Privacy Policy

In short

• Countly works out which country you're in from your phone's location, and counts the days you spend in each one.
• All of that — reading location, resolving the country, counting days — happens on your device.
• Your location and your history are never uploaded to Endless River. There's no account system, and we can't see your data.
• The Countly app runs no behavioural analytics and never uses your travel data for ads. It includes one attribution tool that measures our advertising only — it reads no location and nothing you track (see Measuring our ads).
• The only data that can leave your device does so because you chose it: a store purchase, an OS backup you switched on, a report you export, or an optional crash diagnostic.

Who we are

Countly is developed and operated by Endless River ("we", "us", "our"). If you have any question about this policy or your privacy, email us at privacy@endlessriver.xyz.

Your location

To count your days, Countly needs to know which country you're in — including while the app is in the background. With your permission, it reads your device's location and, on the device itself, converts it to a country using an offline map. There's no network request for this, even when you're abroad or roaming. From that, Countly keeps a record like "12 March 2026 · Portugal".

• Your raw location is processed on your device and is not transmitted to us or any third party.
• Countly stores the result — a country and a date — on your device, not a trail of the precise coordinates of where you were.
• You can change or withdraw location permission at any time in your device settings. Without background location, automatic counting pauses and you can add days by hand.

What's stored, and where

Everything Countly knows lives in a database on your device: your country-by-day ledger, trips you add or edit, the rules you set up (residency thresholds, the Schengen 90/180, visa limits), your notification preferences and app settings. Countly does not upload this database. There is no Countly account, no sign-up, and no cloud sync operated by us. You can also lock the app behind Face ID, Touch ID or your device biometrics.

What we don't collect

Because "we value your privacy" means nothing on its own, here's the specific list. Countly contains:

• No behavioural analytics, telemetry or usage-tracking — nothing records what you do inside the app.
• No third-party trackers inside the app, apart from the single advertising-measurement tool described in Measuring our ads below — which never sees your location or travel history.
• No social logins, and no access to your contacts, photos, calendar or microphone.
• No profiling, and no selling or renting of your data. Your location and travel history are never shared with anyone.

Measuring our ads

Countly is only useful if people can find it, so we run ads on platforms such as TikTok, Yandex and others. To avoid wasting that budget, we need to know which ad actually led to an install. For that single purpose — and nothing else — the app includes a standard attribution tool, AppsFlyer. Here is exactly what it does, and what it deliberately does not:

• It records that an install happened, which ad campaign it came from, and whether you later start a Countly Pro purchase — using your device's advertising identifier (Apple's IDFA / Google's Advertising ID). Matching an ad to an install is its whole job.
• It is used only to measure advertising. It is never matched to your name, email or any personal profile — we don't hold those to begin with.
• It never sees your location. We've turned on IP masking, so not even an approximate location is derived from it. Your country history and everything you track stay on your device, exactly as described above.
• It collects nothing about how you use the app — no screens, no taps, no behaviour, and nothing you've tracked.
• You can reset or limit your advertising identifier at any time in your device's privacy settings, and opt out of Apple's app-tracking entirely — which stops the matching.

AppsFlyer processes this limited install data as our service provider, and shares the attribution result with the ad platform that delivered the install so it can measure the same campaign. That is the full extent of it: an install, a campaign, and a purchase signal — never your travels, and never your location.

This website

The Countly landing page keeps privacy-safe daily totals so we can distinguish a real page load from an advertising-platform click and see whether visitors use the App Store or Google Play buttons. This counter works without cookies or local storage and does not create a visitor, device or session profile.

• We store only the UTC date, a broad source bucket (Yandex or other), the event type, and the aggregate count.
• We do not write an IP address, user agent, referrer, device ID, session ID or raw campaign parameters to the metrics database.
• Our hosting and database providers necessarily process network requests to deliver the website, but the aggregate counter does not pass request identifiers into its stored records.
• Separate Google Analytics measurement loads only after you make a choice in the website's consent banner. Advertising storage remains disabled.

Crash reports (optional, no personal data)

So we can find and fix the bugs that crash the app, a published build of Countly may send anonymous crash reports through Sentry, a crash-reporting service. When this is active:

• It sends only technical crash information — the error and stack trace, app version, OS version and device model.
• It is configured to attach no personal data, and it never includes your location, your country history, or anything you've tracked.
• It captures crashes only — there is no behavioural, performance or session tracking.
• Reports are scrubbed before sending and used solely to make the app more stable.

Sentry processes this limited data as our service provider. If a build ships without a crash-reporting key configured, this is switched off entirely and nothing is sent.

Purchases (Countly Pro)

Some features are part of Countly Pro, a paid subscription or one-time purchase. Payments are handled entirely by Apple's App Store or Google Play — we never see or store your card or payment details. To unlock and validate a purchase, the store gives Countly limited transaction information (for example, whether a subscription is active). Apple's and Google's handling of your purchase is governed by their own privacy policies.

Backups and exports

• OS backups. If you turn on iCloud Backup (iOS) or Google / device backup (Android), your Countly data may be included in that backup, stored by Apple or Google under their terms. We have no access to it.
• Exports you create. Countly can export your history as a PDF or CSV, or a data file you can re-import. Once you share or save an exported file, it goes wherever you send it and is no longer governed by this policy.

Notifications

Countly's reminders — approaching a threshold, entering a country, optional weekly or monthly digests — are local notifications generated on your device. We don't operate a push server, and no data leaves your device to deliver them.

Permissions we ask for

Countly requests only what it needs to do its job:

• Location (including "Always" / background) — to detect the country you're in and count days automatically.
• Notifications — to alert you before you reach a limit or threshold.
• Run after restart (Android) — to resume counting after your phone reboots.

You can review or withdraw any of these at any time in your device settings.

Children

Countly is not directed to children, and we don't knowingly collect personal information from children under 13 (or under 16 in the EEA / UK). Because Countly keeps your data on your own device, this generally won't arise — but if you have a concern, please contact us.

Your rights and control

Because your data lives on your device, you hold the controls directly:

• View, edit or delete any trip or day in the app.
• Erase all Countly data from within the app, or uninstall the app to remove everything.
• Export your data whenever you like.

Privacy laws such as the GDPR and the CCPA give you rights to access, correct, delete and port your personal data, and not to be treated unfairly for exercising them. We honour these — and in practice there is very little for us to act on, because we don't hold your personal data on any server. If you've emailed us, or an anonymous crash report has been sent, you can ask us about that information.

International users

Countly processes your data on your device, wherever you are in the world. The limited third parties involved — Apple, Google, Vercel, Supabase, AppsFlyer (advertising measurement), and (if enabled) Sentry — process data in their own jurisdictions under their respective policies and safeguards.

Changes to this policy

If we change this policy, we'll update the "Effective" date above and flag any material change in the app or here. Continuing to use Countly after a change means you accept the updated policy.

Contact

Questions about privacy? Email us at privacy@endlessriver.xyz.