What we store, and what never leaves your phone.

BorderRunner is operated by DROPPIN, LLC. If you have a question about anything here, write to support@borderrunapp.com.

You can complete setup and use every feature without signing in. In that mode your profile and your logged crossings are stored only in your browser or app storage on that device. They are not sent to us, and we have no way to read them.

Deleting the app removes that data. Because it never left the device, there is no copy for us to restore.

Signing in adds a cloud copy so your clocks survive a lost phone and follow you to another device. From then on we store:

• Your email address, used to sign you in and to send the emails described below.
• Your profile: the passport country or countries you travel on, and your vehicle details if you added one.
• Your crossings: for each one, the country, the date, whether it was an entry or exit, who or what it applied to, and any note you typed yourself.
• Your plan status: whether you are on a trial, annual, or lifetime plan, and the identifiers our payment provider gives us to match a payment to your account.

That is the whole list. We do not build a profile of you beyond it, and we do not sell or share it for advertising.

Three things people reasonably worry about, and what actually happens:

• Your location. If you turn on auto-detect, the app reads your position while it is open and converts it to a country using a lookup table bundled inside the app. The conversion happens on your phone. Your coordinates are never transmitted. Only the country of a crossing you choose to save is stored, the same as if you had typed it.
• Photos of your passport. The stamp scanner reads the image on your device. The photo is never uploaded and we never receive it.
• Your calendar. If you turn on calendar reminders, the app writes exit dates into your own calendar and removes them when a stay ends. It works only with the events it created, and none of your calendar contents are sent to us.

The app contains no advertising, no analytics, and no third-party tracking software of any kind. We do not track you across other apps or websites, and there is no advertising identifier in the app.

We use a small number of providers, each for one job:

• Supabase hosts the accounts and the cloud copy described above.
• Polar handles payment. Checkout happens on their page, so your card details go to them and never through us. We receive only the fact that a payment succeeded and the identifiers needed to match it to your account.
• Our email provider delivers sign-in codes, receipts, and any reminders you have turned on.

Every one of these is a button in the app, not a request you have to send us:

• Export. Download your profile and your full crossing history from the Account screen.
• Delete. Deleting your account from the Account screen removes your cloud profile, your crossings, and your account itself.
• Turn features off. Location, calendar reminders, and push reminders are each off until you turn them on, and each can be switched back off in Settings at any time.

Depending on where you live you may also have the right to ask for a copy of your data, to have it corrected, or to object to how it is used. Write to support@borderrunapp.com and we will handle it.

Your cloud copy is kept while your account exists, because it is the thing the app reads to show your clocks. When you delete your account it is removed. Records we are required to keep for tax or accounting, such as a record that a payment happened, are kept as long as the law requires.

BorderRunner is built for adults managing their own travel and is not directed at children. We do not knowingly collect data from anyone under 13.

If we change what the app collects, we will update this page and the date at the top. Material changes will be surfaced in the app rather than left here for you to find.

Questions, or something here that does not match what you are seeing? Support has the fastest route to a person.