HeadFirstServices LLC · Last updated: August 2026
HeadFirstServices LLC ("we", "us", or "our") operates the following mobile applications (collectively, "the Apps"):
This Privacy Policy applies to all of the above. Where practices differ between apps, that is noted explicitly. Each app uses its own separate database — your VisaStay, PackLite, ZoneLink, and CostSync accounts and data are not shared or linked between apps unless you explicitly connect them.
When you create an account you provide your email address and a password (stored as a salted hash — we never see it in plain text). A unique user ID is generated and associated with all your data. Each app maintains its own separate account, even if you use the same email address across apps.
You may optionally provide a home currency VisaStay CostSync, passport / nationality VisaStay, or locale, tax country, and preferred expense categories CostSync. This is used to personalise the app experience and is never sold or shared with advertisers.
Trip records you create include: destination country, city, start and end dates, passport used for entry, and optional free-text notes. This data is stored securely in your account and is not accessible to other users.
CostSync organizes your data around Trips: name, countries, cities, dates, purpose, and default currency. Within a trip, expenses you log include: amount, currency, exchange rate, converted amount, category, merchant, date/time, optional notes, location, and payment method. If you use receipt scanning, the receipt image and any OCR-extracted fields (merchant, amount, date, tax) are stored in your account. Budgets and wallet balances you set are also stored. None of this is shared with other users unless you explicitly enable a shared trip and invite them.
Packing lists you create include: destination(s), travel dates, trip purpose, transport type, bag type, and individual packing items with their status (packed / used / not used / wish I'd brought). Post-trip feedback you submit is stored to power personalised future recommendations — within your account only.
ZoneLink lets you build "boards" comparing time zones across people or places. Data you create includes: board names, entities you add to a board (a label you choose — such as a person's name, team, or city — plus a time zone, optional work/sleep hours, and optional color/avatar), meeting slots (title, start time, duration, recurrence pattern, and optional per-meeting reminder setting), and manual itinerary segments (a date range and time zone, e.g. "in Lisbon until Jun 14").
If you add another person as an entity (for example, a colleague's name and time zone), you are providing us with limited information about that person on your behalf. Only the label and time zone you choose to enter are stored — we do not independently verify or enrich this information, and it is visible only to your account.
ZoneLink offers an optional, read-only Google Calendar import (Profile → Calendar Sync). If you connect it, we access your primary Google Calendar's event titles, start/end times, and all-day status via Google's Calendar API, and store them in your account so they can display as busy blocks alongside your ZoneLink boards. We request the narrowest available scope (calendar.readonly) and never create, edit, or delete anything in your Google Calendar. You can disconnect at any time from Profile — this revokes ZoneLink's access, stops future imports, and deletes any events already imported. Outlook/Microsoft calendar import is planned but not yet built; this policy will be updated before that ships.
If you enable push or email notifications, we store your configured alert rules (e.g. days before visa expiry, minutes before a meeting) and your device push token. ZoneLink additionally lets you set a default reminder lead time and override it per individual meeting. You can delete or disable these at any time from within the app.
If you enable biometric app lock, authentication is handled entirely by your device's operating system (Face ID / fingerprint). We never receive, transmit, or store any biometric data — the app only stores a local yes/no preference that biometric lock is enabled.
We do not collect analytics, crash reports, advertising identifiers, or behavioural tracking data. We do not use any third-party analytics SDK.
Subscription purchases are processed by RevenueCat and the underlying app store (Apple App Store or Google Play). We receive only a subscription status flag (active / expired). Your payment card details are never transmitted to or stored by us.
We do not use your data for advertising, profiling, or sale to third parties.
We use the following sub-processors. Each is bound by a Data Processing Agreement (DPA) where required. Each app's data is hosted in its own separate Supabase project — sub-processors below apply per app as tagged.
| Processor | Purpose | Data shared | Location |
|---|---|---|---|
| Supabase Inc. | Database, authentication, file storage All apps | All user account and app data (separate project per app) | US East (AWS) |
| Resend Inc. | Transactional email delivery VisaStay | Your email address and message content | United States |
| RevenueCat Inc. | Subscription management All apps | App store purchase receipts, subscription status | United States |
| Open-Meteo | Weather forecasts PackLite | Destination coordinates (no personal identifiers) | European Union |
| Google LLC | Sign-in, and optional read-only Calendar import ZoneLink | Account email (sign-in); calendar event titles/times (only if you connect Calendar Sync) | United States |
No other third parties receive your personal data. The Apps contain no advertising SDK or third-party tracking library. ZoneLink does not yet use an email delivery sub-processor — email reminders are planned but not active. CostSync does not yet use an email delivery sub-processor or a currency-rates data provider — both are planned but not active (no live backend yet). This policy will be updated with the relevant processor(s) before those features ship.
Your data is retained for as long as your account exists. If you delete your account, all personal data associated with that account is permanently deleted from our systems within 7 days, except where retention is required by applicable law.
Anonymised, non-identifiable aggregates may be retained indefinitely.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@headfirstservices.com. We will respond within 30 days.
If you are in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.
You can delete your account directly within each app (Profile → Delete Account). In ZoneLink and CostSync, this is fully self-service — your data and account are deleted immediately from within the app, no email required. In VisaStay and PackLite, this opens an email to privacy@headfirstservices.com; your account and all associated data will be permanently deleted within 7 days.
ZoneLink You can also delete individual boards, entities, meeting slots, and itinerary segments without deleting your account, from within the app. These are removed from your view and from the app immediately, but the underlying record is retained on our servers (not immediately purged) for sync reliability across your devices — it is never displayed or used once deleted. Deleting your full account remains the way to guarantee immediate, permanent removal of everything. Disconnecting Calendar Sync (Profile → Calendar Sync) is the exception: it immediately and permanently deletes all imported calendar events, with no retention period.
Deleting your account in one app does not affect accounts in our other apps — each app maintains a separate data scope.
You may also submit a deletion request via your app's dedicated page: VisaStay · PackLite · ZoneLink · CostSync
In the event of a personal data breach likely to result in risk to your rights and freedoms, we will:
Your data is stored on servers in the United States (Supabase / AWS US East). If you are in the European Economic Area, this constitutes a transfer of personal data outside the EEA. Such transfers are covered by Standard Contractual Clauses (SCCs) incorporated into our agreement with Supabase.
The Apps are not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@headfirstservices.com and we will delete it promptly.
We implement industry-standard security measures including encryption in transit (TLS 1.2+) and at rest, row-level security on all database tables so users can only access their own data, and bcrypt password hashing. No method of internet transmission is 100% secure, but we take reasonable precautions to protect your information.
When we update this policy, we will revise the "Last updated" date above. For material changes, we will notify you by email or in-app notice at least 14 days before the change takes effect. Continued use of the Apps after that date constitutes acceptance.
HeadFirstServices LLC — Washington State, USA
Email: privacy@headfirstservices.com
For GDPR enquiries or to exercise your data rights, use the same address. We aim to respond within 30 days.