Belong Nordic, Privacy Policy

Belong Nordic comes in three versions and they handle your data differently. The iPhone app and the Android app keep your tracker on your device; the only things that ever reach us from them are your email address, if you choose to sign in on the iPhone, and what Belong Nordic Speak needs, if you add it. The web app needs an account, so the situation you enter is stored on our servers and synced to your browser, though your documents and your practice never leave the browser. This policy explains all three.

Who we are

Belong Nordic is made by Belong Europe ApS, a company registered in Copenhagen, Denmark, CVR number 46649044. For the web app we are the data controller for the personal data described below. You can reach us at hello@belongeurope.com.

The phone apps: everything stays on your device

This part is the same on iPhone and on Android. Your residence history, any penalties, your language and test progress, your practice history, any documents you attach, the name and the photo you add for yourself, which country you are tracking, the day you filed your application and the updates you log about it, the exam sitting you pick and the details of any second person you add are stored only on your device. They are not sent to us, to any server we control or to any third party. If you delete the app, that data goes with it. The one part of the phone apps that sends anything to a server of ours is the optional Belong Nordic Speak add-on, described below, and only if you add it.

Your What if scenarios are not stored at all. The sandbox runs on a copy of your situation held in memory while the sheet is open, and it is discarded when you close it.

On the iPhone, signing in is optional. If you sign in on the You tab so one subscription unlocks both the iPhone app and the web app, two things reach us and nothing more: your email address and, if you have an App Store subscription, Apple’s signed confirmation of it. Your tracker data still stays on your device, signed in or not.

The Android app has no account at all. There is nothing to sign in to, nothing to link and no email address for us to hold. What unlocks the app is your Google Play subscription, and that question is asked and answered between the app and Google Play on your phone. The one other thing that can open it is an access code we give Google’s own review team, which works on a single phone, buys nothing and reaches no server. Either way no server of ours is involved in that decision, and the Android app sends us nothing about you unless you add Belong Nordic Speak. The one time it reaches a site of ours is when you tap a link to one, this page included: that opens in the in-app browser and is an ordinary web request, so our page is served the same standard technical information any site is.

The web app: saved to your account

The web app needs an account so you can open your tracker in any browser. When you sign up we store your email address and the situation you enter on our servers, including the name you choose to add, which appears on the You and Passport tabs, so it is there when you sign in again. We use it only to run your account and show you your tracker. We do not sell it, we do not use it for advertising, and we share it only with the service providers below. You can edit or clear your entries at any time, and you can ask us to delete your account and its data.

Two things are deliberately not part of your account: the documents you attach and your practice history, including the run of days Today’s five keeps. Both stay in the browser you used, are never uploaded and do not follow you to another browser or computer. They are filed under the account you were signed in with, so you only ever see your own.

What we collect

On the iPhone, nothing personal unless you choose to sign in, in which case we hold your email address and your subscription status. On Android, nothing at all, because there is no account to hold anything in. The one exception on both phones is the optional Belong Nordic Speak add-on, described below, and only if you add it. Neither phone app carries analytics, advertising or tracking, and we add no software development kit that collects data about you. The stores are the exception, because they have to be: Apple’s in-app purchase and review components on the iPhone, and Google Play’s billing and review libraries on Android, which sell the subscription and offer you the store’s own review card, and which bring components of Apple’s and Google’s own along with them. Those are governed by Apple’s and Google’s privacy policies, and nothing they do reaches us in a form that identifies you. For the web app we hold only what the account needs: your email address, the tracker information you enter and the billing status of your subscription. We do not build an advertising profile of you.

The tracker information is what you type into the app: the name you choose to add, when your residence began, whether you hold permanent residence, your language and test progress, the trips you log or plan ahead and any fines or penalties you record so the app can work out whether they delay you. You choose what to enter, and you can change or clear any of it at any time.

The Android app asks you for two permissions, each only when you use what needs it. The first is notifications. On Android 13 and later that is a question you are asked, and can refuse or withdraw at any time; on older versions notifications start on and you turn them off in Settings. Either way the app checks that setting again immediately before it posts anything. The second is your calendar, asked only if you tap Find trips in your calendar, and described under Trips from your calendar below. There is no permission for your location, your contacts, your camera or your files, because the app has no use for any of them. Adding a document or a photo goes through Android’s own picker, which hands the app the one file you chose and nothing else. The rest of what the Play page lists is plumbing granted at install, and none of it reads anything about you: internet access for the news feed and for Google Play, network state so the background news check can wait until you have a connection, Google Play billing for the subscription, the permissions Android’s work scheduler needs so a reminder survives a reboot and finishes once it starts, and one private permission the app defines so that only it can receive its own broadcasts.

Signing in on the web sets one cookie, belong_session. It carries a signed token with your email address so the site knows you are signed in, it lasts up to 60 days, and scripts cannot read it. It exists to run your account and nothing else: we set no analytics, advertising or tracking cookies. Signing out deletes it.

A second person on your phone

On the iPhone and on Android you can add a second adult, such as a partner, on the You tab, and the app keeps a count for them alongside yours. What you enter about them, their name, their answers to the setup questions, the trips logged for them and any filing you record for them, is stored only on your device, in the same place as your own entries, and is never sent to us or to anyone else. Practice, documents, reminders and, on the iPhone, the copy the widgets read hold your own entries only and never theirs. Removing a person deletes their entries from the device; deleting the app deletes them with everything else. The web app has no second person.

News

The News tab shows The Local’s stories for the country you are tracking, from their public tag feeds at feeds.thelocal.com: the immigration tag and that country’s own citizenship tag. The three versions fetch them differently, and the difference is worth stating.

On the iPhone and on Android, the app requests the feeds directly. The stories are already scoped to citizenship and immigration by The Local’s own tags, and your device trims them to recent ones; no server of ours sees any of it. The request itself is an ordinary web request, so The Local’s servers see standard technical information such as your IP address, exactly as they would if you opened their site yourself. Besides this, either phone app makes only these requests: the App Store or Google Play check on your subscription, the store’s own request to show you a review card and any page you choose to open, which loads from whoever publishes it, in the in-app browser or in your phone’s own browser. On the iPhone, signing in adds the requests to our account service described above, and only if you choose to sign in. On both phones, Belong Nordic Speak adds the requests a call needs, described under Belong Nordic Speak, and only if you add it.

On the web, your browser asks our server and our server fetches the feeds, so The Local sees our server and not you. The only thing sent is which country you are tracking.

In all three versions we add no identifier to the request, we do not tell The Local who you are, and we receive nothing back about you.

Feeds exist for Denmark, Sweden and Norway. There is no Finland edition, so tracking Finland fetches nothing at all.

If you turn on news notifications, the check for new stories runs in the background and makes the same request: on the iPhone when iOS decides to run it, and on Android roughly every two hours through Android’s own scheduler, which waits for a connection and picks its own moment. The preference is stored on your device only. Tapping a story opens it on The Local’s own site, where their privacy policy applies and some articles may require a subscription.

Practice

The citizenship test questions in the Practice tab come with the app rather than from a server, and on both phone apps practising works fully offline. In all three versions your answers, your scores, your mistakes deck, the schedule that decides when a question comes back and your run of days are written to your own device and never sent anywhere; on the web they stay in your browser and are not part of your account. Opening an official preparation page loads it from the authority’s own site: in an in-app browser on the iPhone and on Android, and as a normal link in your browser on the web.

Stage one and your permit

For most people the Path tab has two stages, Permanent residence and Citizenship. On the iPhone and on Android, what you record on Stage one is stored only on your device, in the same place as the rest of your entries: the requirements you mark with I meet this, whether you have told the app you hold permanent residence, the day your residence permit ends if you add it and your answer if you tell the app you have no permit that ends. None of it is sent to us or to anyone else, and what you record there for a second person is stored the same way, with their other entries. The requirements, fees and renewal rules shown there ship inside the app, and showing them makes no network request. Opening an official source loads it from the authority’s own site and carries nothing you entered.

The dates worked out from your permit, such as when to apply to renew it, appear in What’s coming. They reach you through the same alerts as the other dates, only if you have turned those alerts on and only for your own permit, never for a second person’s. Like any notification they can appear on your lock screen, and they say that they are about renewing your residence permit. Most of them also give the day it ends.

After you apply

If you tell the app that you have applied, the day you filed, the reference from the authority’s receipt if you choose to enter it, and the updates you log from the authority’s letters, each with its date, its kind and any note you write, are stored only on your device. None of it is sent to us, and the reference in particular is never transmitted anywhere: the app cannot look your case up and does not try. The link to the authority’s own page opens as an ordinary web request, exactly like any other link in the app, and carries nothing you entered. Removing the filing deletes all of it from the device.

Trips from your calendar

On the iPhone and on Android, the Standing screen can look through your calendar for flights, holidays and stays away and offer each one as a trip for you to check and save. It asks for access only when you tap Find trips in your calendar: on the iPhone that is iOS’s own question for full calendar access, because iOS offers no way to read a calendar with less, and on Android it is the calendar permission. You can refuse, and you can withdraw it at any time in Settings.

Your calendar is read on your phone and only while that screen is looking. The app never changes or adds anything in your calendar, keeps no copy of it and sends nothing from it anywhere: not to us, not to anyone. Nothing becomes a trip unless you open it and tap Save, and a saved trip is stored like any other trip you log. The web app has no calendar feature.

The application pack

On the iPhone and on Android, the Path tab can make one PDF of what you have entered: your situation, the requirements on your route, your trips, your record, your application and the names of the documents you hold. It is made on your phone and kept only until you close the sheet. It goes only where you send it from the share sheet, and that app handles it under its own terms. The documents themselves are not inside it, only their names.

Listen

Practice questions can be read aloud by your phone’s own text to speech. The question is spoken on the device and nothing is sent to us. On Android the voice belongs to the text to speech service you have chosen in Android Settings, which may need its voice for the language installed first.

Shortcuts and Siri

On the iPhone you can ask Siri, or run a shortcut, for your days abroad, to log a trip or to start Today’s five. The answer is worked out inside the app on your phone from what is already there, and the app sends nothing anywhere. Siri itself is Apple’s and handles your voice under Apple’s terms. On both phones you can also touch and hold the app icon for the same actions, which simply open the app.

Fees, language exams and the small i

The language path under the language requirement, the fees in What it costs and the short explanations behind the small i beside each feature ship inside the app and make no network request. Which explanations you have opened is a setting stored on your device only. A source link opens the authority’s own page in your browser.

Exam sittings and guides

The exam sittings and registration deadlines shown on the Practice tab, and the guides in the Guides segment, ship inside the app. Showing them makes no network request, and the day each was read from the authority is printed on the card or the guide itself. Which sitting you pick, and which guides you have opened, are settings stored on your device only.

Passport

The facts on the Passport tab (validity, fee, where to apply, dual citizenship and the notes on each passport’s design) ship with the app and are shown without any network request. If you add your name on the You tab, the Passport tab displays it; it is the same name described above and nothing else is collected. On the iPhone and on Android you can also add a photo of yourself, shown on the You and Passport tabs: it is scaled down and stored only on your device, it is never uploaded or synced, and removing it, or deleting the app, deletes it. On Android it is also kept out of your phone’s cloud backup and out of a transfer to a new phone. The web app has no photo. Opening an issuing authority’s page loads it from the authority’s own site: in an in-app browser on the phone apps, and as a normal link in your browser on the web.

Documents you attach

On the Path tab you can attach a document to a requirement (a language certificate, a residence permit, a payslip, a test result) with a name and, if you want, an expiry date. Wherever you attach it, the file stays on the device you attached it on, and we never receive it.

On the iPhone, the files are written inside the app’s own storage with iOS file protection switched on, so the system keeps them encrypted and unreadable while your iPhone is locked.

On Android, they are written inside the app’s own private storage, which Android keeps encrypted under your device credential and unreadable until the phone has been unlocked once after a restart. No other app can read them.

On both phones, removing a document deletes the file, and deleting the app deletes all of them. On the iPhone, a file you pick is held in memory until you save it, and nothing is written if you do not. On Android, a file you pick and then do not save waits in the app’s own temporary storage, private in the same way and out of any backup. It is deleted the next time you open a document sheet, once it is more than a day old, and Android is free to reclaim it sooner when the phone runs short of space.

On the web, the files are stored by your browser on your own computer, in the storage it keeps for this site, and each one is filed under the account that added it. You only ever see your own. Removing a document deletes it, clearing this site’s data in your browser deletes all of them, and the Path tab has a control that removes them all at once. Because they never leave that browser, they do not appear in another browser or on another device, and we keep no copy anywhere else.

A computer can be shared, so signing in with a different account on the same browser clears what the previous account left there, documents, tracker and practice alike, rather than leaving one person’s papers on a machine they have walked away from. If you share a computer with someone who also uses Belong Nordic, each of you signing in will clear the other’s, so keep your own copies.

In all three versions they are never uploaded, we never see them, and they are not part of anything a Belong Nordic account syncs.

One thing worth knowing about both phone apps: these files are deliberately kept off any backup. If you back your iPhone up to iCloud or to a computer, your documents are not part of that backup. On Android they are excluded from cloud backup and from device transfer, so they cannot be copied onto a new phone during its setup either. The name and the expiry date you give a document are kept alongside it, in the same place, and stay out of the backup with it. Files up to 15 MB are accepted; anything larger is refused with a plain error rather than trimmed. If you set an expiry date and turn milestone alerts on, the name you gave the document is used as the title of that alert, and like any notification it can appear on your lock screen. On Android that alert is handed to the system’s own scheduler until it fires, so the name waits outside the vault and can travel with a transfer to a new phone. That is worth knowing when you name something sensitive. Only that name ever leaves the vault; the file itself never does. The cost is worth stating plainly: restoring a new phone from a backup, or setting one up from your old one, will not bring your documents back, and you attach them again. That is the version of this we can stand behind. Papers this sensitive should not travel further than the phone you chose to put them on. Keep your own copies of anything you cannot easily get again, and attach only what you actually need.

Reminders and alerts

The daily practice reminder, the news alerts, the alerts for dates in What’s coming and the weekly Sunday standing are local notifications. Your phone schedules them from information already on it, so they use no server of ours, no push service and no device token. Nothing about them reaches us: not that you switched them on, not when one fires, not whether you opened it. The settings are stored on your device.

On Android, the four kinds sit in four separate notification channels, so you can mute any one of them in Android Settings without losing the others, and nothing is posted at all unless Android’s notification permission is granted. Every scheduler checks that permission again immediately before posting, so turning notifications off in Settings takes effect whether or not the app hears about it.

What a notification says is worth knowing, because like any notification it can appear on your lock screen. A Daily 5 reminder quotes one of the questions in that day’s round; the reminders are scheduled up to two weeks ahead from what is on your phone, and a day’s reminder is withdrawn once that day’s round is done. An alert for a date in What’s coming carries the title of that date, which for a trip includes the destination you named, so name a trip with that in mind. A news alert carries the story’s headline. An alert for an exam sitting names the test and who runs it, and one for a registration deadline gives the date of the sitting it is for. An alert for a filing carries the authority’s deadline where the law writes one, and an alert for a reply window you logged carries the date of the letter and the note you wrote when you logged it, so write that note with the lock screen in mind. The Sunday standing, if you turn it on, carries three numbers: your residence time so far, the days abroad you logged this year and the practice questions you hold, so it says on your lock screen roughly where you are in the process. Tapping any of them opens the screen it names inside the app, and nothing about the tap leaves your phone.

News notifications are the exception to the no-network rule, because checking for new stories needs the request described above.

The web app has no reminders or alerts at all. What’s coming is a list you look at when you open it, and nothing is sent to you.

Recommending the app

The Recommend Belong Nordic button on the You tab opens your phone’s own share sheet with a short message and a link to belongnordic.app. You choose whether to send it, to whom and with which app, and that app handles it under its own terms. The link carries no code or identifier and the app sends us nothing when you share it. We never learn whether or to whom anything was sent. Nothing is tracked, counted or rewarded. If your friend opens the link, belongnordic.app works as described under Service providers below.

Help, coming soon

On the iPhone and on Android, the Learn tab shows a card under Today’s five asking whether you would like help with the language from a few teachers and schools we trust. Your answer to the card is kept only on your device, to decide how the card shows. The app sends nothing. If you tap Yes, tell me, your phone’s browser opens belongnordic.app/help, and the link tells that page only which country you track and whether you came from the iPhone or the Android app.

On that page you can leave your email address and say what would help you most. If you do, we store your email, your answer, the country, the app you came from and the day on Cloudflare, which hosts belongnordic.app. We keep no IP address, no cookie and no device identifier with it. We send you one email straight away to confirm you are on the list, through Resend, the email provider that also sends the web app’s sign-in emails, with a copy to our own inbox at hello@belongeurope.com. After that we use your email only to tell you when partners are available. We never share it with a partner or anyone else. We delete the list once we have written to you about the partners, or sooner if you ask us at hello@belongeurope.com.

Belong Nordic Speak

Belong Nordic Speak is an optional add-on for the iPhone and Android apps: a monthly subscription of its own that lets you practise speaking the language out loud with Saga, an AI speaking partner, in a voice call. It is the one part of the phone apps that sends anything to a server of ours, and only for people who add it and call Saga. If you never add Speak, everything above about the phone apps keeping your data on your device stays exactly as it is. The web app has no Speak.

The microphone. The first time you call Saga, the app asks for access to your microphone: on the iPhone that is iOS’s own question, and on Android it is the microphone permission. You can refuse, and you can withdraw it at any time in Settings; Speak simply cannot hear you without it. The microphone is used only while a call is open. Ending the call, swiping Saga back to the water or leaving the app ends the call and stops the microphone. On Android the app also adjusts the phone’s audio settings during a call, so your voice and Saga’s are routed like a phone call. It puts them back afterwards.

Before each call the app asks our Speak server, speak.belongnordic.app, for a single-use pass for that one call. With that request it sends the store’s own identifier for your Speak purchase (Apple’s transaction number on the iPhone, Google Play’s purchase token on Android), which country, language, level and kind of call you chose, the topic if you typed one and your phone’s time zone, so your daily minutes start again at your own midnight. Our server asks Apple or Google whether that purchase is active, and that is all it learns from them. It never receives your name, your email address or your payment details.

During the call your phone connects directly to Google’s Gemini API, which listens to what you say, writes down what you and Saga say for the subtitles and speaks Saga’s replies. Your voice goes from your phone to Google and does not pass through any server of ours; we never receive or store any audio. Along with the call go the instructions Saga follows: your level, the kind of call, your topic and the short note Saga keeps between calls, described below. Google provides this as a paid service. Under its Gemini API terms Google does not use what is sent to improve its products. It logs it for a limited period, only to detect and prevent misuse, and it may process it in any country where Google or its agents have facilities. Google’s own privacy policy and terms govern that processing.

After the call the app sends the written transcript of the call, the words and not the audio, to our server, which passes it to Anthropic’s Claude API to write your debrief: what went well, what to fix, your new words and one idea for next time. Claude also writes the short note Saga keeps for your next call. Our server does not store the transcript. Anthropic deletes what it receives through its API within 30 days, or keeps it for up to two years only if it is flagged for breaking Anthropic’s usage policy, and its commercial terms do not allow it to train its models on it. Anthropic is based in the United States, so this is a transfer outside the European Economic Area, made under the safeguards in Anthropic’s data processing terms. If your phone is offline when a call ends, the transcript waits on your phone until Speak next reaches our server, is sent then and is deleted from the phone.

What our server keeps is linked only to the store’s identifier for your Speak subscription (Apple’s original transaction number, or a one-way hash of Google Play’s purchase token), never to your name or email: how many seconds you talked each day; for each call, when it started and ended, the country, language, level and kind of call, the minutes counted and how much processing it used; and Saga’s note. The note is at most 500 characters and holds the topics you talked about, how comfortable you seemed and the one or two mistakes that keep coming back. Claude is instructed to leave out names, contact details and health, religion, politics or other sensitive personal details. We cannot promise it never slips, so please do not share such details in a call. The server runs on Cloudflare and its database is kept in the European Union. We delete call records and daily counts a year after the call, and everything we hold about a subscription, the note included, once a year has passed without a call.

On your phone the app keeps your debriefs, the words saved from them and your choices of level, language, kind of call and topic, in its own storage with your other entries. They are not sent to us. Deleting the app deletes them.

Forget what Saga remembers, on the You tab, deletes Saga’s note and your call records on our server, and the call history and saved words on your phone. The daily counts stay until they are a year old, because they hold only a day and a number of seconds and are what keeps the daily allowance fair. Report a reply, on the call screen, opens your own email app with a message to us that you write and choose to send; nothing is sent unless you send it.

Purchases of Speak are handled by Apple or Google exactly as described under Subscriptions and payments, and we never see your payment details. For what our server holds you have the rights described under Your data and your rights. Because we do not know your name, the quickest way to delete it is Forget what Saga remembers in the app; you can also write to us at hello@belongeurope.com. Speak is for adults only.

Subscriptions and payments

Belong Nordic Pro is an optional auto-renewable yearly subscription with a 7-day free trial, priced in your own currency and always shown to you in full before you buy.

On the iPhone, purchases are handled by Apple through your Apple Account and we never see your payment details. On Android, they are handled by Google through your Google Account on Google Play, and again we never see your payment details. The Android app asks Google Play what this Google Account holds and Play answers on the phone; that answer is what unlocks the app, and no server of ours is told about it. On the web, payments are handled by Stripe: you enter your card details directly with them, we never see or store your full card number, and Stripe tells us only what we need to manage the subscription, such as whether it is active and the last few digits of your card. Apple’s, Google’s and Stripe’s own privacy policies govern those transactions.

One subscription unlocks the iPhone app and the web app. To link them, the iPhone app sends us Apple’s signed confirmation of your subscription: it says the subscription is genuine, active and when it expires. It contains no payment details. Android stands on its own, because it has no account: it is unlocked by an active Google Play purchase. That is a limitation worth knowing before you buy, and it is stated in the terms as well.

Service providers

To run the web app we use a small number of providers who process data on our behalf: a hosting and database provider that stores your account, an email provider that sends your sign-in codes and links, and Stripe for payments. They act under agreements requiring them to protect your data and use it only to provide their service to us. The web app uses no third-party analytics or advertising services.

Our public pages are a different matter and this paragraph is about them, not about the apps. belongnordic.app and its practice pages carry Google Ads conversion measurement, so we can tell whether an advert led to a tap on the App Store badge or the web app button. It runs with Google’s consent mode set to denied for every purpose: it sets no cookies, stores nothing in your browser and sends Google no identifier, only a cookieless signal that a page was visited and a badge was tapped, from which Google estimates conversions. That is why those pages show no cookie banner. Cloudflare, which serves all our pages including this one, records anonymous page-load statistics for us without cookies. The apps, the web app and the legal pages carry no advertising tag.

The phone apps use the stores they are sold in: Apple’s in-app purchase and review services on the iPhone, and Google Play’s billing and in-app review services on Android. Those ship as Apple’s and Google’s own libraries inside the app and talk to the App Store or Google Play on your phone rather than to anything we run. They act for Apple and Google under their own privacy policies, and neither passes us anything that identifies you. Play’s review card is a good example: Play decides on its own whether to show it and tells the app nothing about what happened, so we learn nothing from it either.

Belong Nordic Speak, if you add it, uses three more: Cloudflare, which runs our Speak server and keeps its database in the European Union, Google’s Gemini API for the call and Anthropic’s Claude API for the debrief. What each one receives, and for how long, is set out under Belong Nordic Speak.

Where your data is stored, and for how long

Web app data is stored on servers in the European Union or in countries offering an equivalent level of protection. Payment data handled by Stripe may be processed outside the European Economic Area under the safeguards Stripe maintains. We keep your account data for as long as your account is open; if you delete your account we remove your tracker data and keep only the limited billing records the law requires. If you only use the iPhone app and never sign in, or you use the Android app, where there is nothing to sign in to, we hold nothing about you, so there is nothing to retain. The one exception is Belong Nordic Speak, if you add it: what its server keeps, and for how long, is set out under Belong Nordic Speak.

Deleting your account removes what we hold. It does not touch what is on your phone or in your browser, because we cannot reach it: remove your documents in the app, or clear this site’s data in your browser, if you want those gone too.

Widgets

On the iPhone you can add Belong Nordic widgets to your home screen and Lock Screen: where you stand, days abroad, Today’s five and the newest story from The Local. The Android app has no widgets. A widget shows what the app already holds, run through the same rules, and nothing else. The app keeps a copy of your own entries, which the widgets read, in a container Apple sets aside on your device for the app and its widgets, so a widget can read it without the app running. That copy never leaves your phone, and no server of ours is involved in drawing a widget. Whatever a widget shows is visible to anyone who can see your home screen or Lock Screen, so remove the widget if that matters to you. The widgets show figures only while your subscription is active and show nothing until a country is set up, and the news widget makes no request of its own: it shows the story the app last fetched.

Diagnostics

If you have turned on Apple’s optional analytics sharing in iOS Settings, Apple may send us crash and performance reports in a form that does not identify you. We use them only to find and fix problems. You can turn this off at any time in Settings → Privacy & Security → Analytics & Improvements.

Android works the same way. If you have turned on Google’s optional usage and diagnostics sharing, Google may show us crash and performance reports in the Play Console, again in a form that does not identify you, and again used only to find and fix problems. You can turn it off in your phone’s Settings, under Google, in Usage & diagnostics. We add no crash reporting of our own to either app.

Your data and your rights

For the phone apps your tracker information stays on your device and never reaches us, so we hold no copy to export or erase, and you stay in full control through the app. The same is true of the documents you attach and your practice history in any version: they never reach us, so there is nothing on our side to export or erase, and removing them is done in the app. The one exception on the phone apps is Belong Nordic Speak, if you add it: what our server keeps for Speak is set out in that section, and you can delete it with Forget what Saga remembers in the app or by writing to us at hello@belongeurope.com. For any account you hold, on the web or signed in on the iPhone, you have the rights the GDPR gives you: access, rectification, erasure, restriction, objection and a copy in a portable form. To delete your account, use Delete account on the You tab of the iPhone app while signed in, or contact us. To exercise any of the other rights, contact us and we will respond. You also have the right to complain to your local data protection authority, or, since we are established in Denmark, to the Danish Datatilsynet at datatilsynet.dk.

Children

Belong Nordic is made for adults navigating their own immigration and nationality path. It is not directed at children and we do not knowingly collect anything from them.

Changes to this policy

If we change how the app handles data, we will update this page and its effective date, and we will say so in the app when the change is material.

Contact

Questions about this policy: hello@belongeurope.com.