Multipolitan

Privacy Policy

Last updated: 14 October 2026

1. About this policy

Multipolitan is a mobile app that helps you keep track of your international mobility in one place: your passports, visas and residence permits, the countries you have been in and for how long, and your upcoming trips. This policy explains what personal data we collect when you use the app, why we collect it, who we share it with, how long we keep it, and the choices and rights you have.

This policy follows widely recognised data protection principles and the requirements of the Apple App Store and Google Play. We apply it to all users wherever they are. Depending on where you live, you may have additional rights under local law.

1.1 Multipolitan does not give legal, immigration or tax advice

The app calculates things such as days spent in a country, document expiry warnings and an estimate of your status in the country you are in. These are informational estimates based on the information you give the app and on general travel rules. They are not legal, immigration or tax advice, and they are not a decision by any authority. Always check with the relevant authority or a qualified adviser before relying on them. Our Terms of Use say more about this.

2. Who we are and how to contact us

Multipolitan Pte. Ltd., 22 Cross Street, #03-106 Cross Street Exchange, Singapore 048421 ("Multipolitan", "we", "us" or "our") is responsible for your personal data as the data controller.

Data protection officer, privacy questions and requests: privacy@multipolitan.com

3. Who can use Multipolitan

Multipolitan can be used by people of all ages. If you are under 18, please use the app with the knowledge and permission of your parent or legal guardian. A parent or guardian can contact us at privacy@multipolitan.com to ask about, correct or delete a child's personal data.

Account holders can add other people to circles, including people under 18 (see section 4.4).

4. The personal data we collect

We collect the information needed to provide the app, plus limited technical and usage data to keep it working and to improve it (you can switch usage analytics off). We do not ask for your passport or visa numbers, or for scans or photos of your own travel documents. We do not use advertising tools or advertising identifiers, and we do not sell your personal data.

4.1 Information you give us

4.2 Information the app collects automatically

4.3 Information we receive from other services

• Apple or Google, if you sign in with them: an ID token, your email address (or an Apple private relay address) and your name.
• Our flight-data provider (FlightIQ), if you add a flight number: flight status updates for your flight.

4.4 Information about other people (circles)

If you add another person to a circle, you can enter their name and their passport and visa issuing countries and expiry dates, and invite them to the app by email, in which case you give us their email address. Anyone with a passport can be added, including people under 18. Please only add someone if you are entitled to share their information with us, and let them know you have done so. If the person is under 18, only add them if you are their parent or legal guardian or have their parent's or guardian's permission. When you remove a person who does not have their own account, the details and invitations you entered for them are deleted. When you remove a person who has their own account, only the link between your circles is removed.

5. What the app calculates for you

Using the information above, the app calculates:

• an estimate of your status in the country you are in (for example citizen, permanent resident, visa holder, visa-free, EU free movement, overstay, undocumented, or that information is missing) and how many days you have left;
• expiry warnings for your passports, visas and permits;
• travel metrics, such as the number of countries you have visited and the number of countries you can visit without a visa;
• the status of your trips and gaps in your travel timeline; and
• a travel report, if you ask for one (see below).

Apart from the travel report, these results are calculated each time the app needs them and are not stored. The only results we keep are the expiry-warning dates, which are stored with each document, and the time you confirm that you are past your permitted stay. That confirmation only changes how the warning is displayed for 7 days; it does not change the calculation.

To estimate your status, the app uses the country you are in and your arrival date, your active passports, visas and permits, visa-free entry rules for your passports, EU/EEA/Swiss free-movement rules, the Schengen 90/180-day rule, the days you have spent in the Schengen area in the last 180 days, and whether you are currently on a tracked flight. The app does not hold a verified record of your citizenship: where it shows "citizenship", this is an assumption based on the country that issued your passport and, where relevant, the visas and residence permits you hold.

No automated decisions. These calculations are for your information only. We do not use them to make decisions about you, to grant or refuse access to features, or for any purpose with legal or similarly significant effects, and we do not share them with anyone for those purposes.

Travel report. If you request a travel report, we create a PDF showing your name, the countries you have visited and the dates, and send it by email.

6. How location works

You choose how Multipolitan learns where you are:

• Manual — you enter the countries and dates yourself. No device location is used.
• While using the app — with your permission, the app checks which country you are in while you use it.
• Background — only if you separately turn it on, the app checks which country you are in even when it is not open, so your day counts stay up to date.

When the app checks your location, it asks your phone for an approximate (low-accuracy) position, or reuses one from the last 15 minutes. Your phone's built-in location service then works out which country that position is in. To do this, your phone may send the position to Apple (on iPhone) or Google (on Android), under their own privacy terms. Only the country reaches Multipolitan. We never receive or store your coordinates or the city you are in.

We record each country as a "stay" with arrival and departure dates, and whether it was recorded manually or automatically. If you use automatic location, the app can also create trips automatically from the countries it detects. Trips, whether you add them or they are created automatically, also record stays in your travel history.

Automatic location is based on your consent. You can switch to manual mode or turn location off in the app or in your phone's settings at any time. This immediately stops new automatic updates, including automatically created trips; your existing travel history and trips stay until you delete them. You can delete any past stay or edit its dates. Your current stay cannot be deleted, but you can clear your current location, which closes it with today's date.

7. Why we use your data and our legal basis

We use your personal data only where we have a valid reason (legal basis) to do so. These are ours:

Where we rely on legitimate interests, you can object (see section 11).

8. Who we share your data with

We use the service providers below to run Multipolitan. Most of them process data on our behalf and only for the purposes described. Apple and Google, when you use their sign-in or their phone location services, do so under their own terms and privacy policies. We do not share your data with advertisers or data brokers.

Our travel-rules and visa-free calculations run on services operated by Multipolitan itself. Our travel-rules service receives country, city and airport codes but no information that identifies you; our visa-free scoring service receives the countries that issued your passports and the type, issuing country and remaining validity of your visas and permits.

We may also disclose personal data where the law requires it, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of our business, in which case we will tell you if your data will be handled under a different policy.

9. International transfers

Our main database is hosted by AWS in Singapore. Crash reports are processed by Google mainly in the United States, and usage analytics by PostHog in the United States. Some of our other providers may also process data outside your country, including in the United States.

Where your data is transferred to another country, we take steps to protect it, including contractual data protection clauses in our agreements with AWS, Google (Firebase) and PostHog. You can ask us for more information about these safeguards using the contact details in section 2.

10. How long we keep your data

10.1 Deleting your account

You can delete your account at any time in the app. When you do:

• your account is locked immediately, your device records are deleted, and, if your account has an email address, we send you a confirmation email;
• for 30 days you can sign in and recover your account unchanged;
• after 30 days, your account and all data linked to it are permanently deleted, usually within a day. This includes your sign-in identity with our sign-in provider and the record of your deletion request. Copies in our encrypted backups are deleted within a further 7 days, so your data is gone from our main database and its backups within 38 days of your request, apart from the items listed below.

A small amount of data is kept for longer or held separately:

• our application logs (14 days), crash reports (90 days) and usage analytics (1 year), which expire on their own schedules. Crash reports and analytics are linked only to a pseudonymous ID; application logs use internal IDs and contain an email address only in a few specific cases, such as an email that failed to send;
• sign-in records held by Supabase and email delivery records held by SendGrid, kept under their own retention periods;
• flight-status messages from our flight-data provider, which are stored without a link to your account and deleted 30 days after the flight lands.

11. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate data (you can edit most of it directly in the app);
• delete your data (see section 10.1);
• restrict how we use your data in certain cases;
• object to our use of your data where we rely on legitimate interests;
• data portability, meaning to receive data you gave us in a commonly used format;
• withdraw consent at any time, for example for automatic location, without affecting what we did before; and
• complain to a data protection authority, in particular in the country where you live or work.

To exercise these rights, contact us at privacy@multipolitan.com. We will respond within one month, and may ask you to confirm your identity first.

12. Your choices in the app

• Location: choose manual, while using the app, or background, and change it at any time in the app or your phone's settings.
• Usage analytics: on by default; switch it off at any time in Settings → Privacy → Usage analytics. Collection stops immediately.
• Push notifications: controlled by your phone's notification settings.
• Email notifications: off unless you turn them on.
• Your records: edit or delete stays, trips, visas, permits, followed countries and recent searches, and archive passports.
• Your account: delete it at any time (section 10.1).

Crash reporting is always on, because it helps us keep the app working; it is linked only to a pseudonymous ID.

13. Security

We use technical and organisational measures to protect your data, including access controls, encrypted backups and limiting the data we collect in the first place (for example, we never receive your coordinates). No system is completely secure, but we work to protect your data and will notify you and the relevant authorities of a personal data breach where the law requires it.

14. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, tell you in the app or by email before the changes take effect.

15. Contact

Multipolitan Pte. Ltd., 22 Cross Street, #03-106 Cross Street Exchange, Singapore 048421. Email: privacy@multipolitan.com.