We don't collect anything.

Last updated: 4 May 2026.

Passport Pilot is built around a simple promise: nothing you log leaves your device. This page explains what that means in practice for the trip data you put in.

What we store on your device

• Trip entries: country, entry date, exit date, source (manual / Wallet pass / Photos / journal).
• Optional permits or visas you've added.
• Optional passport details for ETIAS / Schengen rule selection.
• Your nationality (so the rule engine knows which caps apply).
• Your language preference.

All of the above is stored in iOS's app sandbox or Keychain on the device itself. None of it is transmitted to us, our servers, or any third party.

What we do not collect

• No analytics events, no usage telemetry, no crash reports — unless you explicitly opt into Apple's anonymous "Share with App Developers" setting in iOS Settings → Privacy & Security → Analytics & Improvements. That data goes to Apple, not to us, and is anonymised by Apple before we see anything.
• No advertising identifiers. The IDFA is never read.
• No location tracking. The app does not request location permission.
• No contact list, photo library, or calendar access — unless you actively use the optional Wallet-import or Photos-scan features, in which case the access is read-only and the data is processed on-device only.

Optional features that touch on-device data

These features only run when you actively trigger them, and the data never leaves your device:

• Wallet import. Reads .pkpass boarding passes you choose to share with Passport Pilot. The IATA airport codes inside the pass are converted to a country code locally.
• Photo library scan. Looks for boarding-pass screenshots in your library, reads the dates and destinations, and stops there. Photos themselves are never uploaded or kept.
• Ask Passport Pilot. If your iPhone supports Apple Intelligence, the conversational answer is generated by Apple's on-device foundation model. Your question and the snapshot fed to the model never leave the device.

Support form

If you write to us via the support form on this site, the message and its metadata (timestamp, the support code your app generated) are stored on a server we control inside Sweden. We use the message to answer your question; it is not shared with anyone else and is deleted within 6 months of the issue being closed. The form does not require an account or an email address — but if you want a reply, you'll need to leave one.

Children

The app is not directed at children under 13. We do not knowingly collect data about minors.

Changes to this policy

If this policy changes in a way that affects you, we will note it on this page and bump the date at the top.

Contact

Questions about this policy: [email protected].

Tarsoul AB · Sweden.