Privacy Policy

Version 1.0. Effective from 29 August 2026.

Relorca is a reference assistant for people moving to another country. This Policy explains what data the Service processes, why, how long it is kept and how you can control it.

The Service is operated by an individual, Mikhail Gorbunov ("We"). You can reach us at support@relorca.app.

"Service" means the website relorca.app and the Relorca mobile application. "You" means the person using them.

1. The short version

We built the Service to know as little about you as possible. Three facts that matter more than the rest of this text:

• No account is required. Country matching, visa paths and your relocation plan all work without registration. Until you create an account, We know nothing about you beyond the technical details of your requests.
• We never ask for your name, email, phone number or address. They appear in no form in the Service and in no table of our databases.
• The most sensitive answers stay on your device. The answers the Service uses to match countries — income, profession, family status, ancestry and roots, how urgently you want to leave — are processed locally, in the app or in your browser. They are never sent to our server and never stored in our databases.

2. What data We process

Data you create by using the Service:

• Your citizenship, your relocation goal and the countries you follow. These are matching attributes, not documents: We do not ask for a passport number and do not verify citizenship.
• Your relocation plan: the visa path you selected and the steps you have marked as done.
• Your interface language.
• If you created an account in order to sign in from another device: a nickname you choose yourself (it is not public) and a password — the password is stored only as an irreversible hash, We cannot see it and cannot recover it.

Device data:

• A device key — an anonymous identifier the app generates itself. Only its hash is stored in our database, and it is not linked to your identity.
• A push notification token, if you allowed notifications.

Technical data collected automatically:

• IP address, request time, device and browser type, pages requested — in server logs. We need them to diagnose failures and to protect the Service from abuse.

Analytics data:

• An anonymous visit identifier, the screens viewed and the actions taken on them, an approximate location (country, sometimes city) derived from the IP address by the analytics provider, and the technical context the analytics SDK attaches to each event: device type and model, operating system and browser version, screen size, language. This data does not let Us identify an individual.

3. What We do not collect

This is not a promise about the future — it describes how the Service works today:

• your first, last or middle name, or date of birth;
• an email address or phone number for use in the app;
• a postal address;
• passports or other identity documents;
• payment details — the Service accepts no payments at all;
• biometrics or special categories of data.

Your answers about income, profession, family status, ancestry and timing never leave your device. This has a practical drawback We would rather state plainly: if you reinstall the app or sign in from another device, you will have to enter those answers again. We cannot transfer them, because We do not have them.

4. Why We process data

• To make the Service work: match countries and visa paths, show your plan and completed steps, let you sign in from another device.
• To send you notifications about changes in the countries you follow, if you allowed them.
• To understand which sections people use and improve the Service — using aggregated statistics not tied to an individual.
• To protect the Service from abuse and to recover it after failures.
• To comply with the law where We are required to.

5. Cookies and similar technologies

The Service uses a persistent cookie, relorca_refresh, that is necessary for signing in: it survives closing the browser, which is the whole point — that is how We remember you signed in and do not ask for your nickname and password again. You cannot turn it off and use an account at the same time.

Analytics stores an anonymous visit identifier in your browser — in a cookie and in local storage. It exists to tell one visit from another and is not linked to your identity. That cookie is not strictly necessary, so it is not set until you have agreed: We ask on your first visit, and no answer counts as a refusal. You can change your mind at any time — on the Cookies Policy page and in the web client's settings.

There is no cross-site tracking, no ad networks, no advertising trackers and no Google Analytics in the Service.

The full list of cookies — names, lifetimes and purpose — is in the Cookies Policy.

6. Who We share data with

• Infrastructure providers who host the Service, store the database and help Us monitor errors. They act on our instructions and may not use the data for their own purposes.
• Analytics providers: Vercel Analytics and PostHog — in the anonymous mode described above.
• Public authorities — where the law requires it and the request follows the proper procedure.

We do not sell your data, do not pass it to ad networks and do not pass it to the companies or specialists whose pages you open from the Service: following an external link is your action, and We tell them nothing about it.

7. Where data is processed

The servers of the Service and of its contractors may be located outside the country where you live. This means your data may be transferred to and stored in other jurisdictions whose data protection rules differ. We share data only with contractors who protect it to an acceptable standard, and only to the extent needed to run the Service.

8. How long We keep data

Longer retention happens only where the law expressly requires it or where it is necessary to defend a legal claim. Backups are overwritten on a schedule: after deletion, data may remain in them for a while, but it is not restored into service.

9. Your rights

• Delete your account and data. The delete button is in your profile settings, in the app and on the website. Deletion starts immediately; for 30 days signing in with your nickname and password restores the account, after which the data is erased physically and cannot be recovered.
• Get a copy of your data and correct it — through profile settings or by writing to support@relorca.app.
• Opt out of notifications — in your device settings.
• Ask a question or complain — support@relorca.app.

If you never created an account, deletion simply means clearing the app's data on your device: there is nothing to delete on our side.

10. Children

The Service is not intended for anyone under 16, and We do not knowingly process their data. If you are a parent or guardian and believe a child has given Us any information, write to support@relorca.app and We will delete it.

11. Security

Data is transmitted only over a secure connection (TLS). Passwords are stored as irreversible hashes. Access to the database is restricted and exports of user data are prohibited by our internal rules. That said, no method of transmitting or storing data online is completely secure, and We cannot promise absolute protection.

12. Links to other websites

The Service contains links to websites We do not own. Once you follow such a link, that site's policy applies to you. We do not control their content and are not responsible for how they handle your data.

13. Changes to this Policy

We may update this Policy. A new version is published on this page with a new date; We will announce material changes through an in-app notification or a prominent notice on the website before they take effect.

14. How to contact Us

For any question about this Policy: support@relorca.app.