Do a Stretch (Stretch) privacy policy

Last updated: 16 August 2026

Stretch ("Do a Stretch") is a local-first travel compliance tracker for Android, made by the NomadTracker project. This policy explains what the app does with data, in plain language.

The short version

• Your data lives on your phone. Stays, passports, documents, plans, alerts and settings are stored in the app's private storage on your device. There is no Stretch account and no Stretch server that holds your data.
• We do not sell data, show ads, or run analytics SDKs.
• Location, when you allow it, is processed on the device to suggest that you have entered a new country. You confirm every suggestion; nothing is uploaded.
• Backups and exports go where you send them — a folder you pick, a share target you choose.
• The Visa Desk (Nomad+) is the one feature that sends data off the device, only when you start a guided application, only for that session, and never to a persistent store.

What the app stores on your device

• Passport nationality and a label you choose; the passport number and expiry, if you add them, are held in the device-encrypted application pack (Android Keystore).
• Stays (country, entry and exit dates), planned trips, travel documents (type, country, dates, number if you enter it), the traveller name you optionally give for PDF exports.
• Setup-quiz answers (which passports you hold, whether you manage tax-residency days), your Nomad+ trial or subscription state, and rule-verification dates.
• If you enable it: the last resolved country from GPS, and calendar event ids for the events the app creates in a calendar you choose.

Permissions and why

• Notifications — day countdowns and must-exit reminders; the promised day-5 trial reminder.
• Location (Nomad+, optional) — to suggest a country change while the app is open. The Google Play build does not request background location.
• Calendar (Nomad+, optional) — to mirror stays into a calendar you select.
• Exact alarms — so a must-exit reminder fires on the day, not sometime after.
• Internet — the Play build uses it only for map tiles in Explore, for the Visa Desk when you start a session, and (in future versions) to fetch an updated rules snapshot. City insights ship inside the app as a dated snapshot.

The Visa Desk

When you start a guided visa application, the app streams the fields needed for that form (from your application pack) to a Stretch session server that operates a browser on your behalf. The session lives in memory for its duration and is wiped when it ends; nothing is written to a server-side profile. You perform CAPTCHA, payment and the final submit yourself. Government portals you apply through have their own privacy policies.

Third parties

• Map tiles are fetched from an OpenFreeMap / MapLibre-compatible tile server; a tile request reveals your IP address and the map area you view, as any map does.
• Google Play Billing processes subscriptions; we receive an anonymous purchase token, never your payment details.
• Government visa portals receive what you submit through them.

Your choices

• Export a full backup (JSON) or PDF at any time; delete anything in the app; uninstall to remove everything the app stored.
• Revoke any permission in Android settings; the app keeps working with manual logging.

Children

Stretch is not directed at children under 13 and does not knowingly collect their data.

Changes and contact

We will update this page when the app's data practices change. Contact: david.toniolo@paperclip.ai