In short
- Bordr works without an account. Your trips, limits, clocks, currencies and wallet stay on your device unless you sign in.
- If you sign in, we keep that data on our own servers so it syncs between your iPhone and the web.
- We count visits and screens with our own analytics, without cookies and without selling anything to anyone.
- To measure our ads we use Meta, X and Reddit — on the website only after you accept cookies, in the app only after you allow tracking in the iOS prompt.
- We never sell your personal data. You can delete your account and everything in it at any time.
Who we are
Bordr ("the App", "we", "us") is a travel tracker for iPhone and the web at bordr.app. This policy covers the iOS app, the web app and the website. You can reach us through the support form or at support@bordr.app.
What we collect and why
Your account (optional)
If you create an account we store your email address, your name if you give it, an identifier from Sign in with Apple if you use it, and a hash of your password if you set one (we never store the password itself). We use them to sign you in and to send account emails such as sign-in codes and password resets.
Travel data you sync
When you are signed in, the App syncs what you keep in Bordr so you get it back on another device and on the web: trips and stays, stay limits and reminders, world clocks, currencies, wallet accounts and transactions, your passport country, your avatar choice, widget order and settings. It also syncs your last known location (coordinates, city and country) so the web app can show where you are. Without an account none of this leaves your device.
Location
With your permission, the App uses your location to show the country you are in, add stays automatically if you turn that on, and show local weather. Bordr asks only for “While Using the App” permission and does not use your location in the background. For weather, your approximate coordinates are sent to Open-Meteo. You can turn location off at any time in iOS Settings.
Purchases
Bordr Pro is sold and billed by Apple. We never see your card or payment details. Apple tells our server about your subscription (the plan, start and renewal dates, whether it is a free trial, cancellations, refunds, price, currency and App Store country), and the App sends us the signed receipt of your purchase so we can unlock Pro on all your devices and on the web.
Support messages
When you write to us, we keep your email address, your message and our replies. Messages from the App also include the app version, device model, iOS version and language, so we can help without asking twice.
Analytics
We run our own analytics (Umami, hosted on our server at stats.bordr.app). It records which pages and screens are opened, how long a visit lasts, the referring site, browser, operating system, device type, screen size, language and the country, region and city derived from your IP address. It sets no cookies, does not store your IP address, does not follow you across other sites or apps and is not linked to your account.
Advertising and measurement
To learn which of our ads bring people to Bordr:
- Website. The Meta Pixel and the Reddit Pixel load only after you press "Accept" in the cookie banner. They report that you visited the site and whether you clicked the App Store or web app links. If you press "Decline", they never load.
- iOS app — install measurement. After onboarding, iOS asks whether Bordr may track you. Only if you allow it, our server sends a one-time "install" event to X and Reddit with your device's advertising identifier (IDFA), IP address and device type. If you don't allow it, nothing is sent to them.
- iOS app — Meta SDK. The App includes Meta's SDK, which reports app installs, launches and in-app purchases (including trials and subscriptions) to Meta. It uses your advertising identifier only if you allowed tracking; otherwise Meta receives these events without it and uses them only in aggregated, privacy-preserving form under its own rules. We turned off the SDK's collection of screen titles and screen layouts.
You can change your choice at any time: in iOS Settings → Privacy & Security → Tracking, or on the website by clearing this site's data in your browser so the cookie banner appears again.
Who processes data for us
- Our servers (rented virtual servers) — accounts, sync, support messages, analytics and backups.
- Apple — Sign in with Apple, App Store purchases and subscription notifications.
- Resend — sending our emails (sign-in codes, password resets, support replies) and receiving replies to support@bordr.app.
- Meta, X and Reddit — ad measurement, only as described above.
- Open-Meteo — weather for your approximate location.
- Open Exchange Rates (open.er-api.com) — currency rates; no personal data is sent.
- Unsplash, Pexels, jsDelivr and Google Fonts — photos, videos, flag images and fonts that your device downloads directly from them. Like any website, they see your IP address when serving the file.
These providers may process data outside your country. Where the law requires it, we rely on safeguards such as standard contractual clauses.
Legal bases (EEA and UK)
- Contract — your account, sync, purchases and support.
- Consent — location, ad measurement on the website (cookie banner) and in the App (iOS tracking prompt). You can withdraw it at any time.
- Legitimate interests — cookieless analytics, keeping the service secure, and fixing problems.
How long we keep data
- Account and synced data — until you delete your account. Database backups are kept for 14 days, so deleted data disappears from them within 14 days.
- Support conversations — up to 2 years after the last message, unless you ask us to delete them sooner.
- Purchase records — as long as needed for subscriptions, refunds and accounting.
- Analytics — up to 2 years.
Your rights and choices
You can see and change your data in the App, export your trips, and delete your account with everything in it in Profile → Data → Delete profile and all data (see the data deletion policy). Depending on where you live, you may also have the right to access, correct, delete or receive a copy of your data, to object to or restrict processing, and to complain to your data protection authority. To use them, write to us via the support form.
We do not sell personal data. Sharing with ad networks for measurement happens only with your consent as described above.
Security
All traffic uses HTTPS. Passwords are stored only as strong hashes, sign-in tokens are kept in the iOS Keychain, and our servers are reachable only through the services Bordr needs.
Children
Bordr is not directed at children under 13 (under 16 in the EEA). We do not knowingly collect their data; if you think a child created an account, contact us and we will delete it.
Changes
If we change this policy, we will update the date above and, for important changes, tell you in the App.
Contact
Questions about privacy: the support form or support@bordr.app.