Skip to content
Odisa

Odisa Privacy Policy

Last updated: October 16, 2026 (version 1.0)

Odisa ("the app") is an iPhone, iPad and Apple Watch app by Reverb Technology LLC, a Texas limited liability company, United States ("Reverb", "we", "us"). Address: 14 Villa Canyon Place, The Woodlands, Texas 77382, United States. Privacy contact: developer@reverbt.com.

This policy explains what data the app handles, why, which data leaves your device and what you can decide. We wrote it to be understood; if something is unclear, write to us.

1. In short

  • Odisa has no accounts and no sign-in. We do not ask for your name, email or phone number.
  • What you store in the app (countries, trip dates, Vault items, photos, invoices, documents, agenda) lives on your iPhone and in your private iCloud space. We do not receive it and we cannot see it.
  • Only three things leave the device: (a) technical error reports, (b) anonymous usage counts from a closed list, and (c) confirmation of your Odisa Plus purchases. The first two can be turned off in Settings.
  • There is no advertising, no tracking, and we do not sell data.

2. What stays on your device and in your iCloud

You create and use this data in Odisa; we do not receive it:

  • Your days by country, trips, goals and the results of the rules (for example, Schengen 90/180).
  • The Vault: descriptions, serial numbers, values, photos and invoices of your valuables.
  • Documents (with expiry dates) and the Agenda.
  • Your app preferences.

If you use iCloud, Odisa stores this data in the private iCloud container of your Apple Account (iCloud.com.reverbtech.atlas) to sync it across your devices. Apple handles it under its own terms and privacy policy. Reverb has no access to your private container.

System permissions

The app asks for permission and you can say no; the app keeps working without it:

  • Photos: reads only the date, place and camera model of your photos, on your iPhone, to rebuild past trips. Odisa ignores photos other people shared with you. Nothing is uploaded.
  • Calendar: reads your flight events, on your iPhone, to rebuild past trips. It does not modify your calendar.
  • Location (automatic mode, optional): records border crossings and confirms which country you are in each day. It uses approximate location (precise location is off by default), the system's change-of-place notices and, at most once a day, one approximate reading when you open the app. The country is worked out on your iPhone; coordinates and exact times are never stored, and your location never leaves your device.
  • Camera: to scan documents and photograph your valuables. Images are stored on your device.
  • Face ID or Touch ID: protects the Vault, Documents and Agenda. The system performs the check; the app never receives your biometric data.
  • Notifications: local reminders for expiries and tasks, and silent system notifications to sync iCloud.

3. Data that does leave your device

3.1 Technical error reports (can be turned off)

When the app hits an error, it may send us: the error type and code (in the form "Type.case [domain#code]"), the technical name of the function where it happened, a stack of program symbols, its severity, the date and time, the app and system versions, and a random installation identifier (§3.4). The server rejects any message that does not have that form, so there is no way for it to include your content, countries, dates, names or document numbers. Purpose: find and fix faults.

3.2 Anonymous usage (can be turned off)

The app may send us usage counts from a closed list of 19 events, for example: "the app was opened for the first time", "the Vault tab was viewed", "the paywall was viewed", "a days goal was created", "an item was added" (only in ranges such as 1-2, 3-5 or 6-10, never the item). Each event only accepts values from a closed list. They never include your content, countries, dates, places or rule results. Purpose: understand which parts of the app are used and where purchase and import flows get stuck, so we can improve them.

3.3 Turning them off or on (§3.1 and §3.2)

In Settings, under Privacy, the "Share anonymous usage" switch controls both error reports and anonymous usage: one switch for both. If you turn it off, nothing more is sent and anything pending is discarded.

  • European Union, European Economic Area, United Kingdom and Switzerland: the switch starts off and turns on only if you enable it (prior consent).
  • Rest of the world: it starts on and you can turn it off at any time.
  • If the app cannot determine your region, it behaves as in the first case.

3.4 Random installation identifier

The app generates a random identifier (a UUID) the first time it opens and keeps it in your device's Keychain, without syncing it to iCloud. It is sent with error reports and anonymous usage so they can be counted without knowing who you are. It is not Apple's advertising identifier, it is not combined with data from other apps or websites, and it is not tied to a name, email or account. It may persist if you reinstall Odisa on the same device.

3.5 Odisa Plus purchases

When you buy, restore or renew Odisa Plus, Apple processes the payment and we do not see your payment details. The app sends us the transaction signed by Apple so our server can confirm it. We store: the transaction identifiers, the product, purchase and expiry dates, the environment (production or testing), a refund if there was one, whether it was an Apple offer code (including a reference name for the offer and its price), and a random purchase identifier (different from §3.4, on purpose, so anonymous usage and purchases cannot be cross-referenced). Purpose: confirm that you have Odisa Plus, prevent fraud and handle support requests. This happens even if you turn off the switch in §3.3, because it is necessary for the purchase to work.

3.6 IP address

Your IP address reaches our infrastructure provider when the app talks to the server, as with any internet connection. We use it only to limit abuse: it is turned into an irreversible code with a secret key and that fingerprint is discarded automatically within minutes. We do not store your IP in the error, usage or purchase tables.

3.7 Internal alerts

If a critical error occurs, the system may send an alert email to our team through an email provider. That email contains the same technical data as §3.1 and no personal data.

4. What we do NOT do

  • We do not track: we do not combine app data with third-party data for advertising or share it with data brokers.
  • We include no third-party advertising or analytics SDKs.
  • We do not sell or "share" personal information as defined by consumer privacy laws.
  • We do not ask you to create an account.
  • We make no automated decisions about you with legal effects. The results of the day-counting rules are informational (see the Terms of Use).

5. Providers that process data on our behalf

  • Supabase (database and server functions): receives and stores the data in §3.1, §3.2 and §3.5. Server region: the United States (us-east-1, Northern Virginia).
  • Resend (internal alert emails, §3.7).
  • Apple (App Store, StoreKit, iCloud and purchase confirmations), under its own terms.

Our providers may only use the data to provide the service to us.

6. International transfers

Reverb is in the United States and the servers are there too (us-east-1, Northern Virginia). If you use the app from another country, the data in §3 is processed there.

7. How long we keep it

Periods: error reports, 12 months; anonymous usage, 24 months; transactions, for as long as the subscription relationship lasts plus the time required by accounting and support obligations. After that they are deleted automatically.

8. Your rights

Depending on where you live (for example GDPR and UK law, Mexico's LFPDPPP, Brazil's LGPD, California's CCPA/CPRA and similar laws), you may request access, correction, deletion, objection, restriction and portability, and withdraw consent at any time (turning off the switch in §3.3 is enough to stop sending data).
Because we do not have your name or email, we cannot identify you in our records on our own. To exercise a right over the data in §3, write to developer@reverbt.com and include your anonymous installation identifier (in Settings, the "Anonymous identifier" field, just below the Privacy section) or your Apple transaction number. With that we can locate and delete the rows belonging to your installation. Data that exists only on your device or in your iCloud is under your control: delete it from the app or from iCloud settings. If you believe we are handling your data improperly, you may contact the data protection authority in your country.

9. Children

Odisa is intended for people 18 or older and is not directed to minors. We do not knowingly collect data from minors. If you believe a minor sent us data, write to us and we will delete it.

10. Security

Communications use HTTPS. The server tables have access controls that prevent reading or writing them from the app or from the internet; only server functions with service credentials can do so. The data in your Vault and Documents does not pass through our server. No system is infallible; if an incident affecting you occurs, we will inform you as the law requires.

11. Changes to this policy

If we change it in a material way, we will announce it in the app or on this page before it applies, and the "Last updated" date will change. If what we collect changes, we will also update the App Store privacy label.

12. Contact

Reverb Technology LLC, 14 Villa Canyon Place, The Woodlands, Texas 77382, United States. Email: developer@reverbt.com.