Privacy Policy

1. Who is responsible

The controller for the processing described here is:

For anything about your data, write to the email address above.

2. In short

• We do not sell your data and do not use it for advertising. The app has no ads and no cross-app tracking.
• Your trips, visas and plans are stored on your phone and, so that they survive a new phone and reach your other devices, in your account in the cloud.
• Documents you add (passports, tickets, bookings) stay on your phone, unless you add them to a trip you share with others.
• You can delete your account and all its data in the app at any time: Settings, Delete Account.

3. Your account

To use Nomadu you create an account with your email address and a password, or sign in with Apple or Google. We receive your email address and, from Apple or Google, a user identifier; with Sign in with Apple you can choose to hide your real address.

In the app you also give a name and pick a cartoon face. Both are shown to the people you share a trip with. The face is drawn from a random code, not from a photo of you. We also store your nationality and whether you have a fixed residence, because the visa and tax calculations depend on them.

Accounts are run on Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions), provided by Google LLC.

4. Location

With your permission, Nomadu reads your phone's location, also in the background, to notice when you arrive in a new city or country and record the stay. You decide in the iOS settings whether it may do so always, only while you use the app, or never. Without it, you can still add trips by hand.

From a location the app only keeps the result: the city, the country and the dates of your stay, with the city's coordinates for the map. To find the city, the coordinates of a location fix are sent to Apple's geocoding service built into iOS and, if that gives no answer, to OpenStreetMap's Nominatim service (OpenStreetMap Foundation, United Kingdom). A raw history of every position is not kept.

5. Trips, visas, plans and documents

Your stays, the visas you enter, the trips you plan (stops, dates, travellers, accommodation options and bookings, notes) are stored on your phone and synced to your account in Cloud Firestore, so they are there on a new phone and on your other devices.

Documents you add to a trip, such as passport scans, tickets or booking confirmations, are stored only on your phone. The exception is a trip you share: see the next section.

6. Sharing a trip

You can invite others to a trip you planned. Everyone who joins sees the trip as you do: its stops and dates, the travellers, the accommodation options and bookings, including booking details and notes. Your name and face are shown to them, and theirs to you.

A document you add to a shared trip for everyone, or for one particular person, is uploaded to Cloud Storage so it reaches them. Only the people it is meant for, and you as the owner, can download it. When a document is deleted, it is removed from the cloud and from the other phones; when someone leaves the trip, the documents of that trip are removed from their phone.

An invite link opens a public page with the trip's title, its stops and dates, and the owner's name and face, so the invited person knows what they are joining. Anyone who has the link can see that page. You can stop sharing at any time, which ends the link.

7. AI features

Some features use Google's Gemini models, called through our own server rather than from your phone:

• Import from screenshots: the images you choose (for example of a booking or of Google Maps timeline) are sent to extract the stays in them.
• City tips: the name of a city and its country are sent.
• Suggestions for the next stop: the stops of the trip you are planning are sent.

Only what the feature needs is sent, together with no account details. You use these features only when you tap them. The data is processed by Google LLC under the Gemini API terms.

8. Connecting an AI agent

You can create a key in the app that lets an AI agent of your choice (for example an assistant you run yourself) read and change your trips, visas and plans through our interface. The agent receives only what it asks for with that key, and only while the key exists; you can revoke it in the app at any time. What the agent then does with the data is up to the provider of that agent, not us.

9. Subscriptions

Payments are handled by Apple through the App Store; we never see your payment details. To know whether your subscription is active on all your devices, we use RevenueCat (RevenueCat, Inc., USA), which receives your account's user identifier and the purchase information from the App Store.

10. Crash reports and usage statistics

If the app crashes or runs into an error, a report goes to Sentry (Functional Software, Inc.), hosted in its EU region in Germany. It contains technical details: the error, the device model, the iOS and app version, and your account's user identifier, so a report can be matched with a support request. It does not contain your email address, your trips or your location.

To see which parts of the app are used and where it is hard to use, the app sends usage statistics to PostHog (PostHog Inc.), hosted in its EU region in Frankfurt, Germany. They record which screens are opened and which actions are taken, such as finishing a step of the setup, adding a trip or a visa, or starting a subscription, together with your account's user identifier, a random identifier of the app installation and technical details such as the device model and the iOS and app version. They do not contain your email address, your name, the places you travel to, your dates, your documents or your location. There are no screen recordings. The statistics are not used for advertising and not combined with data from other apps.

11. Other services

• Faces: the cartoon faces are drawn by the DiceBear service (Florian Körner, Germany), which receives the random code of a face. Like any web request, this includes your IP address.
• App updates: small updates to the app are delivered by Expo (650 Industries, Inc., USA), which receives technical data such as the app version.
• Notifications: reminders about visas and tax days are created on your phone; no push service is involved.

12. Legal bases

If the EU or UK General Data Protection Regulation applies to you, we rely on:

• Article 6(1)(b), performing our contract with you, for your account, your trips and plans, syncing, sharing and the features you use;
• Article 6(1)(a), your consent, for reading your location and for notifications, given through the iOS permission and revocable there at any time;
• Article 6(1)(f), our legitimate interest in a working, secure app, for crash reports and for protecting the service against abuse, and our legitimate interest in improving the app, for usage statistics.

Documents you add may contain special categories of data (for example a passport photo). They are processed only because you add them and only in the way described above.

13. Where data is stored

Your account data is stored with Google Firebase in the United States. Google, RevenueCat and Expo are companies based in the United States. Transfers are covered by the EU-U.S. Data Privacy Framework where the company is certified under it, and otherwise by the European Commission's standard contractual clauses.

14. How long data is kept

Your data is kept as long as you have an account. When you delete your account in the app, your account, your trips, visas, plans, shared documents and your part in trips shared with you are deleted from our systems. Entries you delete in the app are deleted from the cloud as well; a small marker that the entry was deleted is kept so your other devices learn about it. Crash reports are deleted by Sentry at the end of its retention period, at most 90 days. Usage statistics are kept for at most 12 months.

15. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time. To use these rights, write to the address in section 1.

You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

16. Children

Nomadu is not directed at children under 16, and we do not knowingly collect their data.

17. Changes

If the app starts handling data in a new way, this page is updated first, and the date at the top changes. For significant changes we will tell you in the app.