ShareCodeStatusPrivacy policy
In short
- There's no account. We don't know who you are.
- Your codes, dates of birth, dates and trips are encrypted and stay on your iPhone.
- We don't collect analytics, show ads or track you.
- Something leaves your phone only when you send it yourself, open a GOV.UK link or buy Plus through Apple.
What the app keeps on your iPhone
The share codes you save, with the date each one ends, and for each person you add: their name, date of birth, the dates you enter (such as visa or passport dates) and any trips you enter for the day counter.
This is stored in one encrypted file. The key that opens it is kept in your iPhone's Keychain and never leaves the device. The file is left out of iCloud and computer backups, so it can't be read anywhere else.
The widget
The widget can't open the encrypted file, so the app writes it a small separate copy on your iPhone: each code's kind, end date, the code itself and whose it is. It never includes a date of birth, and while the Face ID lock is on it doesn't include the codes either. This copy is also left out of backups.
Face ID lock
If you turn the lock on, iOS checks your face or passcode. The app only learns whether the check passed. It never sees your face data or your passcode.
Reminders
Reminders about dates are scheduled on your iPhone as local notifications. They aren't sent through a server.
When something leaves your phone
- Sharing a code. When you share, iOS shows its share sheet and you choose where the message goes, such as Mail or Messages. The message goes from your phone to the person you choose. We don't see it.
- GOV.UK links. Links to GOV.UK open in your browser. GOV.UK's own privacy notice applies there.
- Buying Plus. Payment is handled by Apple through the App Store. We don't receive your payment details. Apple tells the app only whether Plus is active.
- Apple Wallet. Where the app offers to add a code to Apple Wallet, it builds the pass on your phone and sends our signing server only a list of file fingerprints (cryptographic hashes). That list doesn't contain your code, name or date of birth. The server signs it and sends it back; it doesn't store or log it.
What we don't do
- We don't ask you to sign up or sign in.
- We don't use analytics, advertising or tracking tools, and we don't use your information across other companies' apps or websites.
- We don't sell or share your information. We don't hold it in the first place.
Deleting your information
You can delete any code, date, trip or person in the app. Deleting the app deletes everything it stored. Because nothing is backed up or kept by us, a deleted item can't be recovered, and your information doesn't move to a new phone by itself.
Your rights
Under UK data protection law you can ask what information we hold about you, and ask us to correct or delete it. Because the app keeps everything on your phone, we hold none. If you contact us by email, we use your message only to reply, and delete it when it's no longer needed. You can also complain to the Information Commissioner's Office.
Children
The app is for adults managing their own and their family's immigration codes. A parent or guardian can add a child as a family member; that information stays on the parent's phone like everything else.
Changes
If this policy changes, we'll update this page and the date at the top. If the app ever starts sending something new off your phone, we'll say so here first.
Contact
Questions about privacy: support@sharecodestatus.com.