Legal
Privacy Policy
Last updated: 3 July 2026
This policy explains what data Residency Tracker collects — in the app and on this website — and what we do with it. It is written in plain English on purpose. If anything here is unclear, email us at iam@sosorry.co.uk and we'll clarify it.
Who we are
Residency Tracker (“the app”, “this website”, “we”, “us”) is provided by Nayeem Moez Janmohamed, trading as So Sorry, contactable at iam@sosorry.co.uk.
What the app does
The app helps you record the periods you spend in different countries and gives you estimates of your tax-residency position against published rules — including the UK Statutory Residence Test, the US Substantial Presence Test, and the Schengen 90-in-180 rule. The app is informational only and is not tax, legal, or financial advice.
What data the app collects
- Trip data you enter: country, arrival and departure dates, and optional notes.
- Profile answers you provide: for example your main country, UK residence history, UK ties, work/home status, and declared day adjustments.
- Location data, if you opt in: see “Location tracking” below — this is off by default.
- Account data, only if you create an account: your email address and an authentication identifier.
- Subscription data, if you subscribe: a purchase record handled by Apple, Google, and RevenueCat — we never receive your card details.
We do not track you across other apps or websites, and we do not sell your data or use it for advertising.
Location tracking
Location tracking is an opt-in feature, off unless you turn it on in Settings. If you enable it, the app watches your device location in the background and converts it into a day-count automatically, so you don't have to log every trip by hand.
Here is exactly what that means for your data: your raw GPS coordinates are converted into a country on your device, offline. Only the date and country are ever stored — your raw coordinates never leave your device, and we never see them. If you also enter a trip manually for the same period, your manual entry always takes precedence over anything the app auto-detected.
This website
This section covers res-web.sosorry.co.uk — the marketing website and waitlist, separately from the app described above.
- Analytics you choose: we use Google Analytics (GA4) and the Meta Pixel to understand what brings people to this site. Neither loads until you explicitly choose “Allow” on the cookie banner — nothing is set or requested before that choice. You can change your mind at any time via “Manage cookies” in the footer, which re-opens the banner and lets you revoke consent.
- Always-on, cookieless analytics: we also use Vercel Analytics and Speed Insights, which are first-party and cookieless — they don't use tracking cookies or identify you individually, so they run regardless of your cookie choice, the same way basic server logs would.
- Waitlist signups: if you join the waitlist, we store your email address in our database, hosted by Supabase in the eu-west-2 (London) region. That table is write-only from this website's side — we use it solely to notify you when the app launches or Pro opens up, and it is stored separately from the app's own cloud-sync database described below.
Where your data is stored
- By default, your trip and profile data is stored locally on your device.
- If you create an account for cloud sync, that data is also stored in our cloud database, hosted by Supabase, protected by row-level security so only you can access your own data.
- Your login session is stored in your device's secure keychain/keystore.
Legal basis (UK/EU GDPR)
We process your data to provide the service you have asked for (performance of a contract) and, where you create an account or opt into location tracking, on the basis of your consent. For this website's analytics cookies, our legal basis is your explicit consent via the cookie banner. You can withdraw consent at any time — by deleting your account, turning off location tracking in Settings, or using “Manage cookies” on this website.
Your rights and choices
You can access, export, correct, or delete your data at any time:
- Export: Settings → Export trips (CSV).
- Delete your account and cloud data: Settings → Account → Delete account — see our account deletion page for full details, including how to request deletion by email if you can't open the app.
You may also lodge a complaint with your local data protection authority — in the UK, the ICO.
Data retention
We keep your data until you delete it. When you delete your account, your cloud data is removed immediately via a secure server-side function; any residual backups are purged within 30 days.
Third parties (processors)
- Supabase — cloud database and authentication for the app (only if you create an account) and for this website's waitlist.
- RevenueCat, Apple, Google — to process and validate subscriptions. Payment is handled entirely by Apple/Google.
- Google Analytics (GA4) and Meta Pixel — website analytics, only after you consent.
- Vercel — website hosting and cookieless, first-party analytics.
Children
The app and this website are not directed at children under 16, and we do not knowingly collect their data.
Changes
We will update this policy as needed and note the “last updated” date above.