Privacy Policy

Who we are

The controller of your personal data is the account owner behind Tax Residency Checker. Contact us at the email address shown on the site for any privacy query.

What we collect

• Account data — your email address and a salted bcrypt hash of your chosen password. We never see your password in the clear.
• Residency data — the daily entries you log: date, location, hours worked, flags (annual leave, transit, etc.), and free-text notes. This is what the app is built to track.
• Home-country and SRT answers — the jurisdiction you've picked as your home and the SRT questionnaire answers, so we can compute the correct thresholds.
• Billing data — if you subscribe, we use Stripe to take payment. Stripe stores your card details; we only keep the subscription identifiers Stripe returns (customer ID, subscription ID, status, period end).
• Geolocation — only if you grant permission in the browser. We store latitude, longitude and country codes so the "record today's location" button works. You can decline, revoke, or clear this history at any time.
• Session cookie — a first-party HTTP-only cookie that keeps you logged in. It contains a random session ID only; no tracking identifiers. This is strictly necessary for the site to function.

Why we process it

We use the data to provide the Service you've signed up for: compute your residency counts, show you the dashboard, email you reports you've opted into (monthly summary, weekly nudges, password resets, billing receipts), and accept payment. Legal basis under UK GDPR: performance of contract for the core service, legitimate interest for transactional emails, consent for geolocation (which you can withdraw).

Who we share it with

• Stripe — payment processing (only if you subscribe). See Stripe's Privacy Policy.
• MailerSend — transactional email delivery (resets, invites, monthly reports, nudges). See MailerSend's Privacy Policy.
• Your hosting / infrastructure providers — the server where the app runs (EU/UK region).

We don't sell your data. We don't use it for advertising. Your residency data never leaves the Service, except when you choose to share it (share links you generate, PDFs / CSVs you export).

How long we keep it

We keep your data for as long as your account is active. If you close your account we'll delete the residency data within 30 days, keep minimal billing records for the 6 years required by UK tax law, and remove the rest. Sent emails are retained by MailerSend per their own retention policies.

Your rights

Under UK GDPR you have the right to access, correct, export, and delete your data, and to object to processing. To exercise any of these, email us at the contact address on the site. We'll respond within one month. You also have the right to complain to the UK ICO (ico.org.uk) if you believe we've mishandled your data.

You can export your daily log as CSV or PDF from your dashboard at any time — no email required.

Changes to this policy

We may update this policy. If changes are material we'll notify active users by email at least 14 days before they take effect.