Privacy Policy

1. Introduction

Welcome to ResidencyProof! This Privacy Policy explains how NaminalStack LLC ("we," "us," or "our") collects, uses, shares, and protects information in relation to our mobile application, ResidencyProof (the "App"), and our website, residencyproof.com (the "Site"). Collectively, we refer to the App and Site as our "Services."

This policy applies to all visitors, users, and others who access the Services ("Users"). By using our Services, you agree to the collection and use of information in accordance with this policy.

Our goal is to provide you with powerful tools to track your residency status while respecting your privacy and giving you control over your information.

2. Information We Collect

We collect different types of information to provide and improve our Services.

a. Information You Provide Directly:

Account Information: When you create an account, we collect your name, email address, and password.

Residency Tracking Data: To use the core features of the App, you may provide information such as your home country, target tracking locations, travel dates, historical location data, visa information, and scanned documents (like passport stamps or visa copies). You acknowledge that this may include sensitive personal information. We collect this information with your explicit consent and solely for the purpose of providing the core residency tracking features of the App. This information is essential for calculating your stay durations and providing relevant alerts.

Communications: When you contact us for support or subscribe to our newsletter, we collect your email address and any other information you choose to provide in your correspondence.

b. Information We Collect Automatically:

Precise Location Data (Premium Feature): For users with a premium subscription who grant permission, we may collect precise GPS location data from your mobile device, including when the app is running in the background. This is used to automatically track your location and update your residency data, making the service more convenient. You can disable this at any time in your device settings.

Usage and Device Information: We automatically collect certain information about your device and how you interact with our Services. This includes:

• Device Attributes: Information such as your operating system, hardware model, and app version.
• Usage Data: Information about your activity on the Services, such as features you use, taps, and time spent.
• Crash Information: If the App crashes, we collect diagnostic information to help us identify and fix bugs.
• Identifiers: We may use device identifiers (like Android Advertising ID or Apple's Identifier for Advertisers) and other similar technologies to recognize you and/or your device(s).

3. How We Use Your Information

We use the information we collect for the following purposes:

To Provide and Maintain the Services:

• To create and manage your account.
• To calculate the number of days you spend in specific locations.
• To provide alerts regarding your visa status or residency thresholds.
• To process your premium subscriptions and deliver premium features.

To Improve and Personalize the Services:

• To understand how our Users interact with the Services, allowing us to improve user experience.
• To diagnose and fix technical issues and crashes.

To Communicate With You:

• To send you service-related push notifications and emails (e.g., visa expiration warnings, account updates). You can manage push notifications in your device or app settings.
• To respond to your support requests and inquiries.
• To send you marketing communications and our newsletter, only if you have explicitly opted in. You can unsubscribe at any time by clicking the "unsubscribe" link in the email.

4. How We Share Your Information

We do not sell your personal information. We only share your data with third-party service providers who help us operate, provide, and improve our Services. These providers are bound by confidentiality obligations and are only permitted to use your information to perform services for us.

Our key third-party providers include:

• Firebase (a Google company): We use Firebase for backend hosting, user authentication (Firebase Auth), secure data storage (Firebase Storage), and crash reporting (Firebase Crashlytics). Firebase may collect identifiers, IP addresses, and crash data to provide these services. You can learn more about how Google uses data here.
• RevenueCat: We use RevenueCat to manage and process our premium subscriptions. RevenueCat collects purchase history and subscription status data to ensure you have access to the features you've paid for. It may be associated with your user account but does not process direct payment information (like credit card numbers).

We may also share information if required by law, such as to comply with a subpoena or other legal process, or to protect the rights, property, or safety of NaminalStack LLC, our Users, or the public.

5. Your Data Rights and Choices

You have control over your personal information. Your rights include:

• Access and Correction: You can access and update your account information directly within the App's settings.
• Data Deletion: You can delete your account at any time from within the App. Upon receiving your request, we will permanently delete your personal information from our active systems. For safety and operational integrity, this data may remain in our backup systems for up to 7 days before being fully erased.
• Marketing Opt-Out: You can opt-out of receiving marketing emails by following the unsubscribe instructions in those emails.
• Push Notifications: You can turn off push notifications through your device's settings.
• Location Data: You can prevent the collection of precise location data by disabling location services for the ResidencyProof app in your device's settings.

6. Specific Rights for Regional Users

a. For Residents of California (CCPA/CPRA):

As a California-based company, we comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). You have the right to:

• Know what personal information we collect, use, and disclose.
• Delete your personal information.
• Correct inaccurate personal information.
• Limit the use of sensitive personal information.
• Opt-Out of Sale or Sharing: We do not "sell" your personal information, as that term is traditionally understood. Furthermore, we do not "share" your personal information for cross-context behavioral advertising. You have the right to direct us not to sell or share your personal information should our practices change.

To exercise these rights, please contact us at the email address provided in the "Contact Us" section. To protect your information, we will need to verify your identity before processing your request.

b. For Residents of the European Economic Area (EEA), UK, and Switzerland (GDPR):

If you are a resident of the EEA, UK, or Switzerland, you have the right to:

• Access, correct, update, or request deletion of your personal information.
• Object to processing of your personal information, ask us to restrict processing, or request portability.
• Withdraw your consent at any time if we have collected and processed your information with your consent.

Our legal basis for collecting and using the personal information described above will depend on the information concerned, but we primarily rely on Performance of a Contract (to provide you with the Services) and your Explicit Consent (for things like sensitive data, optional location tracking, or marketing). To exercise these rights, please contact us. To protect your information, we will need to verify your identity before processing your request.

7. Data Security

We take the security of your data seriously and use technical and administrative measures to protect it. We leverage secure cloud infrastructure from Google's Firebase, including services like Firebase Authentication and Storage, which employ industry-standard security practices like encryption to safeguard your data. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee its absolute security.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Services. As noted above, we will delete your information upon your request to delete your account, subject to a brief period for removal from our backup systems.

9. Children's Privacy

Our Services are not directed to individuals under the age of 13 (or 16 in certain EEA countries). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information without parental consent, we will take steps to delete such information.

10. International Data Transfers

Your information, including personal data, may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. As our services are hosted on Firebase, your data is stored in secure data centers managed by Google.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, such as a new purpose for processing your data, we will provide a more prominent notice (e.g., in-app notification or email) and may request your consent before the changes take effect. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

NaminalStack LLC
Email: legal@naminalstack.com

When you contact us to exercise your rights, please note that we will require you to verify your identity to protect your privacy and security.