Privacy Policy

Effective 11 November 2026

Abroadwise is an iPhone app for budgeting a semester abroad, operated by Greek Pay LLC ("we", "us"). This policy covers the app and this website, abroadwise.app. It describes how Abroadwise works as of the effective date above.

What stays on your phone

Everything you enter is saved in the app's own storage on your iPhone:

• Your semester: city, dates, currencies, how much money you have, and the answers you give during setup, including your home university if you add it.
• Expenses, with their amounts, currencies, categories, notes and merchant names.
• Trips, regular bills and money you expect to come in.
• Transactions imported from your bank, if you use bank sync.

The app does not sync this to iCloud or to us. Like other apps, its data can be included in the backups your iPhone makes (iCloud Backup or a backup to your computer), which are controlled by your Apple settings.

If you turn on "Require Face ID", the check is done by your iPhone. We never receive Face ID data.

Location

Location is optional and off until you turn on "Use my location" in the app's Settings. When it is on, the app asks your iPhone for one position each time you open or return to the app, and only while you are using it. The app asks for approximate location, not your exact position; it receives a precise position only if you turn on Precise Location for Abroadwise in your iPhone's Settings. Either way, the app matches the position to the nearest place in the place list on your phone and then discards it. Your location is not stored and is not sent to us or to anyone else. The app works the same with location off.

What our server holds

Our server holds nothing about you unless you buy the Semester Pass or link a bank. Before that, the app only asks it for the place catalog and travel advisories described below, and those requests carry no ID.

If you do, it stores:

• A random ID that the app creates on your phone. We have no way to connect it to your name, email address or Apple Account.
• A one-way hash of a secret kept on your phone, so the server can recognise your phone on later requests.
• When your pass ends and when the record was created.
• For each linked bank: Plaid's ID for the connection, the bank's name, whether it needs you to sign in again, when it was linked, and the access token Plaid issues for it. The token is encrypted (AES-256-GCM) before it is stored.

The server does not store your transactions, account numbers, balances or bank login. When the app syncs, the server asks Plaid for your new transactions and the names and last digits of your accounts, and passes them straight to your phone without saving them.

To check a purchase, the app sends the server the signed receipt Apple gives it. The server verifies it and keeps only the date your pass ends.

Others involved, and what each receives

Plaid (bank sync only)

Banks are linked through Plaid. You sign in to your bank inside Plaid's own screen, so we never see your bank username or password. Plaid receives what you enter there and the random ID described above, and it retrieves your transactions and account details from your bank so they can be sent to your phone. The first import asks for up to 180 days of history. Plaid handles this information under its own End User Privacy Policy. Bank sync works with US banks and cards.

Apple

You buy the Semester Pass through Apple's in-app purchase. Apple processes the payment; we never see your card details or your Apple Account. The purchase is tagged with the random ID so a new phone can find your pass. The Explore screen uses Apple Maps, so map requests go to Apple. If you have chosen to share analytics with app developers in your iPhone's settings, Apple may give us crash and usage reports that do not identify you. See Apple's Privacy Policy.

Exchange rates: Frankfurter

The app downloads daily exchange rates from Frankfurter (api.frankfurter.dev). The request is the same for everyone and contains nothing about you or your spending. As with any internet request, the service can see the IP address it comes from.

Cloudflare

Our server and this website run on Cloudflare. Cloudflare handles requests on our behalf, which involves IP addresses and short-lived technical logs (such as time, address requested and errors). For requests from the app after you buy a pass or link a bank, those logs may include the random ID. We use IP addresses only to limit abuse, and we do not store them in our database.

Travel advisories

The app asks our server for the current list of US State Department travel advisories. It downloads the list for all countries at once, with no ID attached, so the request does not show which places you look at.

Place catalog

Place guides, typical weather, events, festivals and public holidays come with the app. At most once a day the app asks our server whether there is a newer copy of this catalog and downloads it if so. The request is the same for everyone: it has no ID attached and says nothing about you or the places you look at, only which copy of the catalog the app already has.

Links to booking sites

When you tap a link to see live prices, the app opens Skyscanner, Omio, Hostelworld or Booking.com in a browser. The link contains the places and dates of the trip, so the site can show the right search: the airport codes for a flight, or the site's own number or name for each town, and the days you plan to travel. It contains no identifier for you. Other links in the app open official event, government and source websites. Once you are on any of these sites, their own privacy policies and cookies apply.

Some of these may become affiliate links, which means we may earn a commission if you book. When that is the case the app says so next to the links. An affiliate link may pass through a tracking service and tells the booking site that the visit came from Abroadwise. It still contains no identifier for you.

What we do not do

• We do not show ads.
• We do not include analytics or tracking tools in the app. The only outside code in it is Plaid's bank-linking screen, which runs when you link a bank.
• We do not sell or share your information for advertising.
• This website uses no cookies, no analytics and no third-party scripts or fonts.

How long we keep things

• Data on your phone stays until you delete it or delete the app.
• Bank connections are removed from Plaid and from our server when you disconnect them, or automatically about 14 days after your pass ends.
• The record of your random ID and pass end date stays on our server until you delete it as described below. After that the server holds nothing about you.

Deleting your data

You can do all of this in the app, at any time, with or without an active pass:

• Disconnect one bank: Settings, Bank sync, then Disconnect. The connection is removed at Plaid and deleted from our server. Spending already imported stays on your phone.
• Delete everything on our server: Settings, Bank sync, then "Delete My Server Data". Every bank is disconnected and your record is deleted. From then on our server holds nothing about you, unless you later buy or restore a pass, or link a bank again.
• Delete everything: Settings, then "Delete all data". This erases the app's data on your phone and deletes your record and bank connections from our server. If you are offline, the server part happens the next time you open the app with a connection.

Deleting the app from your iPhone removes the data on your phone but does not tell our server. If you linked a bank or bought a pass, use "Delete all data" first, or write to us.

Where information is processed

The little our server holds is processed by Cloudflare and Plaid, in the United States and in other countries where they operate.

Your choices and rights

Almost everything is on your phone and under your control. Depending on where you live, you may also have legal rights to see, correct or delete personal information, or to object to how it is used. Because our server only knows a random ID, the quickest way to use these rights is in the app, as described above. You can also write to us and we will help.

Children

Abroadwise is made for university students and is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes

If Abroadwise changes in a way that affects your information, for example by adding an optional feature that needs an account, we will update this policy before that feature is available, and anything new that involves sharing information will be your choice. We will post the new version here and change the effective date. If a change is significant, we will say so in the app or on this site.

Contact

Greek Pay LLC
hello@abroadwise.app