Privacy Policy

Nomadii, LLC – Privacy Policy

Effective date: August 16, 2025
Company: Nomadii, LLC (a Delaware limited liability company)
Website: nomadii.co
Contact for privacy requests: contact@nomadii.co
Applications covered: the Nomadii iOS app and related websites, services, and features (the “Service”).

This Privacy Policy explains how Nomadii, LLC (“Nomadii,” “we,” “us,” or “our”) collects, uses, shares, and protects information about you when you use the Service. We collect data to provide and improve the Service, not for advertising. Where required by law, we obtain your consent.
    1.  Scope and Controller
Nomadii, LLC is the data controller for personal data processed in connection with the Service. This Policy applies worldwide to all users who access or use the Service from any location.
    2.  Information We Collect
    2.1 Information you provide directly
        • Account and sign-in: When you sign in with Apple or Google, we receive your name, email address, and identity provider information needed to authenticate you.
        • Onboarding responses (up to 10 questions): Your name, birthdate, social preferences, work habits, career goals, family situation, and other travel-related answers. We use these to determine your Nomad Archetype (one of ten types in the app) and personalize features.
        • Plans/itinerary inputs: Destination city, dates, trip type, work schedule/time zone preferences, preferred work environment, preferred neighborhood, weekend day-trip preference, and activity preferences.
        • Visited countries: Countries you mark as visited.
        • Community Application: Email, current location, name, Instagram handle, and any optional information you provide. Used to match users and send match communications.
        • Beta Application: Name, email, and responses about work setup, time-zone comfort window, how often you move, length of stays, and main needs as a nomad.
        • Communications: Support requests, feedback, or other messages you send to us.

    2.2 Information collected automatically
        • Device and usage data: App version, device type, operating system, language, crash logs, performance metrics, and basic analytics events (for example, feature usage).
        • Location data (optional): If you grant permission, we may collect precise and/or coarse location in the foreground and/or background (depending on device settings) to determine time zone, show nearby destinations, and enable nearby matching. You can control location in iOS Settings.

    2.3 Information from third parties
        • Identity providers (Apple, Google): Tokens and basic attributes needed for sign-in that you authorize.
        • Payment processors (Apple In-App Purchases via RevenueCat): Subscription status, purchase identifiers, and receipts. We do not receive your full payment card details.
        • LLM providers (e.g., OpenAI): Minimal necessary itinerary prompts and context we send to generate itineraries and related content.

We do not seek to collect special categories of personal data (such as health or religion). Please avoid submitting such information. If you choose to provide it, we process it only with your consent where required.
    3.  How We Use Your Information (and legal bases where applicable)
        • Provide and operate the Service (contract/legitimate interests): Account creation, authentication, presenting your Nomad Archetype, personalizing WorldView, BrowseDestinationView, DestinationDetailView, PlansView, TimelineView, and Community matching, generating itineraries and destination insights, and saving itineraries and responses to your account.
        • Improve and develop the Service (legitimate interests/consent where required): Analytics, diagnostics, crash reporting, A/B testing, and feature tuning.
        • Subscriptions and billing (contract/legal obligation): Managing purchases, free trials, and subscription status through Apple IAP/RevenueCat.
        • AI-assisted features (legitimate interests/consent where required): Sending itinerary prompts and relevant context to LLM providers (e.g., OpenAI) to generate itineraries, descriptive blurbs, and related content. We minimize personal data in prompts where feasible.
        • Community and matching (contract/legitimate interests/consent): Using your archetype, permitted location, and profile data to make matches and email you about them.
        • Security and compliance (legal obligation/legitimate interests): Fraud prevention, abuse detection, enforcing our Terms.
        • Communications (contract/legitimate interests/consent): Responding to support requests and sending important service notices.

        We do not use personal data for third-party advertising and we do not sell personal data.
    4.  AI and LLM Providers
We use OpenAI and may use other LLM providers to generate itineraries and related content. We share only the minimal context needed for outputs (for example, your destination, dates, and preference inputs). Provider processing is governed by their terms. We seek to apply provider settings that restrict secondary use where available.
AI disclaimer: Outputs may be inaccurate, incomplete, or outdated and are provided for informational purposes only—not travel, safety, immigration, medical, or financial advice. You should independently verify critical information.
    5.  Location Data
Scope: With your permission, we may collect precise and/or coarse location in the foreground and/or background.
Uses: Time-zone detection, nearby destination relevance, and optional community/nearby matching.
Control: Location sharing is optional and can be enabled/disabled in iOS Settings at any time. The app remains usable without location (some features may be limited).
    6.  Subscriptions (Apple)
Subscriptions auto-renew unless canceled in Apple ID settings at least 24 hours before the period ends. Free trial length and pricing are shown in the App Store at purchase time. Price changes are communicated per App Store policy. Refunds are processed by Apple.
    7.  Sharing of Information
We share personal data only as needed to operate and improve the Service:
    • Service providers / processors:
    • Firebase (Authentication, Firestore, Storage, Analytics, Crashlytics)
    • RevenueCat (subscription management)
    • Apple In-App Purchases (transactions and receipts)
    • LLM providers (e.g., OpenAI) for itinerary/content generation
    • Email providers for communications (for example, match notifications)
    • Community Matching: If you opt in, we may email you about potential matches. We do not publicly display your email or Instagram handle; we use them to facilitate matching and contact.
    • Business transfers: In a merger, acquisition, or asset sale, personal data may be transferred subject to this Policy.
    • Legal requirements: We may disclose information if required by law or to protect rights, safety, and security.

We do not sell personal information and we do not share personal information with third parties for their advertising purposes.
    8.  International Data Transfers
We and many of our processors are based in the United States. If you access the Service from outside the U.S., your data may be transferred to and processed in the U.S. and other countries that may have different data protection laws. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.
    9.  Data Retention
We retain personal data only as long as necessary for the purposes described or as required by law.
    • Account and profile: for the life of the account plus 30 days
    • Analytics (event-level): 18 months
    • Crash logs: 90 days
    • Transactions and receipts: as required by law and Apple policies
    • Itineraries and prompts: retained for your account access and product improvement; deleted upon account deletion (subject to routine backup cycles)
    • Aggregated or anonymized data: may be retained indefinitely (not identifiable)

    10. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal data; to object to or restrict certain processing; and to withdraw consent where processing is based on consent (such as location). We do not sell data and do not share for cross-context behavioral advertising; applicable opt-out rights are therefore not required.
To exercise rights or request account deletion, email contact@nomadii.co from your account email and include your name, the email used in Nomadii, and the request type. We may ask for additional verification. We will respond as required by applicable law.
Notifications and permissions: You can enable/disable notifications and location in iOS Settings at any time. You may also limit analytics in device settings where available.
    11. Children’s Privacy
The Service is not directed to children. We do not knowingly collect personal data from children under 16 in the EEA/UK or under 13 elsewhere. If you believe a child provided data, contact us and we will delete it.
    12. Security
We implement technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and least-privilege practices within our infrastructure (including Firebase security rules). No method of transmission or storage is completely secure.
    13. Beta Program
If you opt into Pro Beta access (including via the “Can’t afford” flow), you may receive early features that can be unstable. Beta participation may involve additional diagnostics and analytics to improve quality. You can withdraw at any time by emailing contact@nomadii.co. Standard retention timelines still apply.
    14. Third-Party Links and Services
The Service may link to third-party sites or services (e.g., Instagram). Their privacy practices are governed by their own policies.
    15. Do Not Track
Your browser may offer a “Do Not Track” signal. Our Service does not respond to DNT at this time.
    16. Changes to This Policy
We may update this Policy from time to time. We will post the updated version with a new effective date and, where required, notify you of material changes.
    17. Governing Law and Venue
Governing Law: Delaware, USA.
Venue: State and federal courts located in New York County, New York, USA.
    18. How to Contact Us
Email: contact@nomadii.co
Postal: Nomadii, LLC, Delaware, USA (email us for current mailing address)

Summary of Key Practices
    • No ads and no sale of data.
    • LLM use (OpenAI and, if used, other providers): minimal necessary prompts to generate itineraries; not used for advertising.
    • Location is optional; used for time zone, nearby relevance, and matching; controllable in iOS Settings.
    • Data rights: email us for access/correction/deletion; verification required.
    • Retention: account life plus 30 days; analytics 18 months; crash 90 days; transactions as required by law.