What Data Does Borderly Collect — and How Is It Protected?

Our Privacy Philosophy

We built Borderly for a single purpose: to help you prove where you were for tax residency. Every data collection decision we make is filtered through one question: is this necessary to serve that purpose?

If the answer is no, we don't collect it.

We don't run ads. We don't sell data. We don't build advertising profiles. We don't share your information with data brokers. Our business model is simple: you pay for a subscription, and we provide a service. Your data exists to serve you — not to be monetized.

What We Collect

Location Data

• GPS coordinates recorded when the app detects a significant location change (not continuous tracking)
• Jurisdiction determination: which state, province, or country you're in
• Timestamp: when the location was recorded
• Accuracy metadata: how precise the GPS reading was

We do not track your movements continuously. The app uses iOS significant location change monitoring, which activates when you move a meaningful distance (typically 500 meters or more). This means we know which jurisdiction you're in each day — we're not mapping your route to the grocery store.

Evidence Files

• Photos, receipts, documents, and other files you choose to upload
• These are encrypted at rest in our storage systems
• Only accessible to you and anyone you explicitly share access with

Account Data

• Email address (for login and notifications)
• Display name (optional)
• Subscription status

That's it. We don't collect your contacts, browsing history, app usage patterns, or any other data that isn't directly related to residency tracking.

What We Do NOT Collect

It's worth being explicit about what we don't touch:

• Your contacts or address book
• Your browsing history or web activity
• Your phone call history (unless you opt in to our call verification feature)
• Your text messages
• Data from other apps on your device
• Your device's advertising identifier
• Continuous or real-time GPS tracking

How Your Data Is Protected

Encryption

• In transit: All data is encrypted using TLS 1.3 between your device and our servers
• At rest: All stored data is encrypted using AES-256 encryption on our database and file storage systems
• Evidence files: Uploaded files are encrypted in our S3-compatible storage with server-side encryption

Access Controls

• Your data is only accessible to you by default
• If you share access with an attorney or advisor, they see only what you explicitly authorize
• Borderly employees do not have access to your personal data in the normal course of operations
• Administrative access (for support issues) requires documented justification and is logged

Infrastructure

• Our servers are hosted on secure, SOC 2-compliant infrastructure
• Database backups are encrypted and access-controlled
• We use principle of least privilege for all system access

Your Rights

Data Export

You can export all your data at any time in standard formats (CSV, JSON). Your data belongs to you.

Data Deletion

You can delete your account and all associated data at any time. When you request deletion:

• All presence records are permanently removed
• All evidence files are deleted from our storage
• All personal information is erased
• This process is irreversible and complete

Access Control

You control who sees your data. You can grant and revoke access to attorneys and advisors at any time, with a complete audit trail of every access event.

Compliance

GDPR

For users in the European Union, we comply with all GDPR requirements including data portability, right to erasure, and lawful basis for processing.

CCPA

For California residents, we comply with the California Consumer Privacy Act. We do not sell personal information, and you can opt out of any data sharing via your account settings.

The Bottom Line

We built Borderly because we believe everyone deserves access to strong residency documentation tools. That mission requires your trust, and we take that responsibility seriously.

If you have questions about our data practices, we're happy to answer them. Transparency isn't a marketing position for us — it's how we operate.