Privacy policy

This policy explains what MissionMind collects when you use the Digimad website at digimad.ai and the Digimad mobile app, what we do with it, and the choices you have.

The data controller is MissionMind ("Digimad", "we"), 14 rue Bausset, 75015 Paris, France. We are established in France, so the EU General Data Protection Regulation and the French Loi Informatique et Libertés govern how we handle your data, wherever you happen to be reading this from.

The short version: the website collects nothing about you. The app collects only what it needs to answer the questions you asked it — where you can go, on which visa, and how many days you have left — and it asks before it takes anything sensitive.

Questions, or to exercise any of the rights below: privacy@digimad.ai.

You can read every destination guide, visa page and comparison on this website without an account, and we do not set advertising or tracking cookies to do it. We do not build a profile of you from your visit.

Our hosting provider processes the technical information every web request carries — IP address, user agent, the page requested — to serve the page and to defend against attacks. Those logs are short-lived and are not used to identify you.

The app stores the following against your account, because the features you asked for cannot work without it:

• Account: an identifier, and your name and email if you create a full account. You can start using the app anonymously, in which case there is no email attached to you at all.
• Profile: display name, date of birth, gender, country of residence and the passports you hold. Visa rules turn on age and nationality, so these decide which routes the app shows you.
• Visa answers: the responses you give to eligibility questions — income band, savings, employment type, insurance, criminal record declarations and similar. Some of this is sensitive. It is stored so you do not have to re-enter it for every visa, and it is used only to evaluate the rules you asked about.
• Saved destinations and visas, and the visas you are tracking.
• Stay history: the countries you have been in and the dates, which is what the day-count against a residency threshold is calculated from.

The app asks the operating system for these permissions. Each one is optional, each is requested at the point it is first needed, and the app keeps working without any of them:

• Location, including in the background: used to record which country you are in so your stay ledger stays current without manual entry. We record the country and the date, not your precise coordinates or a movement trail. Background tracking is off until you turn it on.
• Photo library: used to read the dates and country of photos you select, so you can reconstruct past trips without typing them in. Photos are read on the device; we do not upload your library.
• Notifications: used to warn you before a visa expires or a residency threshold is reached.

You can withdraw any of these in your device settings at any time, and the corresponding feature will stop.

The app can record how the app itself is used — screens opened, features used, errors and crashes — so we can see what is broken and what is worth building. This is product analytics, not advertising: it is not sold, not shared with ad networks, and not used to build a marketing profile of you.

Analytics events are tied to a pseudonymous app identifier rather than your name or email, and we do not put profile details, visa answers or location traces into them.

We ask before we turn analytics on, and you can change your mind in the app's settings at any time. Declining costs you nothing: every feature works the same either way.

The app includes an assistant that can answer questions about destinations and visas. It is powered by OpenAI, and it is off until you turn it on.

If you turn it on, the messages you write and the destination or visa context attached to them are sent to OpenAI to generate a reply. Do not put anything in a chat message you would not want to leave your device — passport numbers, financial account details or health information have no reason to be there.

We do not send your profile, your stored visa answers or your location history to OpenAI unless you include them in a message yourself. We do not permit our providers to train their models on your conversations.

You can turn the assistant off at any time, which stops any further messages being sent.

We share data with the following processors, and no one else. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

• Cloudflare — Hosting, content delivery and the database behind the app. Receives: Account records, profile, saved visas and stay history, all held in the EU.
• RevenueCat — Processing and validating subscriptions. Receives: A pseudonymous customer id, purchase and renewal events.
• Apple and Google — App distribution and payment for subscriptions. Receives: Purchase records tied to your store account.
• OpenAI — Powering the in-app assistant, only if you turn it on. Receives: The messages you send and the destination context attached to them.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

Under the GDPR you have the right to access a copy of your data, to correct it, to have it erased, to object to or restrict how we use it, to receive it in a portable format, and to withdraw any consent you previously gave. Withdrawing consent does not undo what we did with it lawfully beforehand.

You also have the right to give directives about what happens to your data after your death, under article 85 of the Loi Informatique et Libertés.

You can delete your account from within the app, which deletes your profile, visa answers, saved items and stay history. For anything else, write to privacy@digimad.ai. We will answer within one month, which we may extend by two further months for a complex request — we will tell you if that happens.

Our legal bases are: performing the contract you entered when you started using the app, for your account, profile, visa answers and saved items; your consent, for location, photo access, the AI assistant and analytics; and our legitimate interest in keeping the service secure and working, for the technical logs.

If you think we have got this wrong, tell us first and we will try to fix it. You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy, 75007 Paris — cnil.fr, or with the supervisory authority where you live.

We keep account data for as long as your account exists. When you delete the account it is removed from our live systems immediately and from backups within 30 days.

Analytics events are kept in aggregate and are not retained against an individual identifier beyond 14 months.

Digimad is operated from France. Your account, profile, visa answers, saved items and stay history are held in Cloudflare's EU jurisdiction, which pins storage to data centres in the European Union. That is a configuration of the database itself, not a policy we could quietly change: the data is created inside the EU jurisdiction and stays there.

Two things still cross the border. Our hosting provider is a US company, so its staff can in principle access what it hosts for support and security purposes. And the processors listed above for subscriptions and for the AI assistant are established in the United States, so using those features sends data there.

Those transfers rely on the European Commission's Standard Contractual Clauses, or on an adequacy decision where one covers the provider, together with the additional technical measures each transfer needs.

You can ask us for a copy of the safeguards covering any particular transfer at privacy@digimad.ai.

Digimad is not directed at children, and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, tell us and we will delete it.

If this policy changes in a way that materially affects you, we will tell you in the app or by email before it takes effect. The date at the top of this page is when the current version took effect.

Questions about any of this: privacy@digimad.ai, or hello@digimad.ai for anything else.