Privacy policy
Who we are
Settled UK ("the app", "we") is run by Syncs App Ltd, United Kingdom. We are the controller of the personal data described below. You can contact us at syncs.bio@gmail.com.
What Settled UK does
Settled UK estimates when you may qualify for settlement (indefinite leave to remain) and British citizenship, and gives an optional view of UK tax residence, from the dates and answers you enter. The estimates are not legal or tax advice.
What we collect
What you enter. Your visa route, the start and end dates of your permissions and your first entry to the UK, the date settlement was granted, whether you are married to a British citizen, your trips outside the UK (departure and return dates, an optional place name, whether you marked a special reason, whether it was a plan), whether you confirmed your trip history is complete, your answers and results in the tax residence check, and, if you add one, a visa application you made (its type, the day you sent it, whether you applied inside or outside the UK, and its status as you describe it). We do not ask for application numbers or documents. We call this your data.
Your account. The first time you open the app we create an anonymous account for you without asking for any details. It has a random user ID. If you choose to save access in Settings you can link Apple, Google or an email address with a password. Depending on what you choose, the account then also holds your email address (for Sign in with Apple this can be the private relay address Apple provides), your name as given by Apple or Google, and, with Google, your profile picture link. Passwords are handled by Firebase Authentication; we do not see or store your password.
Usage data. If "Share usage data" in Settings is on (it is on by default), the app sends product analytics to PostHog: events such as starting onboarding, choosing a visa route, adding a trip, viewing a screen or linking an account, with simple properties such as the route category, the number of trips, the tax year, the result category or the stage of your visa extension. These events do not contain your dates, application details, email address, name, place names or the text of errors. They are linked to your account's user ID. Each event also carries technical details sent by the analytics library: device model, operating system and app version, language, time zone, screen size, network type and a session identifier. Like any online service, PostHog receives your IP address when the app connects; the app asks PostHog not to use it to work out your country or city.
Messages you send us. If you use "Contact support" or "Suggest a feature" in Settings, the app sends your message to PostHog, where we read it. A support message can also include an email address for our reply: the field is optional, and if you linked an email to your account it is filled in for you so you can keep or remove it. Each message carries your account's user ID, the app version and the iOS version. Messages are sent when you tap "Send", even if "Share usage data" is off.
Technical data. Firebase (Google) receives your IP address and an installation identifier when the app talks to its servers, for example to sign in, load and save your data and fetch configuration.
We do not use advertising identifiers, we do not show ads, we do not track you across other companies' apps or websites, and we do not ask for your precise location, contacts, photos or camera.
Why we use it
- To run the app: to store your data, calculate the estimates and let you get it back on a new phone if you saved access. We rely on this being necessary to provide the app you asked for.
- To understand how the app is used and improve it (analytics). Analytics is on by default and you can switch it off at any time in Settings, "Share usage data". We rely on our legitimate interest in improving the app, and you can object by switching it off.
- To answer your support messages and consider your ideas, based on our legitimate interest in helping you and improving the app.
- To keep the service secure and fix problems, based on our legitimate interests.
We do not sell your data.
Who processes it
- Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Remote Config) stores your account and your data and runs our back end. Your data document is stored in the London region (europe-west2). Firebase Authentication does not let us choose a region, so account details may be processed by Google outside the UK.
- PostHog (EU cloud) receives the analytics events and the messages you send us, described above.
- Apple and Google process your sign-in if you choose Sign in with Apple or Google.
These providers act on our behalf and may transfer data outside the UK. Where they do, we rely on the safeguards they offer under UK data protection law, such as adequacy regulations or standard contractual clauses.
Where your data stays on your phone
The app keeps an offline copy of your data on your phone so it works without a connection, and your analytics choice. Signing out clears the offline copy.
How long we keep it
Your data stays until you delete it. If you never save access and stop using the app, the anonymous account and its data stay on our servers until you delete them. Usage events are kept for up to 7 years, the retention period of our analytics provider, PostHog. When you delete your data in the app, they are deleted together with your account: we ask PostHog to erase them straight away and it carries this out in the background (see below).
Deleting your data
In the app, open Settings, "Delete all my data", then "Delete everything". This erases your data from your phone and from our servers and deletes your account. If you linked Apple, Google or email you will be asked to confirm it is you first, and for Apple we also revoke the Apple sign-in token. The same step also asks PostHog to erase the analytics profile linked to your account together with its events; PostHog carries this out in the background, usually within a short time. Back-ups and provider logs are removed on the providers' normal schedules.
Your choices and rights
You can turn analytics off at any time in Settings, "Share usage data". You can correct your details in the app.
Under UK GDPR you have the right to be informed, to access your personal data, to have it corrected or erased, to restrict or object to its use, to receive it in a portable form, and to withdraw consent where we rely on it. The app has no export button yet: write to syncs.bio@gmail.com and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).
Children
Settled UK is designed for adults and is not directed at children. If you believe a child has given us personal data, write to us and we will delete it.
Changes
If we change this policy we will update the date above and, for material changes, take reasonable steps to tell you, for example in the app.