described below. Contact us if you want to request deletion of information already held.

The app uses Sentry for crash reporting even when optional analytics are off. Reports may include errors, stack traces, app and operating system versions, device model, and technical details needed to investigate failures.

Automatic session replay, screenshots, view hierarchy capture, diagnostic logs, and breadcrumbs are disabled in the current app configuration. Sentry’s default personal-information collection starts disabled and is enabled only when you grant the app’s analytics choice. When enabled, additional default technical context, including IP-related information, may be included. Network providers necessarily receive connection information such as an IP address when a request is made.

PostHog also supplies feature flags and remote configuration for app operation and rollouts. These requests are separate from optional analytics and may occur when analytics are off. They may include an anonymous identifier, app and SDK versions, operating system, and information needed to evaluate a flag.

These services are not intended to receive trip dates, notes, selected countries, or backup contents. The app’s local tracking and calculations work offline, while purchases, configuration updates, diagnostics delivery, and support may require a connection.

If you email us, we receive your email address, message, and any attachments you send. In-app feedback is handled through Sentry and can include your message, an optional name and email address, and a screenshot if you choose to attach one. A screenshot may reveal trip details visible on your screen, so review it before sending.

We use this information to answer you, investigate problems, and improve the app. Do not send payment card details, passport documents, or a full trip backup unless they are genuinely needed for your request. We will not ask for your app store password.

Cloudflare hosts and delivers this website. To serve pages and protect the service, it processes connection and request information such as your IP address, browser information, requested URL, time, and response status. This happens even if optional analytics are declined.

This website remembers your light or dark theme and analytics choice in your browser’s local storage. These preferences are not used for advertising.

Website analytics are optional and off until you select “Allow analytics”. If you allow them, PostHog receives page-view events, a randomly generated browser identifier stored locally, and technical context such as browser, device, referring website, and visit time. We use this to understand site usage. Website session recording, automatic click and form capture, surveys, and automatic error capture are disabled.

You can decline or withdraw your choice below, or return using “Privacy choices” in the footer. Withdrawal stops future analytics and disables the SDK’s analytics storage; it does not recall events already sent. Your preference is specific to this browser and hostname. Clearing browser storage removes it. If storage is blocked, your choice applies only to the current visit.

Where UK or European data protection law applies, our purposes and legal bases are:

• Providing the app and paid access: performance of our contract with you, including trip functions, purchase validation, restore, and support needed to deliver the service.
• Optional analytics and additional optional diagnostic context: your consent. You can withdraw it through the relevant app or website controls.
• Essential diagnostics, remote configuration, website delivery and security: our legitimate interests in running a reliable service, investigating failures, preventing data loss, and protecting users; contract performance where needed to deliver a requested function.
• Answering enquiries: steps you request before a contract, contract performance, or our legitimate interest in responding to other messages.
• Legal and financial records: compliance with applicable legal obligations. Handling disputes and protecting legal rights may also be based on legitimate interests.

We consider your rights when relying on legitimate interests. You can object to that processing. Optional analytics and optional trip notes are not a condition of using the app. Without trip dates we cannot calculate your allowance; without purchase information we cannot validate paid access.

We do not use these records to make automated decisions that determine your legal immigration status or right of entry. The app’s calculations are planning information only.

We use providers for the purposes described above:

• PostHog — optional analytics and app feature flags or configuration.
• Sentry — app diagnostics and feedback you submit.
• RevenueCat — purchases and paid-access management.
• Cloudflare — website hosting, delivery, and security.
• Apple and Google — app distribution, store accounts, billing, and any device backup services you enable.

Email providers also process support correspondence. We may disclose information where required by law, to professional advisers assisting with legal obligations or disputes, or as necessary to protect users and the service. Providers act under their applicable service and data-processing terms; stores and services you independently choose may also act as controllers.

We do not sell personal information or share it for targeted advertising.

You control local trip records. Delete individual trips in the app, replace them during import, or remove local app data using your device’s controls. Removing the app may remove its local records, but does not necessarily delete device backups, exported files, store transactions, or information already sent to providers. Manage those copies separately.

We keep remotely processed information only for the purposes described in this policy. Retention depends on the record and provider configuration. Our criteria are the time needed to investigate an error or security incident, understand product usage, resolve and follow up a support request, restore or verify purchases, and meet applicable accounting, dispute, or legal requirements. Purchase records may need to outlast an active subscription.

There is no MySchengen account to close. For provider-side deletion requests, contact us. We may need a purchase or app user identifier, approximate event date, or support reference to find a record; we may not be able to link anonymous diagnostics to you. We will explain any records that must be retained and why.

We use technical and organisational safeguards, including encrypted network connections and limiting the information intentionally sent to providers. No device or service is completely secure. Protect your device, store account, and exported backups.

Providers may process information outside your country, including in the United States. Where data protection law requires safeguards for a transfer, these may include an applicable adequacy decision or contractual protections such as standard contractual clauses with the relevant UK provisions. You can contact us for information about safeguards relevant to your data.

Depending on the law that applies to you, you may ask to access, correct, delete, restrict, or receive a portable copy of your personal information, or object to processing based on legitimate interests. You may withdraw consent at any time; that does not affect lawful processing before withdrawal.

Email developer@catchpoledigital.co.uk to make a request. We may ask for proportionate information to confirm identity or locate the relevant records. We cannot remotely edit or delete trip data that is held only on your device; use the app and your backup controls for those records.

You can complain to the UK Information Commissioner’s Office or your local data protection authority. You do not have to contact us first, although we welcome the opportunity to help.

MySchengen is intended for people managing their own travel and is not directed at children. If you believe a child has sent us personal information without the necessary authorisation, please contact us.

We may update this policy when the app, website, providers, or legal requirements change. We will update the effective date on this page and give additional notice of material changes where required. A change to this policy does not itself give consent to new optional uses of your information.