Privacy Policy

183 Days ("we", "our", or "the app") is a web application that helps individuals track their days spent in Colombia to monitor compliance with Colombia's 183-day tax residency rule. This Privacy Policy explains how we collect, use, and protect your personal information.

Account Information
When you create an account, we collect your email address and a securely hashed password, managed through Supabase, our authentication provider.

Travel Data
We store the travel dates you enter or confirm — specifically arrival and departure dates for stays in Colombia, along with optional notes. We do not collect passport information, location data, or any other personal travel documents.

Gmail Data (Optional)
If you choose to connect your Gmail account, we request read-only access solely to search for Colombia-related booking confirmation emails (flights, hotels, short-term rentals). We use this access to extract travel dates only.

We do not:

• Store the content of your emails
• Read emails unrelated to Colombia travel bookings
• Share your email content with any third party
• Use your email data for advertising or profiling

We only store the extracted travel dates and booking source (e.g. "Airbnb Medellín") that you explicitly confirm before they are added to your tracker.

We use your information solely to:

• Provide and operate the 183 Days tracking service
• Calculate your rolling 365-day Colombia day count
• Display your stay history and projected counts
• Send account-related emails (e.g. email confirmation on signup)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

183 Days uses the Gmail API to help you automatically import Colombia travel dates from booking confirmation emails. Our use of Gmail data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request read-only access to your Gmail
• We search only for emails related to Colombia travel bookings
• We extract only travel dates from matching emails
• We never store raw email content on our servers
• You must review and confirm all extracted trips before they are saved
• You can disconnect Gmail access at any time by contacting us

Your Gmail OAuth tokens are stored securely and used only to perform searches on your behalf when you click "Scan Gmail."

Your data is stored securely using Supabase, hosted on AWS infrastructure. We use Row Level Security (RLS) to ensure each user can only access their own data. All data is transmitted over HTTPS.

We retain your travel data for as long as your account is active. You may delete individual stays at any time from the app, or delete your entire account by contacting us at admin@183days.co.

We use the following third-party services to operate 183 Days:

• Supabase — database and authentication
• Vercel — hosting and deployment
• Anthropic (Claude) — AI extraction of travel dates from email text
• Google Gmail API — optional inbox scanning

Each of these services has their own privacy policies and security practices.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Disconnect Gmail access at any time
• Export your travel data

To exercise any of these rights, contact us at admin@183days.co.

We use essential cookies only — specifically session cookies required to keep you logged in. We do not use tracking cookies or advertising cookies.

183 Days is not directed at children under the age of 13. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy, please contact us at:

183 Days
admin@183days.co
https://183days.co