Privacy Policy
Last updated: 4 October 2026
1. Who we are, and what this policy covers
Every Crossing is a product of Centreline Ventures Ltd (company number 17432379), a private limited company registered in the UK. Our registered office is 128 City Road, London EC1V 2NX, United Kingdom. In this policy, "we", "us" and "our" mean Centreline Ventures Ltd.
This policy covers everything Every Crossing offers: the iPhone app, the web version of the app, this website (everycrossing.com), our waitlist, and the emails and support messages that go with them. We are the "controller" of your personal data, which means we decide how and why it is used. You can contact us at support@everycrossing.com.
2. The information we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Your email address and your name. Your password is stored only in scrambled (hashed) form, so we cannot read it. | You, when you sign up |
| Travel records | Countries you visited, arrival and departure dates, whether a visit was detected or entered by you, the reason for a trip (for example work or personal), any notes you add, and a history of changes you make. | The app, and you |
| Your settings | Day limits you set for each country, tax-year dates, and which sections of the app you choose to show or hide. | You |
| Security records | A random identifier for each device or browser you sign in on (so we can remember trusted devices for 30 days), counts of failed sign-in or code attempts so we can lock an account after repeated failures, and sign-in records kept by our sign-in system, such as the time and IP address of a sign-in. | The app and our servers |
| Waitlist details | Your email address, the date, and which sign-up box you used. | You, on our website |
| Messages to us | Anything you send to our support address. | You |
| Technical data | Information that our hosting and email providers record automatically when you use the website, the web version or the app, or receive our emails, such as your IP address, device or browser type, and the time of the request. | Our service providers |
What we do not collect: your exact coordinates, your contacts, your photos, your advertising identifier, or any payment card details. The app is free at present. If we add paid plans, payments will be handled by Apple or a payment provider, and we will update this policy first.
3. How location works
Your exact location stays on your iPhone. The iPhone app uses your phone's location services, including in the background, to notice when you move to a new country. The phone turns your position into a country, a country code and a time zone. Only those three things, plus the dates, are sent to our servers. We do not receive or store your coordinates.
- To work out the country, your iPhone sends your position to Apple's location services, which process it under Apple's own privacy policy.
- You choose whether to allow location access, including background access, in your iPhone's settings. If you switch it off, automatic detection stops, and you can still add trips by hand.
- Each detected change is shown to you to confirm or reject before it is counted.
- The web version does not detect your location. Your browser is never asked for it. On the web you add and edit trips by hand.
4. Information kept on your device
- On iPhone, the app keeps a copy of your travel records, your settings and a list of changes waiting to be uploaded, so it works without a connection.
- On the web version, your browser stores your sign-in session, a random device identifier, a copy of your records and any changes waiting to be uploaded. This uses your browser's own storage, not advertising cookies. Signing out, or clearing your browser's site data, removes it.
- Notifications (such as a warning that you are nearing a day limit, or that a new country was detected) are created on your iPhone itself. We do not send push notifications through our servers, and the content of these alerts is not sent to us or to Apple. You can switch them off in your iPhone's settings.
- Exports (PDF or spreadsheet) are created on your own device. We do not receive them. Once you export, the file is yours to look after.
5. Why we use your information, and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Create and run your account, count your days and show your totals, send sign-in codes | Contract: it is needed to provide the service you asked for |
| Detect your country using location services on iPhone | Consent, which you give through your iPhone's location permission and can withdraw at any time |
| Keep the service secure, prevent fraud and misuse, lock accounts after repeated failed attempts | Legitimate interests: keeping your data and our service safe |
| Email you when you join the waitlist (a confirmation), and once when the app launches | Consent, which you give by signing up and can withdraw by unsubscribing |
| Reply to your messages and fix problems | Legitimate interests, or contract where it relates to your account |
| Meet legal obligations, and establish or defend legal claims | Legal obligation, and legitimate interests |
We do not use your information for advertising. We do not sell it. We do not share it for advertising, and we do not use it to track you across other companies' apps and websites. We do not use it to make decisions about you that have legal effects. The day counts are calculations shown to you, not decisions made by us.
6. Who we share it with
We use a small number of trusted providers to run the service. They may only use your information to provide their service to us.
- Supabase: our database, sign-in system and server functions. Our project is hosted in London.
- Resend: sends our emails (sign-in codes, and waitlist messages), using servers in Ireland. We have switched off link and open tracking in our emails.
- Cloudflare: hosts our website, manages our domain, and protects the site from attacks. It sees your IP address when you visit.
- Our email provider: handles the mailbox that receives messages sent to our support address.
- Apple: location services on your iPhone, and the App Store.
Our website and app do not load fonts, scripts or trackers from other companies. We may also share information where the law requires it, to protect rights or safety, or in a sale or restructuring of our business (in which case the new owner must respect this policy). Your travel records are never shared with your employer, advisers or anyone else unless you choose to share or export them yourself.
7. Sending information outside the UK
Our main database is in London. Some of our providers are based outside the UK, or may process data there. Where that happens, we make sure your information is protected as the law requires, for example by using UK-approved transfer safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or by relying on an adequacy decision.
8. How long we keep it
| Information | How long |
|---|---|
| Account, travel records and settings | Until you delete your account |
| After you ask to delete your account | 14 days, in case you change your mind. You can cancel the deletion in the app during that time. After 14 days your account and all its travel records are permanently deleted. |
| Backups | Deleted data may remain for a short time in our provider's encrypted backups before it is overwritten |
| Security records | Failed-attempt counters are cleared when you sign in successfully. Trusted-device records expire after 30 days and are deleted with your account. The one-way scrambled form of your IP address used to limit sign-ups on our website is deleted within 24 hours. |
| Waitlist email | Until you unsubscribe or ask us to remove it, and in any case within 3 months after we send the launch email. Unsubscribing deletes it straight away. |
| Support messages | For as long as needed to deal with your request, and a reasonable time afterwards in case you write to us again about it |
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct anything that is wrong;
- ask us to delete your data (you can also delete your account in the app);
- ask us to restrict how we use your data, or object to some uses;
- receive your data in a portable format (the app can export your travel records as a PDF or spreadsheet);
- withdraw consent at any time, without affecting what happened before.
To use any of these rights, email support@everycrossing.com. We will reply within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, and we would appreciate the chance to put it right first.
If you live outside the UK. Our customers live all over the world. If you live in the European Economic Area, you can also complain to your local data protection authority. If you live somewhere with its own privacy law, such as California, you have the rights that law gives you, including to know what we hold, to have it deleted or corrected, and not to have your information sold or shared for advertising (we do neither). Email us to use them. We will not treat you worse for doing so.
10. Security
We protect your information with encryption in transit, access rules that stop one user seeing another's records, email codes for sign-in on new devices, locking after repeated failed attempts, and limits on who can reach our systems. No online service can promise perfect security, so please choose a strong, unique password and keep your devices protected.
11. Children
Every Crossing is for adults aged 18 or over. We do not knowingly collect information from anyone under 18. If you think a child has given us information, tell us and we will delete it.
12. Cookies and similar technologies
Our website does not use advertising or analytics cookies, and loads its fonts from our own servers. The web version and the app store the information described in section 4 on your device so they can keep you signed in and work offline. If we add analytics or crash reporting in future, we will update this policy first, and ask for your consent where the law requires it.
13. Changes to this policy
We may update this policy, for example when we add features. If we make an important change we will tell you in the app or by email before it takes effect. The date at the top shows when it was last changed.
14. Contact
Centreline Ventures Ltd, 128 City Road, London EC1V 2NX, United Kingdom
Email: support@everycrossing.com